Edit tour

Windows Analysis Report
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n

Overview

General Information

Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmww
Analysis ID:	1540726
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Detected suspicious crossdomain redirect

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,8103378915802617690,6396049276166915808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /eventRegistration/eventRegistrationServlet HTTP/1.1Host: event.on24.comConnection: keep-aliveContent-Length: 260Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://event.on24.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; TS0af49cbe027=082972b052ab2000c41ddfe8bd24969becf4f3173cba0cb40b03cd6626745023f0a6661509c07fd208922e5a35113000a46cce06b10e980fe4d6e094f0d3ef813852fd532c9d6f4510444459cddbfe56dc6ff707fdcd1c161ffecdab62270e75

Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://bitmovin.com
Source: chromecache_117.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_117.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://jfbastien.github.io/papers/Math.signbit.html
Source: chromecache_117.2.dr	String found in binary or memory: http://jira.on24.com/browse/ELITE-13641
Source: chromecache_115.2.dr, chromecache_117.2.dr, chromecache_106.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_117.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://jsperf.lnkit.com/fast-apply/5
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://stackoverflow.com/a/28210364/1070244
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.fyneworks.com/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.fyneworks.com/jquery/xml-to-json/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.matts411.com/post/internet-explorer-9-oninput/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=1049982
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=773687
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://cloudconsole.on24.com
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=3509
Source: chromecache_117.2.dr	String found in binary or memory: https://creativemarket.com/blog/the-missing-guide-to-font-formats)
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://developer.apple.com/library/content/documentation/AudioVideo/Conceptual/Using_HTML5_Audio_Vi
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTTP/Browser_detection_using_the_user_agent
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://flow.org/blog/2017/05/07/Strict-Function-Call-Arity/).
Source: chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_106.2.dr	String found in binary or memory: https://gist.github.com/BrendanEich/4294d5c212a6d2254703
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/DavidBruant/Map-Set.prototype.toJSON
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/benjamingr/RexExp.escape
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/es-shims.
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/285
Source: chromecache_117.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/issues/1158
Source: chromecache_117.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/issues/3662
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/ljharb/proposal-is-error
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/mathiasbynens/String.prototype.at
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/nfriend/ts-keycode-enum/blob/master/Key.enum.ts
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/paldepind/snabbdom/blob/master/LICENSE
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/rwaldron/tc39-notes/blob/master/es6/2014-09/sept-25.md#510-globalasap-for-enqueui
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/sebmarkbage/ecmascript-string-left-right-trim
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/Array.prototype.includes
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-global
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-getownpropertydescriptors
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-values-entries
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-finally
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-try
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/tc39/proposal-string-pad-start-end
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/vuejs/vue-devtools
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/vuejs/vue/pull/7730
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/vuejs/vuex/issues/1505
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1008
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/280
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/306
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/339
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_106.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://hacks.mozilla.org/2013/04/detecting-touch-its-the-why-not-the-how/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/dom.html#phrasing-content
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/indices.html#elements-3
Source: chromecache_109.2.dr, chromecache_72.2.dr	String found in binary or memory: https://on24static.akamaized.net
Source: chromecache_72.2.dr	String found in binary or memory: https://on24static.akamaized.net/view/react-console/build/wrapperHelper.js?b=58.0.0
Source: chromecache_106.2.dr	String found in binary or memory: https://rwaldron.github.io/proposal-math-extensions/
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://services.on24.com/
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://services.on24.com/api/
Source: chromecache_117.2.dr	String found in binary or memory: https://stackoverflow.com/questions/16443642/scroll-bars-showing-up-when-not-expecting-them-line-hei
Source: chromecache_117.2.dr	String found in binary or memory: https://stackoverflow.com/questions/35111090/text-in-a-flex-container-doesnt-wrap-in-ie11
Source: chromecache_93.2.dr, chromecache_70.2.dr	String found in binary or memory: https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooti
Source: chromecache_93.2.dr, chromecache_70.2.dr	String found in binary or memory: https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-advancestringindex
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.reduce
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.reduceright
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-function-instances-name
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-get-regexp.prototype.flags
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getsubstitution
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.assign
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexp.prototype-
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexp.prototype.exec
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexpexec
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.codepointat
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.match
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/String.prototype.matchAll/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-advancestringindex
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexp.prototype-
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexpexec
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.match
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.search
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toindex
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatten
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-FlattenIntoArray
Source: chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-map.from
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-map.of
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-set.from
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-set.of
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.from
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.of
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.from
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.of
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://videoservice.on24.com/
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://vids-chat.on24.com
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://vuejs.org/guide/deployment.html
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://vuejs.org/guide/list.html#key
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://vuejs.org/v2/api/#data
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://vuejs.org/v2/guide/components.html#data-Must-Be-a-Function
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: https://vuejs.org/v2/guide/reactivity.html#Declaring-Reactive-Properties.
Source: chromecache_116.2.dr, chromecache_118.2.dr	String found in binary or memory: https://wcc.on24.com/secured/srvc/api/
Source: chromecache_95.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.on24.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49803 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/81@16/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,8103378915802617690,6396049276166915808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,8103378915802617690,6396049276166915808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.includes	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://kenwheeler.github.io	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.indexof	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	URL Reputation	safe
http://www.fyneworks.com/jquery/xml-to-json/	0%	Virustotal		Browse
https://github.com/mozilla/rhino/issues/346	0%	Virustotal		Browse
https://github.com/vuejs/vuex/issues/1505	0%	Virustotal		Browse
https://tc39.es/ecma262/#sec-arrayspeciescreate	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
vids-chat.on24.com	34.149.148.54	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
analytics-ingress-global.bitmovin.com	35.190.27.197	true	false	unknown
r-email.sg.on24event.com	199.83.44.68	true	false	unknown
r-event.on24.com	199.83.44.71	true	false	unknown
licensing.bitmovin.com	35.227.229.24	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
r-wcc.on24.com	199.83.44.37	true	false	unknown
event.on24.com	unknown	unknown	false	unknown
wcc.on24.com	unknown	unknown	false	unknown
email.sg.on24event.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://event.on24.com/eventManager/includes/registrant.jsp?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=xml	false	unknown
https://event.on24.com/wcc/webapi/service/timestamp	false	unknown
https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	false	unknown
https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373	false	unknown
https://event.on24.com/favicon.ico	false	unknown
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D	false	unknown
https://event.on24.com/view/react-console/build/24.4.1/const/index.js	false	unknown
https://event.on24.com/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js	false	unknown
https://event.on24.com/apic/console-survey/api/v1/poll/style?eventId=4667697&key=7EE4C286CEE7D6B1AA187A1912AE17F5	false	unknown
https://event.on24.com/apic/utilApp/CdnAssignmentCachedServlet?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=fhvideo1&streamNames=true&mode=getdashxml&ctype=A&streamnames=false	false	unknown
https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch	false	unknown
https://event.on24.com/utilApp/webapi/generate/generic/jwttoken	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_115.2.dr, chromecache_106.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/vuejs/vuex/issues/1505	chromecache_115.2.dr, chromecache_106.2.dr	false	0%, Virustotal, Browse	unknown
https://tc39.es/ecma262/#sec-toobject	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://fontawesome.io	chromecache_117.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_106.2.dr	false	1%, Virustotal, Browse	unknown
http://www.fyneworks.com/jquery/xml-to-json/	chromecache_115.2.dr, chromecache_106.2.dr	false	0%, Virustotal, Browse	unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.of	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://vuejs.org/guide/list.html#key	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/indices.html#elements-3	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://jqueryui.com	chromecache_115.2.dr, chromecache_117.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
http://bitmovin.com	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trim	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://github.com/kenwheeler/slick	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/rwaldron/tc39-notes/blob/master/es6/2014-09/sept-25.md#510-globalasap-for-enqueui	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/tc39/proposal-string-pad-start-end	chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-hasownproperty	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://creativemarket.com/blog/the-missing-guide-to-font-formats)	chromecache_117.2.dr	false		unknown
https://github.com/tc39/proposal-object-getownpropertydescriptors	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/tc39/proposal-array-filtering	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.filter	chromecache_106.2.dr	false		unknown
http://stackoverflow.com/a/28210364/1070244	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://vuejs.org/guide/deployment.html	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-map.from	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://vuejs.org/v2/api/#data	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperties	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://jfbastien.github.io/papers/Math.signbit.html	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-toindex	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-requireobjectcoercible	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatten	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-set.of	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/tc39/proposal-promise-finally	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/es-shims.	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://hacks.mozilla.org/2013/04/detecting-touch-its-the-why-not-the-how/	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.of	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/dom.html#phrasing-content	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/HTTP/Browser_detection_using_the_user_agent	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/306	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.from	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://kenwheeler.github.io	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://github.com/vuejs/vue/pull/7730	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&	chromecache_117.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/vuejs/vue-devtools	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.findIndex	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://rwaldron.github.io/proposal-math-extensions/	chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_106.2.dr	false		unknown
https://github.com/ljharb/proposal-is-error	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-advancestringindex	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.indexof	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/String.prototype.matchAll/	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-map.of	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
http://www.gnu.org/licenses/gpl.html	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.reduceright	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/mathiasbynens/String.prototype.at	chromecache_106.2.dr	false		unknown
https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooti	chromecache_93.2.dr, chromecache_70.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-FlattenIntoArray	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/tc39/proposal-global	chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/677	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-lengthofarraylike	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-iscallable	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/DavidBruant/Map-Set.prototype.toJSON	chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1008	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperty	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/280	chromecache_106.2.dr	false		unknown
https://tc39.es/ecma262/#sec-math.trunc	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://code.google.com/p/v8/issues/detail?id=3509	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://github.com/kenwheeler/slick/issues/1158	chromecache_117.2.dr	false		unknown
https://github.com/paldepind/snabbdom/blob/master/LICENSE	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://gist.github.com/BrendanEich/4294d5c212a6d2254703	chromecache_106.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=773687	chromecache_115.2.dr, chromecache_106.2.dr	false		unknown
https://cloudconsole.on24.com	chromecache_116.2.dr, chromecache_118.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.83.44.71	r-event.on24.com	United States	18742	ON24-SACUS	false
199.83.44.68	r-email.sg.on24event.com	United States	18742	ON24-SACUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540726
Start date and time:	2024-10-24 02:56:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/81@16/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 172.217.18.110, 64.233.166.84, 34.104.35.123, 2.16.164.57, 2.16.164.96, 172.202.163.200, 199.232.214.172, 142.250.184.202, 172.217.18.106, 172.217.23.106, 142.250.184.234, 142.250.186.42, 142.250.185.74, 216.58.206.42, 142.250.185.106, 216.58.206.74, 172.217.18.10, 142.250.185.138, 142.250.186.106, 172.217.16.202, 142.250.185.234, 142.250.185.202, 142.250.186.170, 192.229.221.95, 20.3.187.198, 13.85.23.206, 216.58.206.35, 142.250.184.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, on24static.akamaized.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, a744.dscw10.akamai.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "NOT REGISTERED YET? CLICK HERE!", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Work Email *" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: claude-3-haiku-20240307	```json { "brands": [ "ON2" ] }
	```json { "brands": [ "ON2" ] }
URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "NOT REGISTERED YET? CLICK HERE!", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Work Email *" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: claude-3-haiku-20240307	```json { "brands": [ "ImageTrend" ] }
	```json { "brands": [ "ImageTrend" ] }
URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: gpt-4o	```json{ "legit_domain": "on24.com", "classification": "known", "reasons": [ "The URL 'event.on24.com' is a subdomain of 'on24.com', which is a legitimate domain associated with the brand ON24.", "The brand name 'ON2' is likely a typo or misinterpretation of 'ON24', which is a known brand providing webcasting and virtual event services.", "The domain 'on24.com' matches fully with the legitimate domain name associated with the brand ON24.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The presence of a subdomain 'event' is typical for event-related services and does not inherently indicate phishing." ], "riskscore": 2}
URL: event.on24.com Brands: ON2 Input Fields: Work Email *
URL: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Model: gpt-4o	```json{ "legit_domain": "imagetrend.com", "classification": "unknown", "reasons": [ "The URL 'event.on24.com' does not match the typical domain for ImageTrend, which is 'imagetrend.com'.", "ON24 is a known platform for hosting virtual events and webinars, which might explain the use of 'event.on24.com'.", "There is no direct association between ImageTrend and ON24, making it difficult to verify the legitimacy based on the URL alone.", "The brand 'ImageTrend' is not widely recognized, hence classified as 'unknown'.", "The presence of a generic input field like 'Work Email' is common in phishing sites, but also in legitimate event registration pages." ], "riskscore": 6}
URL: event.on24.com Brands: ImageTrend Input Fields: Work Email *

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 235472, version 0.0
Category:	downloaded
Size (bytes):	235472
Entropy (8bit):	7.995452823016873
Encrypted:	true
SSDEEP:	3072:Repl8aYiRWInj2XtWQVLUMggrEUrgcLVsnEjZulXZX1eBvNhv3yoA6BfmijnWN3T:R28dijkW0ggwUrJcCZwZFQPq5KfraME
MD5:	A1F67B3626AA6C1DDE47A21214A2BACD
SHA1:	FB5BFEF666DB079A581438CAFA4990A72CF60EF1
SHA-256:	4DE12927BA915B8E2C311F0F99DE411118D7C8143513CE3F78068F6F44B0C4B2
SHA-512:	223D1AD1B1BA7B4D267430F758F6DCC9DE618452A8EC68F7A4C4F3B81443B4757D66328CCCAAD6A0F236A6CA5A7B9E9855E667A0DDB4884FD17DAE13A9E84C58
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/fonts/font-segoe_ui/segoeui.woff
Preview:	wOFF........................................FFTM............6...GDEF..,....y.......tGPOS..6\|..a8.....v.GSUB...4...H......Z%OS/2.......`...`RUJ.cmap............X...cvt ..&....]....^lG.fpgm.......D.....<.glyf..D.........=.1Phead.......1...6....hhea.......!...$... hmtx...X......-PH.e.loca..(X...1..-T.t.maxp....... ... .}..name...X........8...post......3...w .5..prep..!............Hx.c`d```e....E(...+.4.........z......$.:.P..&...x.c`d`.X...#/....+..1.E..w.....Z........T....._......./.e.............i.........3.......3.....f................"........)....MS .@.......Q......`........... . ..x...pU.u.._O..(X..+"B.XP.d.....R..XQe..UEa.JT.0.J..+.bF!..+....f.e.eL)}.l...P.RJ..2....L..X......x.!<e...w...s...r.JB..;...J.t.a..zg..9..[#.._..qYo.5`.=S.r6..1v..B...i.../......[@S.n........X...n...-...0.M..e..C.K.>+Iw...$i.....;[../..x..J..YNsH..)..)..w.lu....R.....e..E...N..3v.{.-5.P.svH..b.;.xi.V.D.^%..E.{...f...$....{~.....2..).x.j..!.A.nw......;....s......G.G>..<

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1454
Entropy (8bit):	7.7959366611713214
Encrypted:	false
SSDEEP:	24:B/6hFMMDyc7qc8GNxf+T1V8oxIYeIMCRk/5OID9yYjYY8QM8rhvBXtdSz3E:B/6hF3DydcVU/QYl7yQID9jx8Q3VvBXP
MD5:	6CBF43F3AE1D079B7D7C90F1F73E9C97
SHA1:	6F51609F2F11FDE6C663AFFD85924DC01D4CC85C
SHA-256:	EE3F6AEC6430D78E4189049F3C4523D5448EF71759860BAA62A8202ED89F679C
SHA-512:	9684B3FF73075B1AB1893CDA345E6C9B126C1ED7C352EC36849E13179DE084255E9307F7B007E47DBF216A70BF663A41BA4E866A9F2416930792EF1B75BE0ADC
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/images/PoweredByIcon.png
Preview:	.PNG........IHDR...V...&.....^tl6....pHYs................`IDATx...M+;..S..6....B.4..@..@. ...}..^S...;"....?..\.koB...HVv....f<.{a2.L&''''].v]..u].L.X..`91.?....y?.N.z?vL.k.P>.K..y.\....../...f.....xx....................i..=..=.wvv....l....\|\|l..oT..i.v... _e......z..Cjs>......{...> :I....U..q.... ...K1$.R._.7.......V......b.U...V{p.....).qq..Pj0X.y.B...V..=.#..)._.u..9............0..a..8..].t...Vyt.rt...,...<..4....<mz..Xw?..:.\....U..a:J....,S].S..U..q...5....W....f...m. py..E.V..j...3@..^V....<..\|..u\|a.Q`..i6."....Ku.5.=.2.F...K....;(....&.Q.E...H.....V!G.'..{i..M....VI,p^....'....Y.Z....&....K#1..%:[+].[.K.}PJJb\.J...\|.8....`cl...h.s...}}}e-15P.}...............(.)....x.+p@..".7.V..].....rs}.q...!..e.. .v.....V..:..R..%.[.K...e.Y.osa!...6.(..N.+y6.vc.K....!.E..S...s.&#i..Z...*..A......W..)V.}..A.W...l<.(i.u.]....KE.)..O.....K...W.#..4.....6.....N.b..o...].CK-.Q..`}p.q.Z.s.%b....HX.w..Z.<.H..f.1...[j..k..N..x.........8.S.@Jv.....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	31052
Entropy (8bit):	4.833709554008987
Encrypted:	false
SSDEEP:	192:dj1rXxbO2F4SJkEuPRKNJ9AoEYCkQmCsCiCECICICsCgCj+FX3TFR+ymo/ukB39X:BkhRPpNNRFZoG2AmS36nS+su
MD5:	86CB470FE69D1F6AB1F3B60C30FDE6E7
SHA1:	6E2EDF1E73B9CEEB781AAD2323823C3B089E2E6A
SHA-256:	60D77D204E3E8834A420CCC0A7C59F83B99F4F1DCF2F09C3C38428350D855C19
SHA-512:	21C9DFCBD1F4530B6529A212FEBFC51B19F7F362F600ABCA294F2EA648C8DF8B27F2EA80835525F9169BD87CAFE8895BE49711335C65C09328417B5021F8D095
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=registration&mode=login&random=0.4621875418947743
Preview:	{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712487","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"reg_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712488","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"321912429","index":"1","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"display

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1454
Entropy (8bit):	7.7959366611713214
Encrypted:	false
SSDEEP:	24:B/6hFMMDyc7qc8GNxf+T1V8oxIYeIMCRk/5OID9yYjYY8QM8rhvBXtdSz3E:B/6hF3DydcVU/QYl7yQID9jx8Q3VvBXP
MD5:	6CBF43F3AE1D079B7D7C90F1F73E9C97
SHA1:	6F51609F2F11FDE6C663AFFD85924DC01D4CC85C
SHA-256:	EE3F6AEC6430D78E4189049F3C4523D5448EF71759860BAA62A8202ED89F679C
SHA-512:	9684B3FF73075B1AB1893CDA345E6C9B126C1ED7C352EC36849E13179DE084255E9307F7B007E47DBF216A70BF663A41BA4E866A9F2416930792EF1B75BE0ADC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...&.....^tl6....pHYs................`IDATx...M+;..S..6....B.4..@..@. ...}..^S...;"....?..\.koB...HVv....f<.{a2.L&''''].v]..u].L.X..`91.?....y?.N.z?vL.k.P>.K..y.\....../...f.....xx....................i..=..=.wvv....l....\|\|l..oT..i.v... _e......z..Cjs>......{...> :I....U..q.... ...K1$.R._.7.......V......b.U...V{p.....).qq..Pj0X.y.B...V..=.#..)._.u..9............0..a..8..].t...Vyt.rt...,...<..4....<mz..Xw?..:.\....U..a:J....,S].S..U..q...5....W....f...m. py..E.V..j...3@..^V....<..\|..u\|a.Q`..i6."....Ku.5.=.2.F...K....;(....&.Q.E...H.....V!G.'..{i..M....VI,p^....'....Y.Z....&....K#1..%:[+].[.K.}PJJb\.J...\|.8....`cl...h.s...}}}e-15P.}...............(.)....x.+p@..".7.V..].....rs}.q...!..e.. .v.....V..:..R..%.[.K...e.Y.osa!...6.(..N.+y6.vc.K....!.E..S...s.&#i..Z...*..A......W..)V.}..A.W...l<.(i.u.]....KE.)..O.....K...W.#..4.....6.....N.b..o...].CK-.Q..`}p.q.Z.s.%b....HX.w..Z.<.H..f.1...[j..k..N..x.........8.S.@Jv.....

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	5211175
Entropy (8bit):	5.506986422528907
Encrypted:	false
SSDEEP:	49152:Y/054QSxbqVyOCbxHf+ldFQKLzkoFJ7rcPMqdmbR2qrBhjEgoRYXnaqYUMGBNz0C:Y8O2d8U31BASD
MD5:	6D3B47EE2826BCA50572424CF77343E1
SHA1:	9F4930F72E80A98196743997333D9E669620C773
SHA-256:	48E5B8657138ECBB3D10EDFBC68E1636131B2160CC29E2554007078272D49155
SHA-512:	2A1E3B1EAD9D98995C801A8437FEB69776FA03A4DC3F654AEBF2CFCD47CD5169E80D0791DD5CBE553DFE203A364565FAFDD15E4B43F7E52BCF7995232CEB2583
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	dropped
Size (bytes):	3793
Entropy (8bit):	4.665563207058073
Encrypted:	false
SSDEEP:	48:MzQC+PWERtOLbFuD/ooTlxbFyvN31lFN8HNfAOgWwGHVublHUAZ5vBTKjvQ1dq0g:POLu/tlxByvNTFWNwGH0lHvIydq0COH0
MD5:	97BB77D64308A621DEC4C210E23B600D
SHA1:	CC3DC0DA0E785C1F2A1626727FFACC3647D3A2D6
SHA-256:	BBD6B0B35A256201D3E47629BFCAEEDB6CB2EAA30FE802E21AE24BAAB1269736
SHA-512:	41BF76CC3CA5AD3A73ABC121849FB6B8C32B0B67B4F31DC8E7C32CD80800CB5E8EEF60D7BE19748D06315A7E9E8122FAEFFCBA3D6004E38BF9B92B7077115E7C
Malicious:	false
Reputation:	low
Preview:	(function main() {. const MAX_APPEND_ATTEMPTS = 5;. let attempt = 0;.. function getHtmlString() {. return fetch(`${customBuildPath \|\| '/view'}/react-console/build/`).then((htmlContent) => htmlContent.text());. }.. function getHtmlBlocks(htmlString) {. return {. headContent: (/<head[^>]>((.\|[\n\r]))<\/head>/im).exec(htmlString)[1],. bodyContent: (/<body[^>]>((.\|[\n\r]))<\/body>/im).exec(htmlString)[1],. };. }.. function parseHtml() {. return getHtmlString().then((htmlString) => getHtmlBlocks(htmlString));. }.. function replaceDomain(url, domain) {. const newUrl = new URL(url);. const targetUrl = new URL(domain);. newUrl.hostname = targetUrl.hostname;. return newUrl.href;. }.. function appendContent(children, parentEl) {. const cdnUrl = window.staticCDNURL \|\| '';. for (let i = 0; i < children.length; i++) {. if (children[i].tagName === 'SCRIPT') {.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6784
Entropy (8bit):	4.813696734253617
Encrypted:	false
SSDEEP:	192:nNtTy7zyprRAd++qqymKaKcZvKXNGPscx14ZRFrZrBqaW:N5y7epVALqsvq5Z96
MD5:	7F41394AFEDC394AF6D217A98A365484
SHA1:	E71D36D58C37371980F771535FA0F8590E41B981
SHA-256:	DDA61054A31CB53E1A8A2A87CD400442A305F6487A33AD05F0FC601C304EA474
SHA-512:	B971EFBA0D7251654ABBB32DD43860001F1BDB50839A4C46E83EDBBE3CA5F003763DC1F74FEB7619EB6F35CD830F62EC94B676F2A0E4405F47E572AD05D86DEC
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/react-console/build/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta http-equiv="Pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate" />. <script src="/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js"></script> -->. <script type="text/javascript">. var queryParams = new URLSearchParams(window.location.search);. var version = queryParams.get('version');. window.version = (version \|\| window.releaseVersion);. var rootPath = `${(window.staticCDNURL \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;. var localHost = `${window.location.protocol}//${window.location.host}`;. var rootPathLocal = `${(window.location.protocol + '//' + window.location.host \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2902
Entropy (8bit):	4.973436691875387
Encrypted:	false
SSDEEP:	48:CaDPgEK+i7jCCHYRW+h8mRwthgvOFQnNwVo0:CaDott/BHY4+h8mRwthgCQOa0
MD5:	F5C8D0700C8F133D3AA4CCEEA3B8C8A4
SHA1:	2D57FC05A12A44ABC7D018C4DD753AC920FEC748
SHA-256:	582D5AFECB8768B62439194EEDD0D9FF48155004434C07C8E9F8C2A8CC63E760
SHA-512:	8C3FC081EBE7687A8E801AA5669BF984BEB09245D3DBFD599250A2A3AEF02999F0517343ABC1DB389AD13F802C85D2A278613471F9B99C1B44A9317FC21EFF82
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us
Preview:	...........<!doctype html>.<html lang="en">..<head>...<meta charset="utf-8">...<meta http-equiv="X-UA-Compatible" content="IE=edge">...<title>Interpreting EMS Research Abstracts</title>.. . ...........<meta name="viewport" content="width=device-width, initial-scale=1">........<base href="https://on24static.akamaized.net">..... ... <meta name="twitter:card" content="summary"/><meta name="twitter:title" content="Interpreting EMS Research Abstracts" />... <meta property="og:title" content="Interpreting EMS Research Abstracts" />... .. .. ... <meta name="description" content="Tuesday, October 22, 2024 at 11:00 AM Central Daylight Time. " >... <meta name="twitter:description" content="Tuesday, October 22, 2024 at 11:00 AM Central Daylight Time. " />... <meta property="og:description" content="Tuesday, October 22, 2024 at 11:00 AM Central Daylight Time. " />.. .. .. ... <meta name="twitter:image" content="" />... <meta property="og:im

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	dropped
Size (bytes):	38950
Entropy (8bit):	4.718834055394851
Encrypted:	false
SSDEEP:	768:uPAZTbTKmBi6976YgYcVT0NecVTyucwBA7XQw+7w8T:3xiw
MD5:	0F042782BB77E05BAC5C67683712C17F
SHA1:	9B0DE34D75DC5448AC773D3DFFFE40DF496F72D7
SHA-256:	33C1EBC20F0BAAEE7475FD82A3F1CE7307EBFCF166010A9C4C9140A48D427C88
SHA-512:	D2518269F917086C2EC2388EC6EABF53987B6472865ABB516E7F00E8F87D2E2FDA222D5822942C70304410992836A69961052751042FF56F0D6AA35C5BF44C2E
Malicious:	false
Reputation:	low
Preview:	<div id="vueTpl">. <div id="banner" v-if="!!bannerSrc">. <img id="bannerImg" :src="bannerSrc" :alt="bannerAlt" tabindex="0" />. </div>.. <div id="contentWrapper">. <overview :d="overviewData"></overview>.. <div id="layout-container" class="flex-container". :class="registerData.is2ColLayout && registerData.isRightAlign === false ? 'swapLR' : ''">. <div id="contentLeft" v-if="!hideLeftCol">. <div id="realLeftContent" class="realContent">. <summary2 v-if="registerData.is2ColLayout" ref="summaryy" :d="summaryData"></summary2>. <summaryy v-else ref="summaryy" :d="summaryData"></summaryy>. </div>. </div>. <div id="contentRight" :class="isHybridMode() && !isLobby && urlPara.showqrcode=='y'?'showQRcode large':''">. <div id="realRightContent" class="realContent">. <register v-if="errorData.errorCode=='loginlocked' && !nee

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31052
Entropy (8bit):	4.833709554008987
Encrypted:	false
SSDEEP:	192:dj1rXxbO2F4SJkEuPRKNJ9AoEYCkQmCsCiCECICICsCgCj+FX3TFR+ymo/ukB39X:BkhRPpNNRFZoG2AmS36nS+su
MD5:	86CB470FE69D1F6AB1F3B60C30FDE6E7
SHA1:	6E2EDF1E73B9CEEB781AAD2323823C3B089E2E6A
SHA-256:	60D77D204E3E8834A420CCC0A7C59F83B99F4F1DCF2F09C3C38428350D855C19
SHA-512:	21C9DFCBD1F4530B6529A212FEBFC51B19F7F362F600ABCA294F2EA648C8DF8B27F2EA80835525F9169BD87CAFE8895BE49711335C65C09328417B5021F8D095
Malicious:	false
Reputation:	low
Preview:	{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712487","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"reg_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712488","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"321912429","index":"1","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"display

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	574081
Entropy (8bit):	5.930165414830346
Encrypted:	false
SSDEEP:	6144:0QX545+aINtf0Wb8bbCByI5KSnJ7s0MLEa6wGP0ZaJ8ZPo:0q45230Wb8PCx5KSnJ/MLi/dJ8ZQ
MD5:	B0330437B4E383BD2F0E624738018AFF
SHA1:	1C2F5E8CEF5F60674B6973FEB66EB9B5D101EB10
SHA-256:	3F1DF6A97CBD7174177ACE37B92FB53DD5D59C4781650CD1AE8DBC8523B3427C
SHA-512:	E49293E2AD2697CB4F72141C76870B9A5ED8300C99273E2B4529D79DAA4EAAF5FCC13E484141B4C672CAF18EDA04F33F3DEAFA3C239012FFE675C895C5D6520F
Malicious:	false
Reputation:	low
Preview:	(this["webpackJsonpapollo-x"]=this["webpackJsonpapollo-x"]\|\|[]).push([[0],{208:function(e,t,n){},279:function(e,t,n){"use strict";n.r(t);var i,o,a,r=n(7),c=n(0),s=n.n(c),l=n(59),d=n.n(l),u=n(16),f=(n(208),n(5)),m=n(2),b=n(15),v=n(28),g=n(51),p=n(189),A=n(312),h=n(13),O=n(84),w=n(6),j=n(14),x=n(11),C=n(309),y=["title","titleId"];function S(){return S=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e},S.apply(this,arguments)}function k(e,t){if(null==e)return{};var n,i,o=function(e,t){if(null==e)return{};var n,i,o={},a=Object.keys(e);for(i=0;i<a.length;i++)n=a[i],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(i=0;i<a.length;i++)n=a[i],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}function E(e,t){var n=e.title,r=e.titleId,s=k(e,y);return c.createElem

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12596
Entropy (8bit):	4.757176782653038
Encrypted:	false
SSDEEP:	192:iJ7wjc1c90nUNAUJ+FKHFdLH7sVHvm62tHT9D4W1zgaeCOXiG+BcwOplgjN7G6sA:8BGZLz7s1mJSaeCDBmDDMd
MD5:	CDC1DD374F940116BA63A86691394DBC
SHA1:	69D17B6099FC7C4362F793E3754D248852793FB0
SHA-256:	A901D54EDD59210C4FDAF72EA6FADF828C1FC0385A671487E7A7A98CE6BF10F1
SHA-512:	93EBC808EBC1E4CF98A79B726BA8AF4B73210796BDE911FE93217A2BE463EA96F056BDDA9A0979C71A41F79C867B101CAA51B3E231108E4EF5E51412CA4F8F1F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dictionary/dictionary.en.js?b=0007823747865
Preview:	{."add.event.to.calendar": "Add this event to your calendar",."add.event.to.google.calendar.html": "Google Calendar",."add.event.to.google.calendar.image.text": "Add Event to Google Calendar",."add.event.to.google.calendar.text": "To add this event to your Google calendar, please go to this URL:",."add.event.to.outlook.calendar.html": "Outlook/iCal",."add.event.to.outlook.calendar.image.text": "Add Event to Outlook/ICal Calendar",."add.event.to.outlook.calendar.text": "To add this event to your Outlook/iCal calendar, please go to this URL:",."already.registered": "If you have previously registered for this event, please login below:",."apply.coupons": "Please apply coupons before submitting",."best_webcast_experience": "For the best webcast experience, please use",."check.box.continue": "Please check the box to continue",."chrome_browser": "Chrome Browser",."company.banner.image.text": "Company Banner",."computer.speakers.image.active": "Listen With Computer Speakers",."computer.speake

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62522
Entropy (8bit):	5.237440299338309
Encrypted:	false
SSDEEP:	768:rH+LVnfbq5JBWgg+/JudzUo7UJL89Ok7BSP6CkQejSBSY77esIfdzo2:b0x5WeSesI1zo2
MD5:	26569A505AFDB5E752078913CF13A169
SHA1:	E45AAC9C379424723040A10438E1B2E6108C68B8
SHA-256:	0AD24D9AF6C3902FDDB988593C960C5D137CA46EA1A4214229D6434E33382C02
SHA-512:	6A51573181B9F68371C7CA50B3A99E0169618A7D6076934EBDA0C49ECAF95B037FCB0374AFDF1804ED0FAB437A56861E3A03FE88ABA1C6DFE097DE81470B7700
Malicious:	false
Reputation:	low
Preview:	{"event":{"id":"4667697","name":"null","description":"Interpreting EMS Research Abstracts","localelanguagecode":"en","localecountrycode":"null","clientid":"49053","clientname":"eliteImageTrendInc","displaytimezone":"Central Daylight Time","displaytimezoneshort":"CDT","goodafter":"1729612800000","playerurl":"https://event.on24.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration","registrationurl":"https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg30.jsp","campaignCode":"null","itemsOfInterest":"null","formattedeventdate":"Tuesday, October 22, 2024 - 11:00 AM Central Daylight Time","localizedeventdate":"Available On Demand","localizedeventtime":"","lockRegScheduleOn":"true","isinarchiveperiod":"true","localizedarchivestartdate":"Tuesday, October 22, 2024","localizedarchivestarttime":"12:15 PM Central Daylight Time","localizedarchiveenddate":"Wednesday, October 22, 2025","localizedarchiveendtime":"12:15 PM Central Daylight Time","minutestolive":"-1","

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	5211175
Entropy (8bit):	5.506986422528907
Encrypted:	false
SSDEEP:	49152:Y/054QSxbqVyOCbxHf+ldFQKLzkoFJ7rcPMqdmbR2qrBhjEgoRYXnaqYUMGBNz0C:Y8O2d8U31BASD
MD5:	6D3B47EE2826BCA50572424CF77343E1
SHA1:	9F4930F72E80A98196743997333D9E669620C773
SHA-256:	48E5B8657138ECBB3D10EDFBC68E1636131B2160CC29E2554007078272D49155
SHA-512:	2A1E3B1EAD9D98995C801A8437FEB69776FA03A4DC3F654AEBF2CFCD47CD5169E80D0791DD5CBE553DFE203A364565FAFDD15E4B43F7E52BCF7995232CEB2583
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dist/reg30BundleJS-0007823747865.gz.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	5.394021261260192
Encrypted:	false
SSDEEP:	24:b7SHLwxIx3Fx4tOxvDRHEaR1/RA6lgRMbDR6EpjduRIgxMN2u+yOMJG1rHNfh:b7SHLMkH4stEIvtRdKpaGdX
MD5:	9ECF88D5E8086934FA918E9CC19B5A44
SHA1:	024460EE5D9216B12778A95A02C015D2A5A2C2B7
SHA-256:	650E17C6F54CDF8733F9D5AA16DF19F0EB6D7340214B9ED248357A706110CC1B
SHA-512:	FBF17BCA10F842209F499F3A4FA5CE850B936AB39E60CD8A972ED020CC0F1961E3A076E22F58DB2D22B3350EDE1EC717AC182FC4AF0841CA377E2F8321ED1E8B
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/const/prod-const.js?b=58.0.0
Preview:	if (!window.on24) window.on24 = {};..if (!window.on24.appConstants) window.on24.appConstants = {};....window.on24.appConstants = {.. ...window.on24.appConstants,.. onDemandAudioPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. onDemandVideoPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. hlsSharedCount: 10,.. backgroundImagePrefix: 'https://' + window.location.host + '/event/',.. videoClipPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. GROUP_CHAT_WS: window.location.protocol.indexOf('http:') > -1 ? 'ws://wcc-chat.on24.com/xmpp/' : 'wss://wcc-chat.on24.com/xmpp/',.. GROUP_CHAT_HTTP: `${window.location.protocol}//wcc-chat.on24.com/http-bind/`,.. GROUP_CHAT_DOMAIN: 'wcc-chat.on24.com',.. BKR_CONTROL_SERVER_URL: 'https://videoservice.on24.com/',.. BKR_CHAT_MAX_CAPACITY: 500,.. REACTIONS_SERVICE_URL: 'https://vids-chat.on24.com',.. ON24_SERVICES_URL

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	110903
Entropy (8bit):	5.193631501736866
Encrypted:	false
SSDEEP:	1536:t1S2P6XtI+A4GDUI+Y9rpVljhiIEkj4jNb1jQl1me6zvZplZLOk8I:+XtI+AFDP+YVzljhiI4QkpDN
MD5:	2304E9C7BCB3CDF51B65AA8A2C9F8919
SHA1:	0CB026033AC28E683724F87925D299E3ECFC60C2
SHA-256:	009EA457FF3FF823D24E01032A8725E573018B35DDFBB7F28C67F6F58998E502
SHA-512:	35884C1F2F5A9EEA674630019F670B43453199961F3DACC25ACD8FEE5B2CF16CF8090154353D48D883080DC1ECD1CF6B0CF59CC008A775EA5999910F4585CDA3
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dist/reg30BundleCSS-0007823747865.gz.css
Preview:	/! jQuery UI - v1.12.1 - 2018-06-10. http://jqueryui.com.* Includes: draggable.css, core.css, resizable.css, selectable.css, sortable.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, progressbar.css, selectmenu.css, slider.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&offsetTopShadow=0px&thicknessShadow=5px&opacityShadow=30&bgImgOpacityShadow=0&bgTextureShadow=flat&bgColorShadow=666666&opacityOverlay=30&bgImgOpacityOverlay=0&bgTextureOverlay=flat&bgColorOverlay=aaaaaa&iconColorError=cc0000&fcError=5f3f3f&borderColorError=f1a899&bgTextureError=flat&bgColorError=fddfdf&iconColorHighlight=777620&fcHighlight=777620&borderColorHighlight=dad55e&bgTextureHighlight=flat&bgColorHighlight=fffa90&iconColorActive=ffffff&fcActive=ffffff&borderColorActive=003eff&bgTextureActive=fla

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1537
Entropy (8bit):	5.394021261260192
Encrypted:	false
SSDEEP:	24:b7SHLwxIx3Fx4tOxvDRHEaR1/RA6lgRMbDR6EpjduRIgxMN2u+yOMJG1rHNfh:b7SHLMkH4stEIvtRdKpaGdX
MD5:	9ECF88D5E8086934FA918E9CC19B5A44
SHA1:	024460EE5D9216B12778A95A02C015D2A5A2C2B7
SHA-256:	650E17C6F54CDF8733F9D5AA16DF19F0EB6D7340214B9ED248357A706110CC1B
SHA-512:	FBF17BCA10F842209F499F3A4FA5CE850B936AB39E60CD8A972ED020CC0F1961E3A076E22F58DB2D22B3350EDE1EC717AC182FC4AF0841CA377E2F8321ED1E8B
Malicious:	false
Reputation:	low
Preview:	if (!window.on24) window.on24 = {};..if (!window.on24.appConstants) window.on24.appConstants = {};....window.on24.appConstants = {.. ...window.on24.appConstants,.. onDemandAudioPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. onDemandVideoPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. hlsSharedCount: 10,.. backgroundImagePrefix: 'https://' + window.location.host + '/event/',.. videoClipPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. GROUP_CHAT_WS: window.location.protocol.indexOf('http:') > -1 ? 'ws://wcc-chat.on24.com/xmpp/' : 'wss://wcc-chat.on24.com/xmpp/',.. GROUP_CHAT_HTTP: `${window.location.protocol}//wcc-chat.on24.com/http-bind/`,.. GROUP_CHAT_DOMAIN: 'wcc-chat.on24.com',.. BKR_CONTROL_SERVER_URL: 'https://videoservice.on24.com/',.. BKR_CHAT_MAX_CAPACITY: 500,.. REACTIONS_SERVICE_URL: 'https://vids-chat.on24.com',.. ON24_SERVICES_URL

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3341), with CRLF line terminators
Category:	dropped
Size (bytes):	3392
Entropy (8bit):	5.3360159371834746
Encrypted:	false
SSDEEP:	96:E6Fhb6+CBiTlU3UcR8dA/TLmohpZmqX6b5:3b6+CITlU3UcydsT9pMa6b5
MD5:	97C347B7E994271D08B0C8470DAAE8E2
SHA1:	C63A9E1AA69EB8BCE7D3BA7D80CA04BC70A1B41A
SHA-256:	063168ECCF82BD8A291AB4EA5105A5036254086EE1826628DF977DC7B42073BC
SHA-512:	CA5D08927A58D5B91D62B523BBB11DB32C41D419F9AEC8DE91BC519980E80B9FFA4039E0A3D0932911FC65E56C09859441078E309C849A757402891B2E34323F
Malicious:	false
Reputation:	low
Preview:	!function(e){function t(t){for(var n,o,c=t[0],i=t[1],l=t[2],f=0,d=[];f<c.length;f++)o=c[f],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&d.push(a[o][0]),a[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);d.length;)d.shift()();return u.push.apply(u,l\|\|[]),r()}function r(){for(var e,t=0;t<u.length;t++){for(var r=u[t],n=!0,o=1;o<r.length;o++){var i=r[o];0!==a[i]&&(n=!1)}n&&(u.splice(t--,1),e=c(c.s=r[0]))}return e}var n={},o={1:0},a={1:0},u=[];function c(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,c),r.l=!0,r.exports}c.e=function(e){var t=[];o[e]?t.push(o[e]):0!==o[e]&&{7:1}[e]&&t.push(o[e]=new Promise((function(t,r){for(var n="static/css/"+({}[e]\|\|e)+"."+{3:"31d6cfe0",4:"31d6cfe0",5:"31d6cfe0",6:"31d6cfe0",7:"7b0168e2",8:"31d6cfe0"}[e]+".chunk.css",a=c.p+n,u=document.getElementsByTagName("link"),i=0;i<u.length;i++){var l=(s=u[i]).getAttribute("data-href")\|\|s.getAttribute("href");if("stylesheet"

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62522
Entropy (8bit):	5.237437569853632
Encrypted:	false
SSDEEP:	768:rH+LVnfRq5JBWgg+/JudzUo7UJL89Ok7BSP6CkQejSBSY77esIfdzol:b+x5WeSesI1zol
MD5:	E33961213FC5CD081E346A8F5900BC90
SHA1:	1FBBD7A3A253874C5056377C59449CB38E23FE0C
SHA-256:	080BCB93DF36C063044304DEB3F07DC11F5448FEC30527CF51793ADDC8D9FCA1
SHA-512:	5B82D1309A9486D7555E42C8C19DDDEDCED387CE773ECA2ED65C57D2EE261AF6C692D9A994CF5563D8B15BEDD1F75A32B2A8EE5820FC153F295CFBD2F8B9C17B
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/EventServlet?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&random=0.9347843741463768&filter=json
Preview:	{"event":{"id":"4667697","name":"null","description":"Interpreting EMS Research Abstracts","localelanguagecode":"en","localecountrycode":"null","clientid":"49053","clientname":"eliteImageTrendInc","displaytimezone":"Central Daylight Time","displaytimezoneshort":"CDT","goodafter":"1729612800000","playerurl":"https://event.on24.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration","registrationurl":"https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg30.jsp","campaignCode":"null","itemsOfInterest":"null","formattedeventdate":"Tuesday, October 22, 2024 - 11:00 AM Central Daylight Time","localizedeventdate":"Available On Demand","localizedeventtime":"","lockRegScheduleOn":"true","isinarchiveperiod":"true","localizedarchivestartdate":"Tuesday, October 22, 2024","localizedarchivestarttime":"12:15 PM Central Daylight Time","localizedarchiveenddate":"Wednesday, October 22, 2025","localizedarchiveendtime":"12:15 PM Central Daylight Time","minutestolive":"-1","

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7339
Entropy (8bit):	4.7585213691887
Encrypted:	false
SSDEEP:	192:dsm8rIeUmljSS3d7VFQFB/eVXynz0ufNm8oDDD:Ox2U
MD5:	8E6E87BF0BB2159DE7C6E78FD7A322FC
SHA1:	8DCB4C39BA6ED036AF030AB69C8D585636A4B43C
SHA-256:	09DF00AA3EE7DDED3BFFCA4DE9A0DD5411B39CC9EE198750AA823B2A0D416B1D
SHA-512:	49D75C51E33B9CF98E1F66E94229697F5F204C4BEDBB84FB3CD791B2E79A77A61E82BBA0CB6A2062C6D8469D59783453412D528D4DF0AD159FF0E50CC371949E
Malicious:	false
Reputation:	low
Preview:	{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712460","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"lobby_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712461","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"321912429","index":"1","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"23

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6676
Entropy (8bit):	4.853417499279645
Encrypted:	false
SSDEEP:	96:sV3yoDibiwLIQ85x+xA/p+krjGOegMPMouPD8/WAsaPUIycSLGlGfEat6:MvUkP+krjGO9MPJuPDLAsaPRydGlGsH
MD5:	3D035B8CC96517CE5958017C3528F97C
SHA1:	A3987A502E3B6FDAB074143D054598497365D696
SHA-256:	FF6DD3A8151ECE3F195F7B551AA0907D732092A4A1E7B89C7B8A6592C7EF8F93
SHA-512:	FF6A1E7C78B59BA63D32C48A450E721D0E54BC234887BD0F43C4B6B434CFE52A6D330762C08F6CE9BC7657B65301DA963A442367180C5944E005B0AEEF887ECB
Malicious:	false
Reputation:	low
Preview:	var searchParams = new URLSearchParams(window.location.search);..var preventMaximize = searchParams.get('preventMaximize') === 'true';....if (!window.on24) window.on24 = {};..window.on24.clientProperties = {..// mic and hls meta data delay for chrome.. hlsMetadataThresholdTime: 5000,.. hlsAMSToMicDifference: 5000,.. meetupTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting',.. borTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooting',.. useVirtualParticipantList: true,.. // Buffering defaults.. failoverBasedOnPercentage: true,.. failoverBasedOnBufferEventCount: true,.. // Setting a sampling time of 1min.. bufferSamplingTime: 60000,.. // Total buffer count default set per sampling time.. totalBufferingCountThreshold: 15,.. // Total rebuffering percentage set per sampling time.. bufferPercentageThreshold: 45,.. // This controls whe

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/favicon.ico
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2416
Entropy (8bit):	5.039012850059401
Encrypted:	false
SSDEEP:	48:ZE9JC9JwVBYJuSAAcuLCcOZ9AA/p63w/pnhxHnu0uax0vbYr:u6CcnMhxHuIKbk
MD5:	B72A0CACFB3BDE27421A495E5FFAE80B
SHA1:	EA54716CA58D3D4F17CCBE5BFA0DA2C63992C97C
SHA-256:	DA97ADC8E0FFD9A782A63FFE01796F02404343DD9955AC2ABC0ABBAB869A7063
SHA-512:	6CEE77E2CEC149445F5CB8E834F6C8072ECF41109B0AF1BBB9963721ADDE0BEB61FE084C10D22624C9336E134BBB22AFA1B27E02927831A61B1E5E4200677D4B
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch
Preview:	.............................<!DOCTYPE HTML>. [if lt IE 9 ]> <html class="not-supported-ie"> <![endif]-->. [if IE 9 ]> <html class="not-supported-ie"> <![endif]-->. [if (gt IE 9)\|!(IE)]> > <html lang="en"> <![endif]-->..<head>..<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">...<style>#mediaContainer{display:none;}</style>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />...<script language="JavaScript">....function checkForCookies() {.....if (false && false) {......return true; // Preview User.....}.....if (location.href.indexOf("http") != 0) {......return true; // CD.....}......var eventCookieValue = 'true';.....if (eventCookieValue == 'undefined' \|\| eventCookieValue == '' \|\| eventCookieValue == 'false') {.......return false;........}.....return true;....}.. const isEmbedInIframe = top != self;.. if (!isEmbedInIframe && !checkForCookies()) {. if (false) {. location.href = location.prot

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5809
Entropy (8bit):	5.014054206463842
Encrypted:	false
SSDEEP:	96:c3ElErh1/wPDjcPwoMP38kPbHkPoLl/5iLP5LrkPYmeLmQfF3jVOgVddzL7/NfCg:c3Eloh1/cX4DIsQLQ450JQ6iQfF3x7TZ
MD5:	BEA9112A17EA23BF8DEA0B497BF1089C
SHA1:	0FC789DD8FF4F7D67953E986EACBEC58A957BAFA
SHA-256:	D7488DCEC9C3CC922BA6314E09C50B530F469548CC1B78FBDF60F8D54B514D6A
SHA-512:	0EED40F58A38206FEE6A45FFE31796067B5927039228E29D619A6DE6531ABB1DCAE5E756AE36993BCBF5370C54EF36DE78572FD987A7C7467C3FF0DF7122CB4C
Malicious:	false
Reputation:	low
Preview:	{.. "files": {.. "main.css": "/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.css",.. "main.js": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js",.. "main.js.map": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js.map",.. "runtime-main.js": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js",.. "runtime-main.js.map": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js.map",.. "static/css/2.73d5d984.chunk.css": "/view/react-console/build/24.4.1/static/css/2.73d5d984.chunk.css",.. "static/js/2.92f0ac71.chunk.js": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js",.. "static/js/2.92f0ac71.chunk.js.map": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js.map",.. "static/js/3.fc03352c.chunk.js": "/view/react-console/build/24.4.1/static/js/3.fc03352c.chunk.js",.. "static/js/3.fc03352c.chunk.js.map": "/view/react-console/build/24.4.1/static/js/3.fc03

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	166092
Entropy (8bit):	7.99225632154148
Encrypted:	true
SSDEEP:	3072:OJ9U6eqVQkCirT3gOBlunBNA3InvPw73H44TC6Nu15OgtXH3rsVIIj:OJ9URqfrTwOBlKjcIv83H44TCBzq
MD5:	07CB4DBC91F80448CF177E0F719275A8
SHA1:	7F0D52CA4B3D1D5C88314424703AA4BE6EB82DC6
SHA-256:	53EE44809384F78AC03126D325BB16F92FFACC38DB289E7E32EB84A80FCE36EA
SHA-512:	64B2BB7F1C5C9CFB3F865F9ECAC6151C7CC28AAB9186CCBB84A2628CEED6673DBB3202D3495203990C6774F041A65C858C3A065E1B481B039DC1960C9FB46240
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs...#...#.x.?v...~IDATx.\..m[r..2...{...[.V_(.U.......@HA1$:,K.B.7.)J.....;..._.'X.~.C.......").j,.......P..[..sO..^{.9.H?d..j.9{.5.h2....L.o...Z&P....C1Y0.......=J.3......!....X7.:Z........ .f.)B..PD...<...f..&.4AKA....c...#@....QDA..7....B...'..g1..,A."tz7...1A..1z..PU ..D,...UD0....F,.......'1....?.F............;F...........Zw..k"]0.....~FQ....l...?..#.'..._3.XWbo...._G..P........5D.................uZ.... ......;E..?........bF.....j( Z.;..E.t.o....X-.......j~...v?...!...xoL.&.XO.:.....g....i}........?.@.3./....X.n......_.X....:.v.P.~..0.M.......@.3..RQ...~B.@j\6(.......,.%..`....[.Z..#E.....h.'.. ...X.X..2l...)f..0.~.T...!0A."....A...)i0.{.(. ...Y.z\.8..o.?cqx..)..A...].......j.....Xo q$..t..W....L.......j..m.....L..f....p..3..W7_.._\|........n...FEW..7^..y....A"....;.uo..F....!h........\s...G..E...=......D$O+ y....g.t80h...".l.w..:.`..z...w.*q....p...B...i......h:x..by...X..9.V(...T._.$.~P...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	574081
Entropy (8bit):	5.930165414830346
Encrypted:	false
SSDEEP:	6144:0QX545+aINtf0Wb8bbCByI5KSnJ7s0MLEa6wGP0ZaJ8ZPo:0q45230Wb8PCx5KSnJ/MLi/dJ8ZQ
MD5:	B0330437B4E383BD2F0E624738018AFF
SHA1:	1C2F5E8CEF5F60674B6973FEB66EB9B5D101EB10
SHA-256:	3F1DF6A97CBD7174177ACE37B92FB53DD5D59C4781650CD1AE8DBC8523B3427C
SHA-512:	E49293E2AD2697CB4F72141C76870B9A5ED8300C99273E2B4529D79DAA4EAAF5FCC13E484141B4C672CAF18EDA04F33F3DEAFA3C239012FFE675C895C5D6520F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.gz.js
Preview:	(this["webpackJsonpapollo-x"]=this["webpackJsonpapollo-x"]\|\|[]).push([[0],{208:function(e,t,n){},279:function(e,t,n){"use strict";n.r(t);var i,o,a,r=n(7),c=n(0),s=n.n(c),l=n(59),d=n.n(l),u=n(16),f=(n(208),n(5)),m=n(2),b=n(15),v=n(28),g=n(51),p=n(189),A=n(312),h=n(13),O=n(84),w=n(6),j=n(14),x=n(11),C=n(309),y=["title","titleId"];function S(){return S=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e},S.apply(this,arguments)}function k(e,t){if(null==e)return{};var n,i,o=function(e,t){if(null==e)return{};var n,i,o={},a=Object.keys(e);for(i=0;i<a.length;i++)n=a[i],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(i=0;i<a.length;i++)n=a[i],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}function E(e,t){var n=e.title,r=e.titleId,s=k(e,y);return c.createElem

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2565
Entropy (8bit):	4.3035683829932
Encrypted:	false
SSDEEP:	24:vmx7Jtw0+uY7qFxSxHxZD9KcZ62HE+VG979AWlGoN9GE+9K2WsCW9KJztZil9KpP:75nQRP8p40ou+JGKnu4lw772/CFZQ7
MD5:	42F6C8006E481C0ADC69CA864C5D95CF
SHA1:	DA4C65918206F6E50B612F44FD3A22300C14E2C3
SHA-256:	9E100739E0B79C046113EA65397C7E2100A3DBECFFBE4EDDA7AFFB282AAF6FF6
SHA-512:	573BFC2BDAED2F41C8E3A1554E9B62EE073020FD27676C360DCB08C2C05E4934F9F3C98AF3E84204B14CB3D2C47247B0F972A83B88420558F3D686DBEFEF9EAB
Malicious:	false
Reputation:	low
Preview:	if (!window.on24) window.on24 = {};....window.on24.logoDomainsIgnore = {.. 'gmail.com': true,.. 'yahoo.com': true,.. 'hotmail.com': true,.. 'aol.com': true,.. 'hotmail.co.uk': true,.. 'hotmail.fr': true,.. 'msn.com': true,.. 'yahoo.fr': true,.. 'wanadoo.fr': true,.. 'orange.fr': true,.. 'comcast.net': true,.. 'yahoo.co.uk': true,.. 'yahoo.com.br': true,.. 'yahoo.co.in': true,.. 'live.com': true,.. 'rediffmail.com': true,.. 'free.fr': true,.. 'gmx.de': true,.. 'web.de': true,.. 'yandex.ru': true,.. 'ymail.com': true,.. 'libero.it': true,.. 'outlook.com': true,.. 'uol.com.br': true,.. 'bol.com.br': true,.. 'mail.ru': true,.. 'cox.net': true,.. 'hotmail.it': true,.. 'sbcglobal.net': true,.. 'sfr.fr': true,.. 'live.fr': true,.. 'verizon.net': true,.. 'live.co.uk': true,.. 'googlemail.com': true,.. 'yahoo.es': true,.. 'ig.com.br': true,.. 'live.nl': true,.. 'bigpond.com': true,.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	3793
Entropy (8bit):	4.665563207058073
Encrypted:	false
SSDEEP:	48:MzQC+PWERtOLbFuD/ooTlxbFyvN31lFN8HNfAOgWwGHVublHUAZ5vBTKjvQ1dq0g:POLu/tlxByvNTFWNwGH0lHvIydq0COH0
MD5:	97BB77D64308A621DEC4C210E23B600D
SHA1:	CC3DC0DA0E785C1F2A1626727FFACC3647D3A2D6
SHA-256:	BBD6B0B35A256201D3E47629BFCAEEDB6CB2EAA30FE802E21AE24BAAB1269736
SHA-512:	41BF76CC3CA5AD3A73ABC121849FB6B8C32B0B67B4F31DC8E7C32CD80800CB5E8EEF60D7BE19748D06315A7E9E8122FAEFFCBA3D6004E38BF9B92B7077115E7C
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/wrapperHelper.js?b=58.0.0
Preview:	(function main() {. const MAX_APPEND_ATTEMPTS = 5;. let attempt = 0;.. function getHtmlString() {. return fetch(`${customBuildPath \|\| '/view'}/react-console/build/`).then((htmlContent) => htmlContent.text());. }.. function getHtmlBlocks(htmlString) {. return {. headContent: (/<head[^>]>((.\|[\n\r]))<\/head>/im).exec(htmlString)[1],. bodyContent: (/<body[^>]>((.\|[\n\r]))<\/body>/im).exec(htmlString)[1],. };. }.. function parseHtml() {. return getHtmlString().then((htmlString) => getHtmlBlocks(htmlString));. }.. function replaceDomain(url, domain) {. const newUrl = new URL(url);. const targetUrl = new URL(domain);. newUrl.hostname = targetUrl.hostname;. return newUrl.href;. }.. function appendContent(children, parentEl) {. const cdnUrl = window.staticCDNURL \|\| '';. for (let i = 0; i < children.length; i++) {. if (children[i].tagName === 'SCRIPT') {.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4294)
Category:	downloaded
Size (bytes):	4346
Entropy (8bit):	5.146388883818458
Encrypted:	false
SSDEEP:	96:FHDGM4mONJuRio8rkILpuAOTfWfkA+NHRZkCG:PMNJuB8rbpulWfkDlG
MD5:	AC3F1428E2E81A75D9F8823AE3F5A65F
SHA1:	AB2A1FC9EC68045FAE91B459C76CAF416973B6B9
SHA-256:	CD38F39B68C990246AD9389EECB5CD6B3273C80FD492ACC6C063A2689AF3D264
SHA-512:	1141E9BDD3E0F0FBBD3A064C3BA89B7A62BBDBB4E24785EF161FAB41B1997A367A4F8BE72565F0FF4E9FECFEE4DFCAE70BAC5F7F4AB3E8E853F51D84ABBF27BE
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.gz.css
Preview:	#pegasus-left-panel{div[class^=TileDropDownstyles__Wrapper]{display:none}}@font-face{font-family:"geneva";src:url(/view/react-console/build/24.4.1/static/media/geneva.71f5cc40.woff2)}#ot-sdk-btn-floating{display:none}#menu-container{div:nth-child(2){display:none}}.button{padding:8px 12px!important;height:32px!important;font-size:14px!important;line-height:16px!important;font-weight:500!important}div[data-testid=window-breakout-room-join],div[data-testid=window-meetup]{display:block!important}#main-console-container.meetup-maximized div[data-testid=window-meetup]{-webkit-transform:translate(48px)!important;transform:translate(48px)!important;width:calc(100% - 96px)!important;height:calc(100% - 90px)!important}.react-draggable #active-meetup-room div[class=RoomHeader-module--room_header]{display:none}.react-draggable #active-breakout-room div[class=JoinPanel-module--brk_main-join_panel-content--],.react-draggable #active-breakout-room div[class^=JoinPanel-module--brk_main-join_panel-co

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2565
Entropy (8bit):	4.3035683829932
Encrypted:	false
SSDEEP:	24:vmx7Jtw0+uY7qFxSxHxZD9KcZ62HE+VG979AWlGoN9GE+9K2WsCW9KJztZil9KpP:75nQRP8p40ou+JGKnu4lw772/CFZQ7
MD5:	42F6C8006E481C0ADC69CA864C5D95CF
SHA1:	DA4C65918206F6E50B612F44FD3A22300C14E2C3
SHA-256:	9E100739E0B79C046113EA65397C7E2100A3DBECFFBE4EDDA7AFFB282AAF6FF6
SHA-512:	573BFC2BDAED2F41C8E3A1554E9B62EE073020FD27676C360DCB08C2C05E4934F9F3C98AF3E84204B14CB3D2C47247B0F972A83B88420558F3D686DBEFEF9EAB
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/const/logo-domains-ignore.js?b=58.0.0
Preview:	if (!window.on24) window.on24 = {};....window.on24.logoDomainsIgnore = {.. 'gmail.com': true,.. 'yahoo.com': true,.. 'hotmail.com': true,.. 'aol.com': true,.. 'hotmail.co.uk': true,.. 'hotmail.fr': true,.. 'msn.com': true,.. 'yahoo.fr': true,.. 'wanadoo.fr': true,.. 'orange.fr': true,.. 'comcast.net': true,.. 'yahoo.co.uk': true,.. 'yahoo.com.br': true,.. 'yahoo.co.in': true,.. 'live.com': true,.. 'rediffmail.com': true,.. 'free.fr': true,.. 'gmx.de': true,.. 'web.de': true,.. 'yandex.ru': true,.. 'ymail.com': true,.. 'libero.it': true,.. 'outlook.com': true,.. 'uol.com.br': true,.. 'bol.com.br': true,.. 'mail.ru': true,.. 'cox.net': true,.. 'hotmail.it': true,.. 'sbcglobal.net': true,.. 'sfr.fr': true,.. 'live.fr': true,.. 'verizon.net': true,.. 'live.co.uk': true,.. 'googlemail.com': true,.. 'yahoo.es': true,.. 'ig.com.br': true,.. 'live.nl': true,.. 'bigpond.com': true,.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	2536100
Entropy (8bit):	5.531632956321999
Encrypted:	false
SSDEEP:	49152:0Qb+1JFfxaW2dGhxDxzs/uxWragfgUK59KBU3NG6w:0Qb+1Drv59Y
MD5:	74B6007ED23D99B35418C07280B496DA
SHA1:	1C47F2866CAB0732F8F18A0086D622831CFAE991
SHA-256:	6914EEAB4F6E7DD2FC518FBFB001DC26837C576309C6D8749922DEE9B2C19B7E
SHA-512:	BCD187C4A19B54F9E07D7633189C4BDE9AB16F59D715901F9E9B5174F616326F61BB0BDADFE226B53525083855CE9EF887498A2214AEA28E3BE9A3108DADD8E3
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.gz.js
Preview:	/! For license information please see 2.92f0ac71.chunk.js.LICENSE.txt /.(this["webpackJsonpapollo-x"]=this["webpackJsonpapollo-x"]\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(204)},function(e,t,n){e.exports=n(248)()},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var r=n(9);function a(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?a(Object(n),!0).forEach((function(t){Object(r.a)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}},function(e,t,n){"use strict";e.exports=n(270)},function(e,t,n){var r=n(141)();e.exports=r;try{regeneratorRu

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2104805
Category:	downloaded
Size (bytes):	642061
Entropy (8bit):	7.999266146616715
Encrypted:	true
SSDEEP:	12288:M3NDEeZTtMNiW8I2ZmyfCiJew8eNAlgVltj13iNv8s/zs2axqQRLj8A/a2:MdDh5tZWx2D5AcAC3E5s2axqKn8A/V
MD5:	3C84E9E691A9608E19A62D3162B9CE2E
SHA1:	4FF82A307B7C38D9CAE321AE6A922F1BC99B590F
SHA-256:	885DB77D1A40D59D1E324041517E34C76E836996CDB1B73410A2C8E697FE8161
SHA-512:	C4E15E854E153DB8530D2B281442CE2E62A62652303D2B7186556FDB84A58B9725F93BEE1E6402C672A6487ADEA14DAA1DF34056372772A5C995CD49886E8DAD
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js
Preview:	............r.8......=....Y..t..U!KrY.}+I..<.Z.$vR$..lk2.....y..-...P.]...}.+::-....u_..........?o..l.G...n.l5..ov..#1Oo.dw..._.n..x.Om..>/x~.C...gQ.U..\|..i..$..rQ...Q!..f!...R.....Xl.tK........Q.q...5-..\|.dY.....o._....9O.....y...<.z....l.~.<x........_.'.dL.n.l}.~m..,...N.[....i..y.O.D.l;OS.;..".;...Xf....Y......YQ.......z.S>y....w.......i^N=5...\|."..;..?.4..#.).v...e...>.y....~v......_.\|~......ag[..v5..;.s..y.e...(v>...V..".c..h/.>?..-.F#.9.....r>.m..{........G3..&z3........G...z....$........\|YT ..ca.^=.n.J.c..X...E\|$.....X....Vt\|1?R..[.v\[..f.... ^p.O..ae.......s.;..RCn.W.@J...;;./%;.(i.O3....h.3$.$..r.4z7.....e4..r..l......i%U......Z!}4.....5r...'."......~......o.....Rz..V..n...>..itj.P+\...Z^).v3.M....x.R.^/fAqy.h..D.w^.ev..j...W<{Q....<l.....Es..g.{E!.z..%Q.6JX\..r.....,..@......bV.......W..x..a..-..oj..8....4.y.l.3_A.f...j...a.._=hD...<..5..y..P.l...p.....\|..<..J..V7..\|....kk.$I.n8....`".....p.4.+hc.s..K.J...>t..Z.Z.Q.{..NZ..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, copyright=\302\251the7dew - stock.adobe.com], progressive, precision 8, 1900x350, components 3
Category:	downloaded
Size (bytes):	39334
Entropy (8bit):	7.904235130280666
Encrypted:	false
SSDEEP:	768:PYyvjJem7VzyRT8X1vH/6hxhG0VIVj8OwMTHvo/z1QirqXN:Pom7Ve8/6hHG0hOwIUKN
MD5:	1FBF669AB54ABFB04980AF624A35224F
SHA1:	36F17D80C1EC3658E276A02D621A3C82DFF218B3
SHA-256:	A279BAC99250D46501D35BC9157032313E244677B71F45C4C1A979BE4E09EDF7
SHA-512:	13F9F9E5B479FF88B422867BF409473AA25194891524F8061A7226335ADF121690AD913B19B14147E4E108481BC7194754CE48369026A2D67E76D27936268E7F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/event/46/67/69/7/rt/1/logo/event/banner.jpg?t=864865740000
Preview:	.....BExif..MM.*.......................the7dew - stock.adobe.com........@Photoshop 3.0.8BIM................8BIM.%.........................XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................de

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2104805
Category:	dropped
Size (bytes):	642061
Entropy (8bit):	7.999266146616715
Encrypted:	true
SSDEEP:	12288:M3NDEeZTtMNiW8I2ZmyfCiJew8eNAlgVltj13iNv8s/zs2axqQRLj8A/a2:MdDh5tZWx2D5AcAC3E5s2axqKn8A/V
MD5:	3C84E9E691A9608E19A62D3162B9CE2E
SHA1:	4FF82A307B7C38D9CAE321AE6A922F1BC99B590F
SHA-256:	885DB77D1A40D59D1E324041517E34C76E836996CDB1B73410A2C8E697FE8161
SHA-512:	C4E15E854E153DB8530D2B281442CE2E62A62652303D2B7186556FDB84A58B9725F93BEE1E6402C672A6487ADEA14DAA1DF34056372772A5C995CD49886E8DAD
Malicious:	false
Reputation:	low
Preview:	............r.8......=....Y..t..U!KrY.}+I..<.Z.$vR$..lk2.....y..-...P.]...}.+::-....u_..........?o..l.G...n.l5..ov..#1Oo.dw..._.n..x.Om..>/x~.C...gQ.U..\|..i..$..rQ...Q!..f!...R.....Xl.tK........Q.q...5-..\|.dY.....o._....9O.....y...<.z....l.~.<x........_.'.dL.n.l}.~m..,...N.[....i..y.O.D.l;OS.;..".;...Xf....Y......YQ.......z.S>y....w.......i^N=5...\|."..;..?.4..#.).v...e...>.y....~v......_.\|~......ag[..v5..;.s..y.e...(v>...V..".c..h/.>?..-.F#.9.....r>.m..{........G3..&z3........G...z....$........\|YT ..ca.^=.n.J.c..X...E\|$.....X....Vt\|1?R..[.v\[..f.... ^p.O..ae.......s.;..RCn.W.@J...;;./%;.(i.O3....h.3$.$..r.4z7.....e4..r..l......i%U......Z!}4.....5r...'."......~......o.....Rz..V..n...>..itj.P+\...Z^).v3.M....x.R.^/fAqy.h..D.w^.ev..j...W<{Q....<l.....Es..g.{E!.z..%Q.6JX\..r.....,..@......bV.......W..x..a..-..oj..8....4.y.l.3_A.f...j...a.._=hD...<..5..y..P.l...p.....\|..<..J..V7..\|....kk.$I.n8....`".....p.4.+hc.s..K.J...>t..Z.Z.Q.{..NZ..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5809
Entropy (8bit):	5.014054206463842
Encrypted:	false
SSDEEP:	96:c3ElErh1/wPDjcPwoMP38kPbHkPoLl/5iLP5LrkPYmeLmQfF3jVOgVddzL7/NfCg:c3Eloh1/cX4DIsQLQ450JQ6iQfF3x7TZ
MD5:	BEA9112A17EA23BF8DEA0B497BF1089C
SHA1:	0FC789DD8FF4F7D67953E986EACBEC58A957BAFA
SHA-256:	D7488DCEC9C3CC922BA6314E09C50B530F469548CC1B78FBDF60F8D54B514D6A
SHA-512:	0EED40F58A38206FEE6A45FFE31796067B5927039228E29D619A6DE6531ABB1DCAE5E756AE36993BCBF5370C54EF36DE78572FD987A7C7467C3FF0DF7122CB4C
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/asset-manifest.json?ms=1729731467658
Preview:	{.. "files": {.. "main.css": "/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.css",.. "main.js": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js",.. "main.js.map": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js.map",.. "runtime-main.js": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js",.. "runtime-main.js.map": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js.map",.. "static/css/2.73d5d984.chunk.css": "/view/react-console/build/24.4.1/static/css/2.73d5d984.chunk.css",.. "static/js/2.92f0ac71.chunk.js": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js",.. "static/js/2.92f0ac71.chunk.js.map": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js.map",.. "static/js/3.fc03352c.chunk.js": "/view/react-console/build/24.4.1/static/js/3.fc03352c.chunk.js",.. "static/js/3.fc03352c.chunk.js.map": "/view/react-console/build/24.4.1/static/js/3.fc03

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	255117
Entropy (8bit):	5.2572414442266195
Encrypted:	false
SSDEEP:	3072:OJRuwbNvtTP64FQ/jBGYRhisPi6PSYQOxJ:OJRuwbNvtTP64FQ/jdRhisPi66YVxJ
MD5:	E49631D3D76B0655DF840DD52DFF029B
SHA1:	47450A521FC045F3262A2399A9C6224F967D73B9
SHA-256:	2169F6A32C10773C0459851BD4045BE1A770FBA4F615F07A7D7B770C31C01A3D
SHA-512:	CE2B39ED65859B88BAEEC8D0C4842F7EE9F4ADD0D301ADAFAC13AC5A4EE31CE4D9A1BCAA452423214861B119256A669D7AE94E259FA1555AB92B43ECB7C918F7
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/css/2.73d5d984.chunk.gz.css
Preview:	@import url(https://fonts.googleapis.com/icon?family=Material+Icons);:root{--main-font:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,sans-serif;--second-font:Helvetica Neue,Helvetica,Arial,sans-serif;--xs-font:10px;--sm-font:12px;--md-font:14px;--lg-font:16px;--xl-font:22px;--xxl-font:26px;--xxxl-font:32px;--font-weight-regular:400;--font-weight-semi-bold:600;--font-weight-bold:700;--primary-color:#006cff;--primary-color-faded:rgba(0,108,255,0.3607843137254902);--magenta:#f0f;--red:red;--faded-red:rgba(208,2,27,0.10196078431372549);--blue:#026afa;--faded-blue:#cfe3ff;--dt-bg-team:#1d1f22;--border-color:rgba(0,0,0,0.0784313725);--lighten-black:grey;--lighten-grey:#858585;--light-grey:#ebebeb;--grey:#7a7a7a;--dark-grey:#343434;--green:#28ca42;--faded-green:rgba(2,208,2,0.10196078431372549);--white:#fff;--white5:hsla(0,0%,100%,0.050980392156862744);--white10:hsla(0,0%,100%,0.10196078431372549);--white20:hsla(0,0%,100%,0.2);--white30:hsla(0,0%

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, copyright=\302\251the7dew - stock.adobe.com], progressive, precision 8, 1900x350, components 3
Category:	dropped
Size (bytes):	39334
Entropy (8bit):	7.904235130280666
Encrypted:	false
SSDEEP:	768:PYyvjJem7VzyRT8X1vH/6hxhG0VIVj8OwMTHvo/z1QirqXN:Pom7Ve8/6hHG0hOwIUKN
MD5:	1FBF669AB54ABFB04980AF624A35224F
SHA1:	36F17D80C1EC3658E276A02D621A3C82DFF218B3
SHA-256:	A279BAC99250D46501D35BC9157032313E244677B71F45C4C1A979BE4E09EDF7
SHA-512:	13F9F9E5B479FF88B422867BF409473AA25194891524F8061A7226335ADF121690AD913B19B14147E4E108481BC7194754CE48369026A2D67E76D27936268E7F
Malicious:	false
Reputation:	low
Preview:	.....BExif..MM.*.......................the7dew - stock.adobe.com........@Photoshop 3.0.8BIM................8BIM.%.........................XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................de

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3341), with CRLF line terminators
Category:	downloaded
Size (bytes):	3392
Entropy (8bit):	5.3360159371834746
Encrypted:	false
SSDEEP:	96:E6Fhb6+CBiTlU3UcR8dA/TLmohpZmqX6b5:3b6+CITlU3UcydsT9pMa6b5
MD5:	97C347B7E994271D08B0C8470DAAE8E2
SHA1:	C63A9E1AA69EB8BCE7D3BA7D80CA04BC70A1B41A
SHA-256:	063168ECCF82BD8A291AB4EA5105A5036254086EE1826628DF977DC7B42073BC
SHA-512:	CA5D08927A58D5B91D62B523BBB11DB32C41D419F9AEC8DE91BC519980E80B9FFA4039E0A3D0932911FC65E56C09859441078E309C849A757402891B2E34323F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js
Preview:	!function(e){function t(t){for(var n,o,c=t[0],i=t[1],l=t[2],f=0,d=[];f<c.length;f++)o=c[f],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&d.push(a[o][0]),a[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);d.length;)d.shift()();return u.push.apply(u,l\|\|[]),r()}function r(){for(var e,t=0;t<u.length;t++){for(var r=u[t],n=!0,o=1;o<r.length;o++){var i=r[o];0!==a[i]&&(n=!1)}n&&(u.splice(t--,1),e=c(c.s=r[0]))}return e}var n={},o={1:0},a={1:0},u=[];function c(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,c),r.l=!0,r.exports}c.e=function(e){var t=[];o[e]?t.push(o[e]):0!==o[e]&&{7:1}[e]&&t.push(o[e]=new Promise((function(t,r){for(var n="static/css/"+({}[e]\|\|e)+"."+{3:"31d6cfe0",4:"31d6cfe0",5:"31d6cfe0",6:"31d6cfe0",7:"7b0168e2",8:"31d6cfe0"}[e]+".chunk.css",a=c.p+n,u=document.getElementsByTagName("link"),i=0;i<u.length;i++){var l=(s=u[i]).getAttribute("data-href")\|\|s.getAttribute("href");if("stylesheet"

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/fonts/font-awesome_4.7/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkOx02xpAbBNxIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	166092
Entropy (8bit):	7.99225632154148
Encrypted:	true
SSDEEP:	3072:OJ9U6eqVQkCirT3gOBlunBNA3InvPw73H44TC6Nu15OgtXH3rsVIIj:OJ9URqfrTwOBlKjcIv83H44TCBzq
MD5:	07CB4DBC91F80448CF177E0F719275A8
SHA1:	7F0D52CA4B3D1D5C88314424703AA4BE6EB82DC6
SHA-256:	53EE44809384F78AC03126D325BB16F92FFACC38DB289E7E32EB84A80FCE36EA
SHA-512:	64B2BB7F1C5C9CFB3F865F9ECAC6151C7CC28AAB9186CCBB84A2628CEED6673DBB3202D3495203990C6774F041A65C858C3A065E1B481B039DC1960C9FB46240
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/event/46/67/69/7/rt/rt/f8961ac3-3701-4587-bf11-132a922a1c10.alyssagreen_300x300.png
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs...#...#.x.?v...~IDATx.\..m[r..2...{...[.V_(.U.......@HA1$:,K.B.7.)J.....;..._.'X.~.C.......").j,.......P..[..sO..^{.9.H?d..j.9{.5.h2....L.o...Z&P....C1Y0.......=J.3......!....X7.:Z........ .f.)B..PD...<...f..&.4AKA....c...#@....QDA..7....B...'..g1..,A."tz7...1A..1z..PU ..D,...UD0....F,.......'1....?.F............;F...........Zw..k"]0.....~FQ....l...?..#.'..._3.XWbo...._G..P........5D.................uZ.... ......;E..?........bF.....j( Z.;..E.t.o....X-.......j~...v?...!...xoL.&.XO.:.....g....i}........?.@.3./....X.n......_.X....:.v.P.~..0.M.......@.3..RQ...~B.@j\6(.......,.%..`....[.Z..#E.....h.'.. ...X.X..2l...)f..0.~.T...!0A."....A...)i0.{.(. ...Y.z\.8..o.?cqx..)..A...].......j.....Xo q$..t..W....L.......j..m.....L..f....p..3..W7_.._\|........n...FEW..7^..y....A"....;.uo..F....!h........\s...G..E...=......D$O+ y....g.t80h...".l.w..:.`..z...w.*q....p...B...i......h:x..by...X..9.V(...T._.$.~P...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6676
Entropy (8bit):	4.853417499279645
Encrypted:	false
SSDEEP:	96:sV3yoDibiwLIQ85x+xA/p+krjGOegMPMouPD8/WAsaPUIycSLGlGfEat6:MvUkP+krjGO9MPJuPDLAsaPRydGlGsH
MD5:	3D035B8CC96517CE5958017C3528F97C
SHA1:	A3987A502E3B6FDAB074143D054598497365D696
SHA-256:	FF6DD3A8151ECE3F195F7B551AA0907D732092A4A1E7B89C7B8A6592C7EF8F93
SHA-512:	FF6A1E7C78B59BA63D32C48A450E721D0E54BC234887BD0F43C4B6B434CFE52A6D330762C08F6CE9BC7657B65301DA963A442367180C5944E005B0AEEF887ECB
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/react-console/build/24.4.1/const/index.js
Preview:	var searchParams = new URLSearchParams(window.location.search);..var preventMaximize = searchParams.get('preventMaximize') === 'true';....if (!window.on24) window.on24 = {};..window.on24.clientProperties = {..// mic and hls meta data delay for chrome.. hlsMetadataThresholdTime: 5000,.. hlsAMSToMicDifference: 5000,.. meetupTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting',.. borTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooting',.. useVirtualParticipantList: true,.. // Buffering defaults.. failoverBasedOnPercentage: true,.. failoverBasedOnBufferEventCount: true,.. // Setting a sampling time of 1min.. bufferSamplingTime: 60000,.. // Total buffer count default set per sampling time.. totalBufferingCountThreshold: 15,.. // Total rebuffering percentage set per sampling time.. bufferPercentageThreshold: 45,.. // This controls whe

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12596
Entropy (8bit):	4.757176782653038
Encrypted:	false
SSDEEP:	192:iJ7wjc1c90nUNAUJ+FKHFdLH7sVHvm62tHT9D4W1zgaeCOXiG+BcwOplgjN7G6sA:8BGZLz7s1mJSaeCDBmDDMd
MD5:	CDC1DD374F940116BA63A86691394DBC
SHA1:	69D17B6099FC7C4362F793E3754D248852793FB0
SHA-256:	A901D54EDD59210C4FDAF72EA6FADF828C1FC0385A671487E7A7A98CE6BF10F1
SHA-512:	93EBC808EBC1E4CF98A79B726BA8AF4B73210796BDE911FE93217A2BE463EA96F056BDDA9A0979C71A41F79C867B101CAA51B3E231108E4EF5E51412CA4F8F1F
Malicious:	false
Reputation:	low
Preview:	{."add.event.to.calendar": "Add this event to your calendar",."add.event.to.google.calendar.html": "Google Calendar",."add.event.to.google.calendar.image.text": "Add Event to Google Calendar",."add.event.to.google.calendar.text": "To add this event to your Google calendar, please go to this URL:",."add.event.to.outlook.calendar.html": "Outlook/iCal",."add.event.to.outlook.calendar.image.text": "Add Event to Outlook/ICal Calendar",."add.event.to.outlook.calendar.text": "To add this event to your Outlook/iCal calendar, please go to this URL:",."already.registered": "If you have previously registered for this event, please login below:",."apply.coupons": "Please apply coupons before submitting",."best_webcast_experience": "For the best webcast experience, please use",."check.box.continue": "Please check the box to continue",."chrome_browser": "Chrome Browser",."company.banner.image.text": "Company Banner",."computer.speakers.image.active": "Listen With Computer Speakers",."computer.speake

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	38950
Entropy (8bit):	4.718834055394851
Encrypted:	false
SSDEEP:	768:uPAZTbTKmBi6976YgYcVT0NecVTyucwBA7XQw+7w8T:3xiw
MD5:	0F042782BB77E05BAC5C67683712C17F
SHA1:	9B0DE34D75DC5448AC773D3DFFFE40DF496F72D7
SHA-256:	33C1EBC20F0BAAEE7475FD82A3F1CE7307EBFCF166010A9C4C9140A48D427C88
SHA-512:	D2518269F917086C2EC2388EC6EABF53987B6472865ABB516E7F00E8F87D2E2FDA222D5822942C70304410992836A69961052751042FF56F0D6AA35C5BF44C2E
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/vue_templates.html?b=0007823747865
Preview:	<div id="vueTpl">. <div id="banner" v-if="!!bannerSrc">. <img id="bannerImg" :src="bannerSrc" :alt="bannerAlt" tabindex="0" />. </div>.. <div id="contentWrapper">. <overview :d="overviewData"></overview>.. <div id="layout-container" class="flex-container". :class="registerData.is2ColLayout && registerData.isRightAlign === false ? 'swapLR' : ''">. <div id="contentLeft" v-if="!hideLeftCol">. <div id="realLeftContent" class="realContent">. <summary2 v-if="registerData.is2ColLayout" ref="summaryy" :d="summaryData"></summary2>. <summaryy v-else ref="summaryy" :d="summaryData"></summaryy>. </div>. </div>. <div id="contentRight" :class="isHybridMode() && !isLobby && urlPara.showqrcode=='y'?'showQRcode large':''">. <div id="realRightContent" class="realContent">. <register v-if="errorData.errorCode=='loginlocked' && !nee

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1701)
Category:	downloaded
Size (bytes):	1702
Entropy (8bit):	5.273864752340172
Encrypted:	false
SSDEEP:	24:kNdBMrVzMjrrtKhZZbx6T8yZf68Te3SLjDygCcXP9VzMjrrtKhZZbx6T8yZf68T7:IErmoZgT8NVAZCcXlmoZgT8NVAZR
MD5:	1B47A14E2E2C7B9E8ADC385C5EF5A9D6
SHA1:	46A9ECA5B9371FCB3963ECCDF5BF8756556683F9
SHA-256:	0E2073ADAABE3D7CD39DE4320E3106BA8C84B0F609632BDEB9AB6DDAE1AEBB7D
SHA-512:	D198BB0BCBFDC729468082FBA5F2625201CC7244C1601E1EC016ECE461E19332A1615E8C9C01C5165E24AD8CEABCDDF27511667FE59CFAFBAA28EBB5D56EAB40
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/eventRegistration/eventRegistrationServlet
Preview:	<html><head></head><body onload='redirectIt();'><center> h6>Thank you. Please wait a few seconds while you are redirected (or <a href='/utilApp/MediaMetricServlet?mode=launch&mediametricid=6572014&eventid=4667697&eventuserid=705147414&usercd=705147414&mediametricsubid=1&mediaurl=https%3A%2F%2Fevent.on24.com%2FeventRegistration%2Fconsole%2Fapollox%2FmainEvent%3F%26eventid%3D4667697%26sessionid%3D1%26username%3D%26partnerref%3D%26format%3Dfhvideo1%26mobile%3D%26flashsupportedmobiledevice%3D%26helpcenter%3D%26key%3D7EE4C286CEE7D6B1AA187A1912AE17F5%26newConsole%3Dtrue%26nxChe%3Dtrue%26newTabCon%3Dtrue%26consoleEarEventConsole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D705147414%26contenttype%3DA&target=mediaurl&key=7EE4C286CEE7D6B1AA187A1912AE17F5'>click here</a> to continue.</h6--></center><script language='javascript'>function redirectIt() {var lobbyRedirectUrl='/utilApp/MediaMetricServlet?mode=launch&mediametr

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:B+hGAQR:B+6R
MD5:	0EAD5290EE11F36AF6A907C4EC3CBCBD
SHA1:	B69C0BE568E823942C78FAA0BFCCAE6E4AFF8EA2
SHA-256:	2584F4618A9A3901536BF4CDCB3B16C28E18D959AB406867605150F511880DD1
SHA-512:	9452486ADD12BE32791DD9C3DDF4DF48E4737A0B6CC1BC40918789F00CFBD4638AB07D1E8E30949133C722D1F24059671B16C186E48F77DCB8B3FC3AED387B08
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwk82t7xfyZZSxIFDb6WR8YSBQ2z2vek?alt=proto
Preview:	ChIKBw2+lkfGGgAKBw2z2vekGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7339
Entropy (8bit):	4.7585213691887
Encrypted:	false
SSDEEP:	192:dsm8rIeUmljSS3d7VFQFB/eVXynz0ufNm8oDDD:Ox2U
MD5:	8E6E87BF0BB2159DE7C6E78FD7A322FC
SHA1:	8DCB4C39BA6ED036AF030AB69C8D585636A4B43C
SHA-256:	09DF00AA3EE7DDED3BFFCA4DE9A0DD5411B39CC9EE198750AA823B2A0D416B1D
SHA-512:	49D75C51E33B9CF98E1F66E94229697F5F204C4BEDBB84FB3CD791B2E79A77A61E82BBA0CB6A2062C6D8469D59783453412D528D4DF0AD159FF0E50CC371949E
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373
Preview:	{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712460","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"lobby_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712461","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"321912429","index":"1","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"23

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	6784
Entropy (8bit):	4.813696734253617
Encrypted:	false
SSDEEP:	192:nNtTy7zyprRAd++qqymKaKcZvKXNGPscx14ZRFrZrBqaW:N5y7epVALqsvq5Z96
MD5:	7F41394AFEDC394AF6D217A98A365484
SHA1:	E71D36D58C37371980F771535FA0F8590E41B981
SHA-256:	DDA61054A31CB53E1A8A2A87CD400442A305F6487A33AD05F0FC601C304EA474
SHA-512:	B971EFBA0D7251654ABBB32DD43860001F1BDB50839A4C46E83EDBBE3CA5F003763DC1F74FEB7619EB6F35CD830F62EC94B676F2A0E4405F47E572AD05D86DEC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta http-equiv="Pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate" />. <script src="/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js"></script> -->. <script type="text/javascript">. var queryParams = new URLSearchParams(window.location.search);. var version = queryParams.get('version');. window.version = (version \|\| window.releaseVersion);. var rootPath = `${(window.staticCDNURL \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;. var localHost = `${window.location.protocol}//${window.location.host}`;. var rootPathLocal = `${(window.location.protocol + '//' + window.location.host \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 02:57:08.928044081 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 02:57:12.312772989 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.312824011 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:12.312895060 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.313230991 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.313287020 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:12.313355923 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.313504934 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.313523054 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:12.313664913 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:12.313702106 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.129280090 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.129873991 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.129934072 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.131417990 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.131588936 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.131690979 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.131695032 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.131725073 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.133224964 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.133335114 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.133532047 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.133563995 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.135260105 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.135392904 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.135942936 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.136153936 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.176747084 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.176812887 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.176872015 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.229922056 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.331490993 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.332344055 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.332437038 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 02:57:13.332643986 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:13.348313093 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:13.348397970 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:13.348581076 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:13.349126101 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:13.349164009 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.020400047 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.021312952 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.021347046 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.022847891 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.022926092 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.025197983 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.025296926 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.025652885 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.025665998 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.069797993 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.187532902 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:14.187618971 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:14.187748909 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:14.187961102 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:14.187982082 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:14.233149052 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.233269930 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.233406067 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.233438015 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.233495951 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.233500957 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:14.233558893 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.237459898 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:14.237524986 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:15.059052944 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:15.108062029 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.186394930 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.186450005 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:15.188277006 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:15.188507080 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.348098993 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.348653078 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:15.399111032 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.399173975 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:15.443552017 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:15.454020023 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:15.454111099 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:15.454207897 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:15.456990004 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:15.457027912 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.319044113 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.319152117 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.323251009 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.323277950 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.323708057 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.365880966 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.367968082 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.411330938 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.610229015 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.610444069 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.610476017 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.610563040 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.610608101 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.610608101 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.610630989 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.610650063 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.652268887 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.652297020 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:16.652473927 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.653006077 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:16.653022051 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.499353886 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.499444962 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.507818937 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.507863045 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.508203983 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.509977102 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.551407099 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.752242088 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.752301931 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.752496958 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.857425928 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.857425928 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 02:57:17.857443094 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:17.857470989 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 02:57:23.465965033 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.466007948 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:23.466069937 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.466625929 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.466645002 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:23.469497919 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.469594955 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:23.469675064 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.470113039 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.470123053 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:23.470177889 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.470529079 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.470566988 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:23.470839977 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:23.470851898 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.105154037 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.105370045 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.105396032 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.106944084 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.107002974 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.107284069 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.107398987 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.107412100 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.109082937 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.109253883 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.109268904 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.109848976 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.110184908 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.110274076 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.110285997 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.114527941 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.114892960 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.114974022 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.115438938 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.115761042 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.115853071 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.115861893 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.151330948 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.151333094 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.158277035 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.158277035 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.158293009 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.158344984 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.159368992 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.207386971 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.278924942 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.278951883 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279297113 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.279337883 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279362917 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279407978 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279439926 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.279449940 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279489994 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.279545069 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.279587984 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.282805920 CEST	49748	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.282821894 CEST	443	49748	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.293432951 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.293518066 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.293878078 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.294960976 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.294971943 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.295000076 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.295041084 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.295166969 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.295197010 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.295370102 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.295696020 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.295944929 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.328963995 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.329140902 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.329279900 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.329343081 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.329607964 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.410401106 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.410410881 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.410660028 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.411005020 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.411015034 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.411079884 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.411079884 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.411092997 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.430332899 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.430351973 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.430418968 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.430418968 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.430430889 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.430594921 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.430767059 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.430870056 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.430870056 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.434719086 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.434762955 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.434889078 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.435559988 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.435575008 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.445800066 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.445832968 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.445992947 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.446026087 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.446031094 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.446026087 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.446103096 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.446146965 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.446185112 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.463924885 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.463972092 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.464154005 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.464154959 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.464219093 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.464381933 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.464471102 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.464521885 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.464521885 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.464586020 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.464641094 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.465408087 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.563884974 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.563934088 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.563991070 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.564058065 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.564097881 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.564687014 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.564732075 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.564754009 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.564790964 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.564834118 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.564930916 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.565587997 CEST	49749	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.565617085 CEST	443	49749	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.572669029 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.572753906 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.572921991 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.574666023 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.574747086 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.600954056 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 24, 2024 02:57:24.606822968 CEST	80	49723	93.184.221.240	192.168.2.4
Oct 24, 2024 02:57:24.607060909 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 24, 2024 02:57:24.732337952 CEST	49750	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.732361078 CEST	443	49750	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.953561068 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.966418982 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.966480017 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.970211983 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.970405102 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.970655918 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:24.970855951 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:24.970899105 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.010729074 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.010787964 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.041055918 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:25.041120052 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:25.041470051 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:25.056725979 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.070491076 CEST	49740	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:57:25.070552111 CEST	443	49740	172.217.16.132	192.168.2.4
Oct 24, 2024 02:57:25.087562084 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.087757111 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.087778091 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.090869904 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.090943098 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.091253996 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.091351032 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.091361046 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.132932901 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.132942915 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140152931 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140211105 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140458107 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140497923 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.140533924 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140564919 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140614986 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.140633106 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140724897 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.140952110 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.141501904 CEST	49754	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.141561985 CEST	443	49754	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.180095911 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.220917940 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.221255064 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.221317053 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.224956989 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.225155115 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.225498915 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.225586891 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.225615025 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.225641012 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.240804911 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.240856886 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.240901947 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.240911007 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.240962982 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.277246952 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.277307034 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.324321032 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.359602928 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.359625101 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.359639883 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.359671116 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.359671116 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.359690905 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.359699965 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.360223055 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.360281944 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.360296965 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.360322952 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.360344887 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.360383987 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.360383987 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.361063957 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.361155033 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.361160994 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.361288071 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.361352921 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.361475945 CEST	49755	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.361490011 CEST	443	49755	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.413647890 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.413717985 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.413899899 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.413963079 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.414038897 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.433202982 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.433233976 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.433269024 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.433388948 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.433388948 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.477998972 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.531627893 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531641960 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531649113 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531676054 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531685114 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531724930 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.531833887 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.531835079 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.531835079 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.531940937 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.532000065 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.532105923 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.532598019 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.532780886 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.647805929 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.647845030 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.648032904 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.648032904 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.648097992 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.648175955 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.649058104 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.649188995 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:25.649260998 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.649260998 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.649980068 CEST	49756	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:25.650044918 CEST	443	49756	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.105256081 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.105317116 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.105515003 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.105706930 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.105729103 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.753870010 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.762968063 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.763009071 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.763643026 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.764204979 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.764395952 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.764501095 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.807342052 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.926290989 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.926418066 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.926587105 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.927822113 CEST	49762	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.927845955 CEST	443	49762	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.931078911 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.931140900 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:26.931210041 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.931416988 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:26.931437016 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.584646940 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.585390091 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:27.585417986 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.585891962 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.586288929 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:27.586374044 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.586468935 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:27.627334118 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.738182068 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.738451004 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:27.738648891 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:27.739540100 CEST	49766	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:27.739561081 CEST	443	49766	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:43.969315052 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.969371080 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:43.969540119 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.969590902 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:43.969687939 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.969696045 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.971851110 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.971878052 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:43.972563028 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:43.972580910 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.613450050 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.614830971 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.662516117 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.662795067 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.672034025 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.672044039 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.672184944 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.672199965 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.672631025 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.673595905 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.675038099 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.675116062 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.675575972 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.675791979 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.675954103 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.675981998 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.676043034 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.719335079 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.726103067 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.858366966 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.862737894 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.862899065 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.862907887 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.862948895 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.863073111 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.863779068 CEST	49776	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.863802910 CEST	443	49776	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.916208982 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.916294098 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.916399002 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.917041063 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.917079926 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:44.917411089 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:44.917530060 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.077457905 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.077533007 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.077635050 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.077653885 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.077676058 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.077723026 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.078114033 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.078129053 CEST	443	49775	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.078152895 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.078169107 CEST	49775	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.558484077 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.568274975 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.568308115 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.568756104 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.575603962 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.575603962 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.575659037 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.575722933 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.629621029 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.754672050 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.754698038 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.754771948 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:45.754791975 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:45.754847050 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:46.031132936 CEST	49777	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:46.031194925 CEST	443	49777	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.337335110 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.337380886 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.337440968 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.338423967 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.338438034 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.996740103 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.997114897 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.997139931 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.998354912 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.999075890 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.999257088 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:47.999469042 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:47.999526024 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150058985 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150110960 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150156021 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.150175095 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150304079 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150366068 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.150372028 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150403976 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.150448084 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.150548935 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.232573032 CEST	49780	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.232589960 CEST	443	49780	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.249794006 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.249825001 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.250031948 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.250228882 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.250237942 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.251504898 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.251549959 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.251847029 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.252490044 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.252528906 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.312587023 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.312616110 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.315439939 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.315814018 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.315840006 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.894144058 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.894448996 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.894467115 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.894819021 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.895232916 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.895309925 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.895438910 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.895467043 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.898443937 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.898693085 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.898755074 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.899808884 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.900213003 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.900264978 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.900388002 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.940221071 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.940221071 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.973975897 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.974529982 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.974606037 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.975116014 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.980868101 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:48.980982065 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:48.981020927 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.023358107 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.023483992 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.045613050 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.045780897 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.045929909 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.045943975 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.046060085 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.046082020 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.046230078 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.049504995 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.050143003 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.050299883 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.050349951 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.050381899 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.050419092 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.050441027 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.050458908 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.052608967 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.052618980 CEST	443	49783	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.052658081 CEST	49783	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.056548119 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.056631088 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.057462931 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.057816982 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.057852983 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.064639091 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.068846941 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.128833055 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.128941059 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.129024029 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.129159927 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.129199028 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.129199982 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.129379034 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.132635117 CEST	49787	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.132695913 CEST	443	49787	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.162651062 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.162743092 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.162802935 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.162821054 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.162847042 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.162926912 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.163219929 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.163227081 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.181830883 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.181953907 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.181960106 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.182131052 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.279840946 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.279864073 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.279927015 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.280142069 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.280193090 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.299010038 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.299069881 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.396795034 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.396853924 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.397351980 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.397404909 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.514134884 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.514159918 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.514224052 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.514240980 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.514775038 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.514935970 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.514942884 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.567922115 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.578289032 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.578310013 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.578363895 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.630867004 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.630953074 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.631514072 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.631683111 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.688055038 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.739804029 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.748152971 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.748186111 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.748231888 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.748277903 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.748291016 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.748322964 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.748377085 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.748382092 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.748481989 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.750488997 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.750516891 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.750943899 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.767400980 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.767467022 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.779617071 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.779721975 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.786957026 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.827370882 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.865111113 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.865191936 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.865600109 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.865670919 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.885672092 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.885735989 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.885763884 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.885848045 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.928533077 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.928575039 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.928632975 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.928653955 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.933271885 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.933337927 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.933341980 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:49.933391094 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.933698893 CEST	49788	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:49.933717966 CEST	443	49788	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.001806021 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.001888037 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.001919985 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.001931906 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.001972914 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.118786097 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.118838072 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.118861914 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.118886948 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.118901968 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.118915081 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.216295004 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.216350079 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.216378927 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.216423988 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.216454983 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.216475964 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.321837902 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.321885109 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.321913958 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.321938038 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.321954966 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.322007895 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.353584051 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.353642941 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.353663921 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.353691101 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.353712082 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.353733063 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.451394081 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.451461077 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.451483965 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.451512098 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.451529026 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.451550961 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.556152105 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.556225061 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.556235075 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.556263924 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.556279898 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.556374073 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.588119984 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.588165998 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.588180065 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.588207006 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.588221073 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.588238955 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.685508013 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.685551882 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.685583115 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.685609102 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.685633898 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.685650110 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.745836020 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.745892048 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.745908022 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.745934010 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.745946884 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.746020079 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.821790934 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.821804047 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.821847916 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.821877003 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.821922064 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.918850899 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.918896914 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.918926001 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.918946981 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.918970108 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.939403057 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.939445972 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.939461946 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.939486027 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:50.939500093 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:50.989878893 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.036173105 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.036202908 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.036226034 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.036252975 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.036269903 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.036293030 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.097593069 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.097646952 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.097774982 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.097800970 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.097865105 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.153628111 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.153672934 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.153704882 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.153726101 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.153748989 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.153767109 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.214641094 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.214685917 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.214724064 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.214778900 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.214792967 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.215908051 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.270930052 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.270977020 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.271014929 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.271039963 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.271075964 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.271187067 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.332834959 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.332895994 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.332930088 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.332956076 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.332978010 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.334454060 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.387964010 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.388011932 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.388044119 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.388066053 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.388113976 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.388206005 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.449928999 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.449990034 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.450028896 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.450057983 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.450076103 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.450170994 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.504458904 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.504509926 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.504544973 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.504565001 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.504591942 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.504781008 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.526115894 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.526160002 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.526196003 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.526222944 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.526247025 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.526542902 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.567538023 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.567584038 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.567609072 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.567631960 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.567679882 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.641818047 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.641846895 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.641875982 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.641911030 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.641921043 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.642088890 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.683973074 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.684019089 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.684056997 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.684079885 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.684132099 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.684256077 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.739023924 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.739103079 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.739204884 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.739204884 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.739231110 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.739500046 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.760273933 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.760324001 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.760361910 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.760382891 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.760402918 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.760648012 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.843909979 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.843962908 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.843998909 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.844022989 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.844038963 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.844281912 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.876007080 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.876034975 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.876066923 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.876075983 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.876097918 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.876188993 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.918598890 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.918622017 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.918668032 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.918675900 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.918723106 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.918723106 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.972515106 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.972551107 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.972579956 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.972590923 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.972620964 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.972631931 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.972803116 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.974407911 CEST	49782	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.974422932 CEST	443	49782	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.988600969 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.988678932 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:51.991019011 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.991353035 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:51.991389036 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.647675991 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.647898912 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.647939920 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.649068117 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.649368048 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.649504900 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.649518013 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.649550915 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.692439079 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.800600052 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.800931931 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.801004887 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.801033020 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.801105976 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.819520950 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.819530964 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.819578886 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.920325041 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.920447111 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.920834064 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.920892000 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.920928001 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.920978069 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.938323975 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.938389063 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:52.980200052 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:52.980262995 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.038881063 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.038942099 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.039504051 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.039571047 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.039575100 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.039591074 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.039622068 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.040175915 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.040235043 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.040252924 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.083075047 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.158216000 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158231974 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158252954 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158279896 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158298969 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.158364058 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.158391953 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158791065 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.158849001 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.158864975 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.159596920 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.159636021 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.159677029 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.159677029 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.159694910 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.176836967 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.176892042 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.176913023 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.177016020 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.276371002 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.276563883 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.276566982 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.276624918 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.276674032 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.276909113 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.276923895 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.276945114 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.277028084 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.277041912 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.277868032 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.277929068 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.277941942 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.278491974 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.336725950 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.336813927 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.395354986 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.395406008 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.395447016 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.395468950 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.395515919 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.396439075 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.396595955 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.396610975 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.396922112 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.397054911 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.397130013 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.413985968 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.414129972 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.515290976 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.515367985 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.515434027 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.515434027 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.515496969 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.515569925 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.574723005 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.574769974 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.574815035 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.574831009 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.574872017 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.574976921 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.634216070 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.634259939 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.634305954 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.634325027 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.634381056 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.634633064 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.752557993 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.752604961 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.752650023 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.752665043 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.752701044 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.753792048 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.753846884 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.753871918 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.753941059 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.753962040 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.754534006 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.871265888 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.871284962 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.871424913 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.871426105 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.871505022 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.871798038 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.872505903 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.872520924 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.872597933 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.872628927 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.873739958 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.990402937 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.990447998 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.990499020 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.990566015 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.990611076 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.990706921 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.991554022 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.991596937 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.991686106 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.991687059 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:53.991704941 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:53.991825104 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.110964060 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111030102 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111087084 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111154079 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111191034 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111193895 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111238956 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111253023 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111289024 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111291885 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111341953 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111362934 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.111397028 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.111484051 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.169673920 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.169749975 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.169903994 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.169964075 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.170017958 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.224235058 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.229664087 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.229728937 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.229763031 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.229795933 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.229836941 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.229862928 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.246958971 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.247009039 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.247051001 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.247066975 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.247106075 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.247106075 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.348150969 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.348200083 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.348237038 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.348261118 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.348289013 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.348340988 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.349117994 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.349159002 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.349203110 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.349215984 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.349246979 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.349385023 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.466766119 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.466823101 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.466845036 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.466873884 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.466909885 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.466928959 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.467542887 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.467593908 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.467622995 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.467639923 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.467672110 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.467693090 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.485296011 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.485353947 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.485385895 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.485399961 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.485430002 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.485471010 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.586065054 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.586082935 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.586265087 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.586327076 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.586399078 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.587208033 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.587227106 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.587287903 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.587311983 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.587372065 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.587372065 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.645479918 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.645544052 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.645570040 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.645603895 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.645625114 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.645658970 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.705594063 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.705636024 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.705769062 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.705770016 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.705800056 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.705854893 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.706449032 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.706496954 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.706530094 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.706552029 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.706583023 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.706650972 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.812087059 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.812129974 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.812154055 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.812194109 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.812202930 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.812251091 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.824362040 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.824404001 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.824420929 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.824470043 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.824477911 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.824582100 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.825510979 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.825566053 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.825577021 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.825589895 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.825622082 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.825643063 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.931487083 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.931550026 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.931689024 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.931689024 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.931751966 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.931819916 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.943543911 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.943588972 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.943623066 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.943639040 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.943681002 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.943701029 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.944802999 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.944843054 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.944879055 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.944890976 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:54.944921970 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:54.944943905 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.050340891 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.050373077 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.050527096 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.050527096 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.050590992 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.050654888 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.061863899 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.061939001 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.061975956 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:55.062055111 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.062055111 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.062467098 CEST	49798	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:57:55.062505960 CEST	443	49798	199.83.44.71	192.168.2.4
Oct 24, 2024 02:57:58.192750931 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:57:58.192766905 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:58:03.481395006 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:03.481424093 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:03.481513023 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:03.481827974 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:03.481848001 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.232570887 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.232644081 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.234277010 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.234287024 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.234786987 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.242957115 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.287343979 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.492943048 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.493006945 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.493050098 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.493082047 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.493098021 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.493125916 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.493150949 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.611403942 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.611490011 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.611495972 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.611520052 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.611552000 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.611568928 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.729866982 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.729929924 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.729944944 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.729955912 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.729991913 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.730010033 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.848493099 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.848520994 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.848539114 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.848594904 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.848604918 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.848661900 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.967125893 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.967189074 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.967202902 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.967212915 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:04.967247009 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:04.967263937 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.085664034 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.085727930 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.085742950 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.085752964 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.085783005 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.085794926 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.204332113 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.204385042 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.204412937 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.204428911 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.204454899 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.204473019 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.322819948 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.322873116 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.322910070 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.322927952 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.323030949 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.323218107 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.365073919 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.365144968 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.365219116 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.365219116 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.365226984 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.365351915 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.442882061 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.442939997 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.443011999 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.443011999 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.443021059 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.443142891 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.560638905 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.560703039 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.560753107 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.560760021 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.560797930 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.560935974 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.679223061 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.679269075 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.679328918 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.679335117 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.679457903 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.679457903 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.721157074 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.721198082 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.721321106 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.721322060 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.721328974 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.721560001 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.797596931 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.797791004 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.797861099 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.797861099 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.797889948 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.797919989 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.797919989 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.797928095 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.797933102 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.848208904 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.848295927 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.848570108 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.848625898 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.848666906 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.848923922 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.849618912 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.849643946 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.849792957 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.850442886 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.850450993 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.850558996 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.850627899 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.850665092 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.850704908 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.850717068 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.851403952 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.851444006 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.851768970 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.851779938 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.851890087 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.852405071 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.852418900 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:05.853323936 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:05.853355885 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.570782900 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.571247101 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.571259022 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.571731091 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.571734905 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.583770037 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.584196091 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.584228039 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.584527969 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.584536076 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.585551977 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.585829020 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.585835934 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.586200953 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.586205006 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.591429949 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.591741085 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.591770887 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.592164040 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.592175007 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.605283976 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.605591059 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.605604887 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.605969906 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.605974913 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.699009895 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.699034929 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.699080944 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.699081898 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.699174881 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.699306965 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.699323893 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.699336052 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.699341059 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.702044964 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.702088118 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.702148914 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.702258110 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.702276945 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.714688063 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.714766979 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.714832067 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.714946985 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.714947939 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.714991093 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.715018034 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.715711117 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.715851068 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.716033936 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.716130972 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.716135979 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.716144085 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.716146946 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.718662977 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.718677044 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.718727112 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.718935966 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.718950987 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.719013929 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.719036102 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.719096899 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.719207048 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.719235897 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.720863104 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.720913887 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.720973969 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.720995903 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.721035004 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.721090078 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.721265078 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.721266031 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.721282005 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.721302032 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.723705053 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.723725080 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.723778963 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.723967075 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.723978043 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.737121105 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.737176895 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.737365961 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.737373114 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.737482071 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.737487078 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.737498045 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.737517118 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.739348888 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.739392996 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:06.739470005 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.739602089 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:06.739635944 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.452027082 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.452621937 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.452663898 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.452791929 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.453126907 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.453126907 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.453136921 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.453165054 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.453640938 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.453649044 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.463824987 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.464427948 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.464478016 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.464529037 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.464618921 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.464633942 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.465158939 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.465158939 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.465183020 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.465194941 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.478363991 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.478843927 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.478893995 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.479085922 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.479099989 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.583122969 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.583168983 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.583270073 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.583451033 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.583451033 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.583492994 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.583508015 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.583511114 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.584068060 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.584150076 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.584155083 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.584181070 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.584187031 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.586642981 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.586705923 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.586819887 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.586941957 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.586951971 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.586966991 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.587035894 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.587202072 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.587203026 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.587290049 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.592535973 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.592689037 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.592814922 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.592814922 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.593025923 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.593050003 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.595160961 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.595190048 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.595401049 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.595401049 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.595429897 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.600090027 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.600250006 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.600347996 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.600347996 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.600367069 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.600384951 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.602566004 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.602597952 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.602701902 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.602807045 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.602819920 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.607429981 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.607543945 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.607681036 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.607681036 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.608623981 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.608644009 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.609735966 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.609750032 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:07.609837055 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.609932899 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:07.609947920 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.319180012 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.319715023 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.319775105 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.320141077 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.320157051 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.321196079 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.321630001 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.321650982 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.321960926 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.321966887 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.333818913 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.334642887 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.334671974 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.335107088 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.335114002 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.344036102 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.344428062 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.344477892 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.344746113 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.344760895 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.345084906 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.346189022 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.346219063 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.346470118 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.346481085 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.449330091 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.449426889 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.449824095 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.449825048 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.449825048 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.452905893 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.452931881 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.453068972 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.453339100 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.453356028 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.455936909 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.456049919 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.456116915 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.456147909 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.456166983 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.456180096 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.456186056 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.459433079 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.459513903 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.459620953 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.459834099 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.459870100 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.463308096 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.463515043 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.463782072 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.463834047 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.463845015 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.463867903 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.463872910 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.466186047 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.466211081 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.466396093 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.466583014 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.466607094 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.474772930 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.475075960 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.475260019 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.475310087 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.475337982 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.475358963 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.475366116 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.477565050 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.477592945 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.477679968 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.477885962 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.477914095 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.488014936 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.488142967 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.488234997 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.488270998 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.488289118 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.488300085 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.488306999 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.490638018 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.490647078 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.490720034 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.490897894 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.490909100 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:08.754698038 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:08.754759073 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.183983088 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.184658051 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.184746027 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.185072899 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.185087919 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.199742079 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.200134039 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.200207949 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.200570107 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.200584888 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.208153963 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.208540916 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.208570004 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.209080935 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.209089041 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.226636887 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.226955891 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.226974010 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.227349997 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.227355957 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.227849960 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.228140116 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.228159904 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.228600979 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.228607893 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.312254906 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.312339067 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.312566042 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.312649965 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.312649965 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.312690973 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.312727928 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.315596104 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.315640926 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.315711021 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.315892935 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.315907955 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.331459999 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.331568003 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.331643105 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.331691027 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.331705093 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.331716061 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.331720114 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.334104061 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.334152937 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.334358931 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.334481955 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.334501028 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.337430000 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.337578058 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.337788105 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.337826014 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.337826014 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.337845087 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.337858915 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.339963913 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.339987040 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.340043068 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.340164900 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.340178013 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.357760906 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.357913017 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.358017921 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.358041048 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.358047962 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.358062029 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.358068943 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.359775066 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.359817028 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.359874010 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.360078096 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.360119104 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.360208988 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.360285044 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.360348940 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.360424042 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.360466957 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.360500097 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.360517025 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.362200022 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.362237930 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:09.362297058 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.362426996 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:09.362442970 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.066777945 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.067259073 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.067270994 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.067706108 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.067711115 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.068526030 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.068877935 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.068883896 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.069340944 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.069353104 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.076860905 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.077209949 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.077248096 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.077616930 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.077622890 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.097213984 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.097510099 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.097520113 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.097837925 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.097843885 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.097923994 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.098269939 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.098289013 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.098573923 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.098581076 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.202219963 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.202270985 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.202357054 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.202404022 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.203330040 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203330040 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203485012 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203502893 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.203516006 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203522921 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.203651905 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203651905 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.203659058 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.203668118 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.206063032 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206098080 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.206156969 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206223011 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206300974 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206306934 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.206309080 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.206406116 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206479073 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.206499100 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.210309982 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.210685015 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.210777998 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.210814953 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.210814953 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.210829973 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.210840940 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.212513924 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.212549925 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.212642908 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.212769985 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.212783098 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231029034 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231194019 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231297970 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231391907 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231391907 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231458902 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231492996 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231503010 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231534004 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231631041 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231631041 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.231638908 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.231648922 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.233176947 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233206034 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.233289957 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233299971 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.233325005 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233402014 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233526945 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233529091 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:10.233536959 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:10.233542919 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.152883053 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.153332949 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.153347969 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.153744936 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.153752089 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.154177904 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.154733896 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.154733896 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.154759884 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.154782057 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156188011 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156310081 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156483889 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156527996 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.156563044 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156735897 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.156745911 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.156913996 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.156972885 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.157020092 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.157094002 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.157215118 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.157228947 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.157376051 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.157390118 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.282648087 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.283004999 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.283050060 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.283102036 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.283122063 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.283160925 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.283169985 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.284121037 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.284336090 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.284388065 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.284465075 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.284481049 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.284492016 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.284496069 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.285856962 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286000013 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286061049 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286393881 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286412001 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286443949 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286467075 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286505938 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286567926 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286569118 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286567926 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286601067 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286624908 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286766052 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286797047 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286829948 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.286864042 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.286876917 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.287056923 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.287144899 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.287195921 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.287201881 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.287210941 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.287214994 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288434982 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288494110 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288511992 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288578987 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288616896 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288675070 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288688898 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288702011 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288753033 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288758993 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.288767099 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.288770914 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.289055109 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.289097071 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.289299011 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.289408922 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.289438963 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.290499926 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.290507078 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:11.290683985 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.290795088 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:11.290803909 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.007621050 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.018642902 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.024410009 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.024465084 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.026850939 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.026864052 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.027793884 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.027798891 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.028368950 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.028425932 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.029592991 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.029607058 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.031043053 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.031070948 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.031903982 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.031908989 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.032363892 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.032392979 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.032943964 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.032957077 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.037024975 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.037487984 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.037493944 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.039052963 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.039057016 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.152542114 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.152652025 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.152719975 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.152987957 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.153028965 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.153065920 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.153081894 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.153959990 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.154115915 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.154194117 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.155028105 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.155035019 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.157417059 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.157525063 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.157593012 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.158148050 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.158178091 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.158848047 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.158992052 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.159049034 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.161473989 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.161489010 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.164096117 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.164139986 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.164215088 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.165440083 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.165545940 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.165620089 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.165651083 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.165698051 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.166037083 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166055918 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.166126966 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166203022 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166224003 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.166687965 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166696072 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.166714907 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166728020 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.166752100 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166824102 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.166832924 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.168745995 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.168895960 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.169091940 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.169110060 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.169115067 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.169141054 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.169145107 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.171444893 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.171456099 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.171575069 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.171693087 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.171704054 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.898751974 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.899384022 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.899431944 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.900307894 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.900321007 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.902328968 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.902972937 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.902990103 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.903763056 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.903776884 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.906955957 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.907500982 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.907516003 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.908082008 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.908087015 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.915451050 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.916400909 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.916416883 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.917984962 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.917996883 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.922373056 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.922887087 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.922904015 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:12.923815966 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:12.923826933 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.028379917 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.028543949 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.028646946 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.028847933 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.028879881 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.028907061 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.028923988 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.030358076 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.030560970 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.030653000 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.030765057 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.030778885 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.030787945 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.030792952 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.036143064 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.036226034 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.036258936 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.036279917 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.036295891 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.036323071 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.036847115 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 24, 2024 02:58:13.036962032 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.037158012 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.037214041 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.037781954 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.037795067 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.037890911 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.037926912 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.038245916 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.038250923 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.038321018 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.038324118 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.040842056 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.040873051 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.041002989 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.041162014 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.041178942 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.042378902 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 24, 2024 02:58:13.042437077 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 24, 2024 02:58:13.053534985 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.053796053 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.053900957 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.054310083 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.054996967 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.055053949 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.060009003 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.060018063 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.060024977 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.060028076 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.075783968 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.075798988 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.075875044 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.075886011 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.079253912 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.079277992 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.079381943 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.079624891 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.079638958 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.082499981 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.082530022 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.082640886 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.082804918 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.082815886 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.769610882 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.770129919 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.770190001 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.770564079 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.770579100 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.786160946 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.786688089 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.786700964 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.786781073 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.787112951 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.787117958 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.787250996 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.787266970 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.787523985 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.787530899 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.814249992 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.814598083 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.814613104 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.815016031 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.815021992 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.830843925 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.831214905 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.831233025 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.831557989 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.831562996 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.902621031 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.902852058 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.902909994 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.903867960 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.903907061 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.903944016 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.903959990 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.910135031 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.910151958 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.910291910 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.910588980 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.910602093 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.918569088 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.918632984 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.918699980 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.918756962 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.918900013 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.919034958 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.919147968 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.919167042 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.919440031 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.919447899 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.919457912 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.919461966 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.922971010 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.923008919 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.923075914 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.944719076 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.944786072 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.944837093 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.966182947 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.966387033 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.966473103 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.972090960 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.972157001 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.972233057 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.998951912 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.998982906 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:13.999087095 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:13.999105930 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.017359018 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.017368078 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.017384052 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.017389059 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.035655022 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.035679102 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.035681963 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.035691023 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.042265892 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.042293072 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.042345047 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.043817997 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.043850899 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.043915033 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.044867992 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.044882059 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.045229912 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.045258999 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.229243994 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:58:14.229396105 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 02:58:14.229461908 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 02:58:14.229949951 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:14.230029106 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:14.230103016 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:14.230403900 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:14.230438948 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:14.643273115 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.644217014 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.644238949 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.645036936 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.645042896 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.728404999 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.729393959 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.729454994 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.730272055 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.730285883 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.766983986 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.772782087 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.772798061 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.773215055 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.773231983 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.776714087 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.777316093 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.777365923 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.777869940 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.777882099 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.778443098 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.778594017 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.778651953 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.778886080 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.778894901 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.783194065 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.783226013 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.783296108 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.783391953 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.783405066 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.783627033 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.783911943 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.783930063 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.784297943 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.784301996 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.866332054 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.866425037 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.866617918 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.866703033 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.866744995 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.866775990 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.866791964 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.869496107 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.869554043 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.869690895 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.869852066 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.869884968 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.902086973 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.902285099 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.902394056 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.902394056 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.902419090 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.902435064 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.904656887 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.904680014 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.904748917 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.904884100 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.904897928 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.910248041 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.910363913 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.910422087 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.910454988 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.910474062 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.910499096 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.910511017 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.912688971 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.912709951 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.912817001 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.913280010 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.913309097 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.914496899 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.914675951 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.914745092 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.914776087 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.914776087 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.914789915 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.914800882 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.916639090 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.916665077 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:14.916841030 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.916989088 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:14.917010069 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.281361103 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:15.282274008 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:15.282335997 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:15.282826900 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:15.283600092 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:15.283699036 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:15.333411932 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:15.510149002 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.510704041 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.510714054 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.511147976 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.511152983 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.605838060 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.606328964 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.606353045 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.606760025 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.606772900 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.636285067 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.636650085 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.636682034 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.636945963 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637010098 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637021065 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637289047 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637298107 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637520075 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637653112 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637705088 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637705088 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637728930 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637828112 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637828112 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.637839079 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.637845039 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.640547037 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.640573025 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.640654087 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.640769005 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.640782118 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.670011044 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.670347929 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.670367002 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.670696974 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.670702934 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.735196114 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.736042023 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.736121893 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.736171961 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.736172915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.736196041 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.736217976 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.738794088 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.738826036 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.738979101 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.739095926 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.739104033 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.762900114 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.763047934 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.763137102 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.763169050 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.763185978 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.763211966 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.763222933 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.765209913 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.765223980 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.765376091 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.765506983 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.765523911 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.766463041 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.766875982 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.766971111 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.766990900 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.766990900 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.767000914 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.767010927 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.768752098 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.768817902 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.769002914 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.769119978 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.769139051 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.804035902 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.804476023 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.804538965 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.804589987 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.804609060 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.804631948 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.804641008 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.807274103 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.807297945 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:15.807382107 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.807560921 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:15.807574987 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.374685049 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.375268936 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.375299931 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.375905037 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.375910997 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.485076904 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.485579014 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.485589027 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.486200094 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.486205101 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.497004986 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.497570038 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.497582912 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.498349905 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.498356104 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.504594088 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.504940987 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.505033016 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.505247116 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.515682936 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.515753984 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.516578913 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.516630888 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.516797066 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.516814947 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.516827106 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.516834021 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.522784948 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.522870064 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.522953987 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.523339987 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.523377895 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.545176029 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.545886040 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.545914888 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.546322107 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.546328068 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.615890026 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.616252899 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.616316080 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.616344929 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.616363049 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.616384983 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.616390944 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.619668007 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.619687080 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.619920015 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.620120049 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.620134115 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.628803968 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.629018068 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.629127979 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.629164934 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.629182100 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.629195929 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.629203081 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.631803036 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.631875992 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.631953955 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.632131100 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.632164955 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.642306089 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.642460108 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.642530918 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.642590046 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.642590046 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.642621040 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.642651081 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.644819975 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.644901991 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.644982100 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.645106077 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.645142078 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.674813986 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.674978971 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.675031900 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.675198078 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.675204992 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.675215960 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.675220013 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.677968025 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.677989006 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:16.678220987 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.678383112 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:16.678396940 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.269457102 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.270031929 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.270093918 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.270801067 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.270853043 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.344958067 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.345480919 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.345494032 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.346106052 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.346112013 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.381113052 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.381659985 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.381747007 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.382114887 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.382132053 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.385274887 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.385668993 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.385693073 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.386105061 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.386121988 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.401020050 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.401242018 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.401392937 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.401462078 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.401462078 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.401495934 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.401520967 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.404438019 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.404472113 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.404556036 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.404690027 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.404706955 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.433852911 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.434370995 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.434433937 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.434791088 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.434806108 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.473527908 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.473594904 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.473649025 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.473742962 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.473751068 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.473758936 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.473762989 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.476330042 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.476341963 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.476397991 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.476512909 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.476531029 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.512728930 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.512913942 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.513171911 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.513171911 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.513173103 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.515299082 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.515363932 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.515502930 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.515626907 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.515661001 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.517127037 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.517252922 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.517332077 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.517410040 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.517410040 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.517451048 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.517481089 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.519388914 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.519399881 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.519613981 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.519731045 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.519742012 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.566581011 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.566994905 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.567277908 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.567277908 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.567277908 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.570744038 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.570825100 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.570898056 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.571050882 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.571085930 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.817955971 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.818026066 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:17.880403042 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:17.880486965 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.131725073 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.132381916 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.132441044 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.133079052 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.133094072 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.208760977 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.209825039 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.209856987 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.210920095 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.210926056 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.243038893 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.243721008 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.243774891 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.244224072 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.244257927 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.254281044 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.254821062 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.254829884 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.255377054 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.255382061 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.260232925 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.260447025 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.260710955 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.260710955 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.260767937 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.260797024 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.263802052 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.263843060 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.263972998 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.264096975 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.264127016 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.311034918 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.311568022 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.311619043 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.312257051 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.312269926 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.337924004 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.338082075 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.338182926 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.338371038 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.338371038 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.338382006 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.338391066 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.344778061 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.344877005 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.345077991 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.348654032 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.348690987 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.370702028 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.370898962 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.371011972 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.371102095 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.371102095 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.371144056 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.371175051 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.373578072 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.373661995 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.373868942 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.373868942 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.373950958 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.385874987 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.386003971 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.386620045 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.386646986 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.386646986 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.386660099 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.386667967 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.390508890 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.390541077 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.390993118 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.390993118 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.391122103 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.440872908 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.441025972 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.441603899 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.441757917 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.441757917 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.441798925 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.441828012 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.448647022 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.448687077 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:18.452755928 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.453142881 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:18.453183889 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.004122972 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.006824017 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.006824017 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.006886959 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.006995916 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.069431067 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.070642948 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.070642948 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.070708990 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.070751905 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.114489079 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.115628004 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.115690947 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.116389036 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.116404057 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.123778105 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.124680042 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.124738932 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.128827095 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.128880024 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.135628939 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.135859013 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.136178017 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.136733055 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.136733055 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.136799097 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.136833906 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.144650936 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.144685984 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.146646023 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.146894932 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.146909952 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.189275026 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.190303087 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.190362930 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.191270113 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.191344023 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.198205948 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.198245049 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.198385000 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.198604107 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.198604107 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.198649883 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.198682070 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.201999903 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.202083111 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.204125881 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.204360962 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.204396009 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.248802900 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.248960018 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.249051094 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.255775928 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.255923033 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.256123066 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.257213116 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.257246017 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.268539906 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.268579960 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.281075001 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.281110048 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.281299114 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.282361031 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.282385111 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.284205914 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.284245968 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.284301996 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.284446955 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.284462929 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.319623947 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.319808960 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.319878101 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.320333004 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.320369005 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.320403099 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.320419073 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.327439070 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.327471018 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:19.327536106 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.328011990 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:19.328022003 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.015867949 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.018883944 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.018897057 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.020426035 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.020431995 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.143992901 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.145442009 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.145483017 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.147196054 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.147202969 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.147203922 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149297953 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.149358034 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149682999 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149734974 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149800062 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.149812937 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149862051 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.149946928 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.151087046 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.151106119 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.151527882 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.151848078 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.151863098 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.151931047 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.151936054 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.152209044 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.152921915 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.152931929 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.154517889 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.154524088 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.161499977 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.161514997 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.163614988 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.163619041 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.170772076 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.170811892 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.170871973 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.171387911 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.171406984 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.276201010 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.276298046 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.276426077 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.279304028 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.279333115 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.279351950 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.279360056 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.280448914 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.280606031 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.281008959 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.281843901 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.281888008 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.281928062 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.281945944 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.287971973 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.288003922 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.288074970 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.288116932 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.288710117 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.288716078 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.289088964 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.289098978 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.289155960 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.289179087 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.293526888 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.293589115 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.293723106 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.293728113 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.293917894 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.293973923 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.293973923 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.293984890 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.293992996 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.296828032 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.296895027 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297138929 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297183037 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297246933 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297374010 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297418118 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297662973 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297686100 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297698021 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297907114 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297920942 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.297965050 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.297971964 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.301011086 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.301024914 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.305018902 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.308901072 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.308938980 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.910871029 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.911849022 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.911849976 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:20.911892891 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:20.911915064 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.024816036 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.025686026 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.025707006 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.028665066 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.028669119 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040288925 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040344954 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040371895 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040541887 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040571928 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.040621996 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.040873051 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.040873051 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.040894032 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.040906906 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.041244984 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.041304111 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.041769981 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.041785955 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.043560982 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.044147968 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.044188023 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.044528961 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.044537067 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.048692942 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.048753977 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.049015999 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.049015999 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.049087048 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.050117970 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.053127050 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.053157091 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.056643963 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.056669950 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.156378984 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.156563997 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.156752110 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.156752110 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.156752110 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.159854889 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.159940004 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.160315037 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.160315037 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.160448074 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.171587944 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.171731949 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.171855927 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.171855927 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.171926975 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.171955109 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.174240112 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.174283028 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.174541950 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.174542904 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.174609900 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.176754951 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.176906109 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.177015066 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.177015066 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.177015066 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.179167986 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.179254055 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.179627895 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.179627895 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.179771900 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.184322119 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.184484959 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.184578896 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.184578896 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.184631109 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.184647083 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.186522007 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.186544895 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.186655998 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.186759949 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.186779022 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.458893061 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.458918095 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.490155935 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.490176916 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.785279036 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.786844015 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.786904097 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.788933039 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.788985014 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.894884109 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.896235943 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.896297932 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.897840977 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.897895098 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.910698891 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.911576986 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.911700010 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.911716938 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.913552999 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.913563967 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.914709091 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.914772034 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.914817095 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.914989948 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.915055037 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.915956020 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.916012049 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.916492939 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.916492939 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.916534901 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.916563988 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.924982071 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.925024033 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.925237894 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.925400972 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.925430059 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.933763981 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.934592009 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.934607983 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:21.935693026 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:21.935703993 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.025130033 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.025294065 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.025377035 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.025938034 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.025985003 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.026016951 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.026034117 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.035712957 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.035748959 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.035805941 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.036201000 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.036214113 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.039612055 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.039781094 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.039838076 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.040117025 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.040148973 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.040173054 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.040189028 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.046485901 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.046649933 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.046824932 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.047125101 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.047210932 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.047466993 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.047466993 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.047558069 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.048307896 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.048307896 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.048352003 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.048381090 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.054132938 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.054150105 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.054228067 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.055000067 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.055016041 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.081756115 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.081923008 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.082005024 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.083256006 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.083280087 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.083302021 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.083329916 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.097461939 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.097505093 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.097572088 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.098212957 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.098229885 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.646502972 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.647456884 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.647456884 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.647547960 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.647598982 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.774616957 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.774687052 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.775964022 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.776343107 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.776343107 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.776458025 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.776490927 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.777132988 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.780522108 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.780538082 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.783036947 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.783075094 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.783078909 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.789746046 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.789808035 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.792809963 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.792823076 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.792862892 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.792864084 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.792999029 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.793406010 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.793416023 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.805445910 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.806368113 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.806380987 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.808185101 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.808190107 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.838146925 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.841037989 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.841073990 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.841691971 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.841698885 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.913710117 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.913757086 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.913862944 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.913933039 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.914084911 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.914084911 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.914114952 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.914129972 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.916917086 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.916960001 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.917216063 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.917216063 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.917252064 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.917998075 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.918154001 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.918276072 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.918277025 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.918566942 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.918607950 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.920475960 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.920506954 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.920648098 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.920763016 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.920777082 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.939551115 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.939618111 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.939719915 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.939825058 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.939825058 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.939907074 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.939919949 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.941936016 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.941955090 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.942181110 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.942414999 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.942426920 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.969789028 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.969947100 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.970108986 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.970240116 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.970240116 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.970263004 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.970274925 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.972384930 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.972470045 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:22.972801924 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.972801924 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:22.972939968 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.536767006 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.537467957 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.537482977 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.537879944 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.537889004 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.667779922 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.667968988 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.668051004 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.668124914 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.668137074 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.668209076 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.668215036 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.671174049 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.671204090 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.671330929 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.671664000 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.671679974 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.672956944 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.673316956 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.673329115 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.673836946 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.673841953 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.696154118 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.696574926 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.696583986 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.697063923 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.697067976 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.723699093 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.724298000 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.724359989 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.724642038 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.724667072 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.804389954 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.804459095 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.804567099 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.804569960 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.804714918 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.804877043 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.804877043 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.804893017 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.804900885 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.807760954 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.807847977 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.808135033 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.808135033 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.808270931 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.825922966 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.826069117 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.826160908 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.826193094 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.826193094 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.826205969 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.826216936 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.828461885 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.828488111 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.828555107 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.828735113 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.828747034 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.855771065 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.855926991 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.856107950 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.856107950 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.856107950 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.857952118 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.857985020 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.858043909 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.858156919 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.858171940 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.871619940 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.872062922 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.872093916 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:23.872503996 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:23.872513056 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.006362915 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.006405115 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.006575108 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.006618977 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.006618977 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.006639004 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.006654978 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.008800983 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.008827925 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.008891106 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.009057045 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.009071112 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.162062883 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.162091970 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.418092012 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.418744087 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.418759108 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.419301033 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.419305086 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.536076069 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.536803007 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.536887884 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.537570000 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.537622929 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.554050922 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.554151058 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.554264069 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.554337025 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.554354906 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.554372072 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.554375887 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.557065010 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.557100058 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.557195902 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.557380915 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.557404995 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.565291882 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.565651894 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.565660954 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.566060066 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.566065073 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.599562883 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.600152969 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.600189924 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.600662947 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.600670099 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.664113045 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.664175034 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.664290905 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.664526939 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.664627075 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.664627075 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.664669991 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.664706945 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.667649984 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.667733908 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.667871952 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.668101072 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.668145895 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.694432020 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.694565058 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.694684029 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.694901943 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.694915056 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.694947958 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.694953918 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.698390007 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.698430061 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.698585033 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.698717117 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.698738098 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.733620882 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.733694077 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.733799934 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.733870029 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.734100103 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.734121084 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.734136105 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.734143019 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.736351967 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.736411095 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.736704111 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.736829042 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.736848116 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.745878935 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.747412920 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.747422934 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.747920990 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.747925997 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.875608921 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.875772953 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.875925064 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.875987053 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.876000881 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.876035929 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.876045942 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.878751993 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.878786087 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:24.878973007 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.879132032 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:24.879153013 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.292323112 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.292932987 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.292962074 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.293443918 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.293451071 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.295520067 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:25.295644999 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:25.295931101 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:25.420475960 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.421082020 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.421143055 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.421705008 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.421757936 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.421829939 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.421968937 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.422132969 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.422132969 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.422162056 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.422173977 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.424382925 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.425149918 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.425149918 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.425180912 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.425209045 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.425430059 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.425491095 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.425620079 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.425714016 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.425730944 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.483933926 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.484797955 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.484826088 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.484858990 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.484867096 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.553550005 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.553590059 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.553634882 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.553658009 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.553875923 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.554019928 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.554033041 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.554181099 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.554188013 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.556843042 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.556927919 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.557308912 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.557310104 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.557442904 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.597584963 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.597740889 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.597981930 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.597982883 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.598069906 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.598107100 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.600195885 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.600250959 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.600805998 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.600805998 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.600873947 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.613492012 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.614247084 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.614247084 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.614259958 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.614279032 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.615920067 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.616082907 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.616849899 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.616851091 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.616988897 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.617027998 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.619116068 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.619200945 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.619364023 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.619427919 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.619452953 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.744658947 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.744718075 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.744915962 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.744915962 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.745032072 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.745049000 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.746972084 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.747000933 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:25.747224092 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.747224092 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:25.747251987 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.170388937 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.172430038 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.172451019 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.173002958 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.173015118 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.189158916 CEST	49855	443	192.168.2.4	172.217.16.132
Oct 24, 2024 02:58:26.189220905 CEST	443	49855	172.217.16.132	192.168.2.4
Oct 24, 2024 02:58:26.293775082 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.302323103 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.302468061 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.302529097 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.339307070 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.342919111 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.363229990 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.383023024 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.383081913 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.383791924 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.383810043 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.384413958 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.384465933 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.384716988 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.384735107 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.385482073 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.385482073 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.385519028 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.385541916 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.386610985 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.386630058 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.387056112 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.387067080 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.388114929 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388197899 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.388454914 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388490915 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.388503075 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388555050 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388741970 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388792992 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.388890028 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.388901949 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.389390945 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.389431953 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.389667988 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.389791965 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.389831066 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.389966965 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.389996052 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.390069962 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.390153885 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.390161991 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.390485048 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.390506983 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.390558958 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.390718937 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:26.390733957 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:26.399405003 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.399446011 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.399554968 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.399686098 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.399708033 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.487093925 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.488073111 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.488090038 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.488630056 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.488634109 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.511598110 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.511758089 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.511837006 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.512156963 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.512157917 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.512223959 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.512268066 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.513259888 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.513813019 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.513912916 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.514472961 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.514827967 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.514827967 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.514869928 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.514897108 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.514939070 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.515017986 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.515052080 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.515110970 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.515918016 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.515960932 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.515990973 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.516007900 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.519733906 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.519815922 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.520080090 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.520637035 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.520689011 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.522772074 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.522811890 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.522876978 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.523053885 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.523072958 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.523742914 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.523794889 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.523858070 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.524085045 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.524116039 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.723665953 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.723825932 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.723891973 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.726619005 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.726635933 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.733958006 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.734041929 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:26.734285116 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.734632969 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:26.734685898 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.031053066 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.031202078 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.031429052 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.031441927 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.031610012 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.031672001 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.032221079 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.032489061 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.032547951 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.033133984 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.033248901 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.033605099 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.033663988 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.033751011 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.033760071 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.033826113 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.033910036 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.035077095 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.035324097 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.035346985 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.036823988 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.036881924 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.037573099 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.037667990 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.037688017 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.047327995 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.047369003 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.047538042 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.047550917 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.047705889 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.047718048 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.048386097 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.048779011 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.048914909 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.048940897 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.049011946 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.049058914 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.049072027 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.049681902 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.049845934 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.049942970 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.085139036 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.085249901 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.085294008 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.100687027 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.100692034 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.100711107 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.124185085 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.124707937 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.124728918 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.125184059 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.125190020 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.131845951 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.147173882 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.187455893 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.187550068 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.187941074 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.189541101 CEST	49924	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.189549923 CEST	443	49924	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.196008921 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.196093082 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.196177959 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.196187973 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.196335077 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.196388960 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.196739912 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.196840048 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.197030067 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.197120905 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.197170019 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.197220087 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.197894096 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.197912931 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.198153019 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.198194981 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.198777914 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.199001074 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.199057102 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.207644939 CEST	49922	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.207706928 CEST	443	49922	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.207926035 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.208009005 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.208106041 CEST	49923	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.208125114 CEST	443	49923	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.208292961 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.209207058 CEST	49926	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.209224939 CEST	443	49926	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.213959932 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.214034081 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.240942001 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.240981102 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241205931 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.241513968 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.241532087 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241736889 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241759062 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241775036 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241790056 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241797924 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241830111 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.241843939 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.241858006 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.241858006 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.242710114 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.242793083 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.242938995 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.243855953 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.243892908 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.244493008 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.244503975 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.244568110 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.244735003 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.244752884 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.246069908 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.246103048 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.246179104 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.246351004 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.246366024 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.252871990 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.252938032 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.252995014 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.253047943 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.253216982 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.253216982 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.253225088 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.253233910 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.256824970 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.256844044 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.256902933 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.257081985 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.257097006 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.257936954 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.258388042 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.258425951 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.258969069 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.258975029 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.272249937 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.272578001 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.272594929 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.273017883 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.273024082 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.273395061 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.275430918 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.275454998 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.275646925 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.275655031 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.288661957 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.357382059 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.357738972 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.358674049 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.358680964 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.358711958 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.358814955 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.358815908 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.358829975 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.386424065 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.386574984 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.386811018 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.386856079 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.386856079 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.386874914 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.386898041 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.389342070 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.389415979 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.389517069 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.389729977 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.389764071 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.403623104 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.403779030 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.404093027 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.404181957 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.404213905 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.404213905 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.404230118 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.404252052 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.404691935 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.405029058 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.405119896 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.405128956 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.405160904 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.405165911 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.407727957 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.407738924 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.407753944 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.407840014 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.407876015 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.407975912 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.407988071 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.408020020 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.408199072 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.408232927 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.412676096 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.476763010 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476773977 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476799965 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476819038 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476830006 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476841927 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.476941109 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.476941109 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.476941109 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.476941109 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.478688002 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.478705883 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.478889942 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.478902102 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.479149103 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.482789993 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.483582973 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.483582973 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.483627081 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.483653069 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.594342947 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.594366074 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.594450951 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.594451904 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.594475985 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.594575882 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.594824076 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.594899893 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.594923019 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.595031977 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.596287012 CEST	49925	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.596306086 CEST	443	49925	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.602014065 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.602041006 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.602324963 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.602735996 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.602747917 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.615529060 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:27.615573883 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:27.615737915 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:27.616417885 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.616503000 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.616569042 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.616592884 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.616604090 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.616693020 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.616700888 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.616791964 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.618927956 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:27.618948936 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:27.619097948 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.619112015 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.621099949 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.621099949 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.621143103 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.621170044 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.623718023 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.623738050 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.624037981 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.624103069 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:27.624109030 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:27.842945099 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.843213081 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.843244076 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.843734980 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.844073057 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.844162941 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.844202995 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.844202995 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.844244957 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.849782944 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.850044966 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.850107908 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.850632906 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.851094007 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.851094961 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.851094961 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.851149082 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.851211071 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.853496075 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.853784084 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.853842020 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.854971886 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.855070114 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.855365038 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.855365038 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.855365038 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.855407953 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.855443954 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.882127047 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.882364035 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.882386923 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.883421898 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.883955956 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.883956909 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.883999109 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.884092093 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.894932985 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.895164013 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.895194054 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.895802021 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.896660089 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.896754026 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.896799088 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.897357941 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.897360086 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.897413015 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.897429943 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.898534060 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.898535967 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.898793936 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.898802042 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.898808956 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.898849010 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.899735928 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.899822950 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.900139093 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.900139093 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.900180101 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.900228977 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.902517080 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.902625084 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.902930021 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.902930021 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.902947903 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.903009892 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.929658890 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.939368010 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.943929911 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.943933964 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.943944931 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.943967104 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.943980932 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.944004059 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:27.989950895 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:27.990076065 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.000344038 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.000853062 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.000935078 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.001302958 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.001317978 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.001729012 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.001996040 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.002912045 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.003119946 CEST	49934	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.003154039 CEST	443	49934	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.008358002 CEST	49950	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.008405924 CEST	443	49950	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.008805037 CEST	49950	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.008945942 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.008980036 CEST	49950	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.008996010 CEST	443	49950	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.009021997 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.009166002 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.009669065 CEST	49936	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.009697914 CEST	443	49936	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.014534950 CEST	49951	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.014553070 CEST	443	49951	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.014641047 CEST	49951	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.014817953 CEST	49951	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.014827013 CEST	443	49951	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.021697044 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.021871090 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.022072077 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.022277117 CEST	49935	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.022316933 CEST	443	49935	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.030754089 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.030896902 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.032763004 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.042740107 CEST	49938	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.042762041 CEST	443	49938	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.043998003 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.044059992 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.044671059 CEST	49952	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.044696093 CEST	443	49952	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.044732094 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.044913054 CEST	49952	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.045196056 CEST	49952	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.045214891 CEST	443	49952	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.046355963 CEST	49937	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.046371937 CEST	443	49937	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.048017025 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.048207045 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.048677921 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.048989058 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.049062967 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.050841093 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.054668903 CEST	49939	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.054677963 CEST	443	49939	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.054677010 CEST	49940	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.054704905 CEST	443	49940	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.119553089 CEST	49953	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.119580030 CEST	443	49953	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.119669914 CEST	49953	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.120484114 CEST	49953	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.120502949 CEST	443	49953	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.122198105 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.122726917 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.122773886 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.123177052 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.123188972 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.132023096 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.132249117 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.132700920 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.132747889 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.132747889 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.132774115 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.132796049 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.140664101 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.140677929 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.140928030 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.141706944 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.141725063 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.147408009 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.148025990 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.148061037 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.150614023 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.150625944 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.157740116 CEST	49955	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.157748938 CEST	443	49955	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.158170938 CEST	49955	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.158170938 CEST	49955	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.158195972 CEST	443	49955	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.159382105 CEST	49956	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.159430027 CEST	443	49956	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.159545898 CEST	49956	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.162980080 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.163031101 CEST	49956	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.163049936 CEST	443	49956	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.179677010 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.179716110 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.179881096 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.179893970 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.230865955 CEST	49959	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.230948925 CEST	443	49959	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.231242895 CEST	49959	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.231570959 CEST	49959	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.231652021 CEST	443	49959	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.233051062 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.234252930 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.234266043 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.235250950 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.235662937 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.236152887 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.236152887 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.236171007 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.236216068 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.248235941 CEST	49960	443	192.168.2.4	34.149.148.54
Oct 24, 2024 02:58:28.248317957 CEST	443	49960	34.149.148.54	192.168.2.4
Oct 24, 2024 02:58:28.248464108 CEST	49960	443	192.168.2.4	34.149.148.54
Oct 24, 2024 02:58:28.250735044 CEST	49960	443	192.168.2.4	34.149.148.54
Oct 24, 2024 02:58:28.250776052 CEST	443	49960	34.149.148.54	192.168.2.4
Oct 24, 2024 02:58:28.252005100 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.252036095 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.252079964 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.252136946 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.252202988 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.255790949 CEST	49961	443	192.168.2.4	35.190.27.197
Oct 24, 2024 02:58:28.255827904 CEST	443	49961	35.190.27.197	192.168.2.4
Oct 24, 2024 02:58:28.255974054 CEST	49961	443	192.168.2.4	35.190.27.197
Oct 24, 2024 02:58:28.256287098 CEST	49961	443	192.168.2.4	35.190.27.197
Oct 24, 2024 02:58:28.256306887 CEST	443	49961	35.190.27.197	192.168.2.4
Oct 24, 2024 02:58:28.262037039 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.262067080 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.262075901 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.262110949 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.262126923 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.262319088 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.262336969 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.263817072 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.264756918 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.264756918 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.264849901 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.264930964 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.274039030 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.274264097 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.274283886 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.275712013 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.275866032 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.276410103 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.276410103 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.276456118 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.276519060 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.282335997 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.282350063 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.292387009 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.292526007 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.292711973 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.307111979 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.307183027 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.307281971 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.307307005 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.307332993 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.307357073 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.307706118 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.312623024 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.312633991 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.321631908 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.321672916 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.321877956 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.322097063 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.322129011 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.322143078 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.322149992 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.326740980 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.326771021 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.326797009 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.326809883 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.329183102 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.329183102 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.329183102 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.329191923 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.329202890 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.330339909 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.330348015 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.330455065 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.330576897 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.330588102 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.332118988 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.332130909 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.332411051 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.332411051 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.332434893 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.359013081 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.359586000 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.360037088 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.360060930 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.360496044 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.360502005 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.380292892 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.429372072 CEST	49969	443	192.168.2.4	35.227.229.24
Oct 24, 2024 02:58:28.429394960 CEST	443	49969	35.227.229.24	192.168.2.4
Oct 24, 2024 02:58:28.429456949 CEST	49969	443	192.168.2.4	35.227.229.24
Oct 24, 2024 02:58:28.429852962 CEST	49969	443	192.168.2.4	35.227.229.24
Oct 24, 2024 02:58:28.429868937 CEST	443	49969	35.227.229.24	192.168.2.4
Oct 24, 2024 02:58:28.432061911 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.432183027 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.432249069 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.432262897 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.432313919 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.432321072 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.434092999 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.434140921 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.434149981 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.434206963 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.434248924 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.434611082 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.434611082 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.434623003 CEST	443	49947	199.83.44.37	192.168.2.4
Oct 24, 2024 02:58:28.434751034 CEST	49947	443	192.168.2.4	199.83.44.37
Oct 24, 2024 02:58:28.441550016 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.441565990 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.441663027 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.441675901 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.441759109 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.451087952 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451122046 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451142073 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451271057 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451292038 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.451292038 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.451292038 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.451351881 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451498032 CEST	443	49948	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.451520920 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.451555014 CEST	49948	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.487874985 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.488033056 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.488092899 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.497432947 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.497433901 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.497452021 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.497462988 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.501481056 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.501518965 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.501765013 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.501765013 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.501804113 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.556639910 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.556648970 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.556710958 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.556723118 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.556771040 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.556786060 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.557797909 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.557805061 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.558182001 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.558193922 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.598372936 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.673104048 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.673110962 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.673284054 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.673331022 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.673383951 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.673384905 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.673384905 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.680629015 CEST	443	49950	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.680680037 CEST	443	49951	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.700798988 CEST	443	49952	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.726017952 CEST	49951	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.726130009 CEST	49950	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.742172003 CEST	49952	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.750432968 CEST	443	49953	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.787180901 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.787194014 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.787333965 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.787341118 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.787383080 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.787431002 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.793296099 CEST	443	49955	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.804548979 CEST	49953	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.820681095 CEST	443	49956	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.836682081 CEST	49955	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.836843014 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.868537903 CEST	443	49960	34.149.148.54	192.168.2.4
Oct 24, 2024 02:58:28.868794918 CEST	49956	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.879498959 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.879682064 CEST	443	49961	35.190.27.197	192.168.2.4
Oct 24, 2024 02:58:28.880120993 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.880131006 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.880935907 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:28.880943060 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:28.884711981 CEST	443	49959	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902473927 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902484894 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902558088 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902618885 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902723074 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.902723074 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.902723074 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.902740002 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.902792931 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.903474092 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:28.903548956 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.916049004 CEST	49960	443	192.168.2.4	34.149.148.54
Oct 24, 2024 02:58:28.931226969 CEST	49961	443	192.168.2.4	35.190.27.197
Oct 24, 2024 02:58:28.931600094 CEST	49959	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:28.947278023 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:29.018085957 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.018151999 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.018260002 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.018276930 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.018384933 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.018403053 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.018420935 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.018434048 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.018441916 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.018493891 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:29.018507957 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:29.018563986 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:29.018577099 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:29.018623114 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:29.018636942 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:29.018637896 CEST	443	49946	199.83.44.71	192.168.2.4
Oct 24, 2024 02:58:29.018636942 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:29.018670082 CEST	49946	443	192.168.2.4	199.83.44.71
Oct 24, 2024 02:58:29.020946980 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.021012068 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.021095037 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.021277905 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.021310091 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.045326948 CEST	443	49969	35.227.229.24	192.168.2.4
Oct 24, 2024 02:58:29.071568966 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.072025061 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.072062016 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.072498083 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.072504997 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.076539993 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.077634096 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.077634096 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.077670097 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.077681065 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.091780901 CEST	49969	443	192.168.2.4	35.227.229.24
Oct 24, 2024 02:58:29.202910900 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.202931881 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.202961922 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.202996016 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.203027964 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.203332901 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.203332901 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.203355074 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.203368902 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.206496954 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.206536055 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.206660986 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.206796885 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.206805944 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.209661961 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.209825039 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.209943056 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.210032940 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.210032940 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.210043907 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.210053921 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.212235928 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.212260962 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.212349892 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.212483883 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.212502956 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.215640068 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.216080904 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.216103077 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.216506004 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.216511011 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.243072033 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.243421078 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.243437052 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.244443893 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.244448900 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.393430948 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.393641949 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.393781900 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.393781900 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.393951893 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.393966913 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.397010088 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.397047043 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.397129059 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.397428989 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.397445917 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.412678957 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.412748098 CEST	443	49963	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.412920952 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.412920952 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.412920952 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.415328026 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.415360928 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.415592909 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.415592909 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.415627956 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 24, 2024 02:58:29.727307081 CEST	49963	443	192.168.2.4	13.107.246.45
Oct 24, 2024 02:58:29.727329016 CEST	443	49963	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 02:57:10.346873045 CEST	53	63401	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:10.358068943 CEST	53	55379	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:11.654089928 CEST	53	52799	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:12.276679993 CEST	64446	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:12.276731968 CEST	49486	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:12.297981977 CEST	53	49486	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:12.312067032 CEST	53	64446	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:13.335630894 CEST	55271	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:13.335980892 CEST	60349	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:13.345177889 CEST	53	55271	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:13.347743988 CEST	53	60349	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:14.178917885 CEST	58106	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:14.179120064 CEST	58920	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:14.186398983 CEST	53	58920	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:14.186420918 CEST	53	58106	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:24.282896042 CEST	59401	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:24.283160925 CEST	50738	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:57:24.290800095 CEST	53	50738	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:24.292473078 CEST	53	59401	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:24.619692087 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 02:57:25.010346889 CEST	53	50840	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:28.703221083 CEST	53	52584	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:47.376451969 CEST	53	60885	1.1.1.1	192.168.2.4
Oct 24, 2024 02:57:52.700856924 CEST	53	55836	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:09.672874928 CEST	53	54475	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:09.998720884 CEST	53	59782	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:27.601999998 CEST	56200	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:27.602231026 CEST	55259	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:27.611928940 CEST	53	56200	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:27.612180948 CEST	53	55259	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.226133108 CEST	56732	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.226133108 CEST	58969	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.246402979 CEST	53	58969	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.247390985 CEST	53	56732	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.247654915 CEST	59644	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.247654915 CEST	65389	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.255153894 CEST	53	59644	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.255532026 CEST	53	65389	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.418453932 CEST	49777	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.418739080 CEST	55280	53	192.168.2.4	1.1.1.1
Oct 24, 2024 02:58:28.426347017 CEST	53	55280	1.1.1.1	192.168.2.4
Oct 24, 2024 02:58:28.427500963 CEST	53	49777	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 02:57:12.276679993 CEST	192.168.2.4	1.1.1.1	0x4ce2	Standard query (0)	email.sg.on24event.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:12.276731968 CEST	192.168.2.4	1.1.1.1	0x7b50	Standard query (0)	email.sg.on24event.com	65	IN (0x0001)	false
Oct 24, 2024 02:57:13.335630894 CEST	192.168.2.4	1.1.1.1	0x5f4d	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:13.335980892 CEST	192.168.2.4	1.1.1.1	0x3123	Standard query (0)	event.on24.com	65	IN (0x0001)	false
Oct 24, 2024 02:57:14.178917885 CEST	192.168.2.4	1.1.1.1	0x352c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:14.179120064 CEST	192.168.2.4	1.1.1.1	0xf592	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 02:57:24.282896042 CEST	192.168.2.4	1.1.1.1	0xc097	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:24.283160925 CEST	192.168.2.4	1.1.1.1	0x67b1	Standard query (0)	event.on24.com	65	IN (0x0001)	false
Oct 24, 2024 02:58:27.601999998 CEST	192.168.2.4	1.1.1.1	0x6a09	Standard query (0)	wcc.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:27.602231026 CEST	192.168.2.4	1.1.1.1	0xf9bf	Standard query (0)	wcc.on24.com	65	IN (0x0001)	false
Oct 24, 2024 02:58:28.226133108 CEST	192.168.2.4	1.1.1.1	0x9d9c	Standard query (0)	vids-chat.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:28.226133108 CEST	192.168.2.4	1.1.1.1	0x707	Standard query (0)	vids-chat.on24.com	65	IN (0x0001)	false
Oct 24, 2024 02:58:28.247654915 CEST	192.168.2.4	1.1.1.1	0x3886	Standard query (0)	analytics-ingress-global.bitmovin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:28.247654915 CEST	192.168.2.4	1.1.1.1	0xdbd6	Standard query (0)	analytics-ingress-global.bitmovin.com	65	IN (0x0001)	false
Oct 24, 2024 02:58:28.418453932 CEST	192.168.2.4	1.1.1.1	0x876d	Standard query (0)	licensing.bitmovin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:28.418739080 CEST	192.168.2.4	1.1.1.1	0x6855	Standard query (0)	licensing.bitmovin.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 02:57:12.297981977 CEST	1.1.1.1	192.168.2.4	0x7b50	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:12.312067032 CEST	1.1.1.1	192.168.2.4	0x4ce2	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:12.312067032 CEST	1.1.1.1	192.168.2.4	0x4ce2	No error (0)	r-email.sg.on24event.com		199.83.44.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:13.345177889 CEST	1.1.1.1	192.168.2.4	0x5f4d	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:13.345177889 CEST	1.1.1.1	192.168.2.4	0x5f4d	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:13.347743988 CEST	1.1.1.1	192.168.2.4	0x3123	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:14.186398983 CEST	1.1.1.1	192.168.2.4	0xf592	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 02:57:14.186420918 CEST	1.1.1.1	192.168.2.4	0x352c	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:23.328387022 CEST	1.1.1.1	192.168.2.4	0xd566	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:23.328387022 CEST	1.1.1.1	192.168.2.4	0xd566	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:24.290800095 CEST	1.1.1.1	192.168.2.4	0x67b1	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:24.292473078 CEST	1.1.1.1	192.168.2.4	0xc097	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:24.292473078 CEST	1.1.1.1	192.168.2.4	0xc097	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:25.126235008 CEST	1.1.1.1	192.168.2.4	0xc977	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:25.126235008 CEST	1.1.1.1	192.168.2.4	0xc977	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:57:37.312057018 CEST	1.1.1.1	192.168.2.4	0x83f1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:57:37.312057018 CEST	1.1.1.1	192.168.2.4	0x83f1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:02.452404976 CEST	1.1.1.1	192.168.2.4	0xb075	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:58:02.452404976 CEST	1.1.1.1	192.168.2.4	0xb075	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:03.480767965 CEST	1.1.1.1	192.168.2.4	0xee4d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:58:03.480767965 CEST	1.1.1.1	192.168.2.4	0xee4d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:23.092583895 CEST	1.1.1.1	192.168.2.4	0x7d79	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:58:23.092583895 CEST	1.1.1.1	192.168.2.4	0x7d79	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:27.611928940 CEST	1.1.1.1	192.168.2.4	0x6a09	No error (0)	wcc.on24.com	r-wcc.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:58:27.611928940 CEST	1.1.1.1	192.168.2.4	0x6a09	No error (0)	r-wcc.on24.com		199.83.44.37	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:27.612180948 CEST	1.1.1.1	192.168.2.4	0xf9bf	No error (0)	wcc.on24.com	r-wcc.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 02:58:28.247390985 CEST	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	vids-chat.on24.com		34.149.148.54	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:28.255153894 CEST	1.1.1.1	192.168.2.4	0x3886	No error (0)	analytics-ingress-global.bitmovin.com		35.190.27.197	A (IP address)	IN (0x0001)	false
Oct 24, 2024 02:58:28.427500963 CEST	1.1.1.1	192.168.2.4	0x876d	No error (0)	licensing.bitmovin.com		35.227.229.24	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

email.sg.on24event.com

event.on24.com

fs.microsoft.com

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	199.83.44.68	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:13 UTC	1232	OUT	GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 00:57:13 UTC	315	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 24 Oct 2024 00:57:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 143 Connection: close Location: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us X-Robots-Tag: noindex, nofollow
2024-10-24 00:57:13 UTC	143	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 77 63 63 2f 72 2f 34 36 36 37 36 39 37 2f 37 45 45 34 43 32 38 36 43 45 45 37 44 36 42 31 41 41 31 38 37 41 31 39 31 32 41 45 31 37 46 35 3f 6d 6f 64 65 3d 6c 6f 67 69 6e 26 61 6d 70 3b 65 6d 61 69 6c 3d 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 40 63 69 74 79 6f 66 72 63 2e 75 73 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:14 UTC	750	OUT	GET /wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us HTTP/1.1 Host: event.on24.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 00:57:14 UTC	1219	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:14 GMT Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 X-ORACLE-DMS-ECID: f92323b4-0ce7-4e98-81f2-98ed4cef43fe-000aaf8c X-ORACLE-DMS-RID: 0 Set-Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; domain=.on24.com; expires=Thu, 24-Oct-2024 01:27:14 GMT; path=/; HttpOnly; SameSite=None; Secure Connection: close Set-Cookie: BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; path=/; Httponly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: ON24_Pool=cons6_prd_wl_LNX; Path=/; Secure; Httponly; SameSite=None Set-Cookie: TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434; Path=/; SameSite=None; Secure
2024-10-24 00:57:14 UTC	2910	IN	Data Raw: 30 62 35 36 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 49 6e 74 65 72 70 72 65 74 69 6e 67 20 45 4d 53 20 52 65 73 65 61 72 63 68 20 41 62 73 74 72 61 63 74 73 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 09 09 09 0a 09 09 0a 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: 0b56<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>Interpreting EMS Research Abstracts</title> <meta name="viewport" content="wi
2024-10-24 00:57:14 UTC	8	IN	Data Raw: 30 30 30 30 0d 0a 0d 0a Data Ascii: 0000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 00:57:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=56870 Date: Thu, 24 Oct 2024 00:57:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 00:57:17 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=56949 Date: Thu, 24 Oct 2024 00:57:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 00:57:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:24 UTC	1291	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=registration&mode=login&random=0.4621875418947743 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
2024-10-24 00:57:24 UTC	596	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.043 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000215702a71748a56446fd24c878ee19de8fb4e4423407ef6e6b010d2f134fd63a0845e095eb113000147806d65c1eaaf067ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113; Path=/; SameSite=None; Secure
2024-10-24 00:57:24 UTC	4124	IN	Data Raw: 37 39 34 63 0d 0a 7b 22 65 76 65 6e 74 22 3a 34 36 36 37 36 39 37 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 38 37 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 Data Ascii: 794c{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712487","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayE
2024-10-24 00:57:24 UTC	2896	IN	Data Raw: 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 39 36 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 74 65 78 74 62 6f 78 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 57 6f 72 6b 20 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 Data Ascii: nfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712496","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"textbox","displayElementValue":"Work Email","displayElementValueCode":"email","validationTypeCode":"
2024-10-24 00:57:24 UTC	5792	IN	Data Raw: 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 43 69 74 79 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 63 69 74 79 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 31 32 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 32 35 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 69 6e 64 65 78 22 3a 22 31 32 22 2c 22 62 6f 74 74 6f 6d 50 61 64 64 69 6e 67 22 3a 31 32 2c 22 64 69 73 70 6c 61 79 74 79 70 65 63 6f 64 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 22 2c 22 64 Data Ascii: layElementValue":"City","displayElementValueCode":"city","validationTypeCode":"none","displaySequence":"12","topOffset":"-1","leftOffset":"-1","height":"-1","width":"25","mediaURLID":"-1","index":"12","bottomPadding":12,"displaytypecode":"registration","d
2024-10-24 00:57:24 UTC	7240	IN	Data Raw: 65 78 22 3a 22 31 33 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 35 32 36 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 33 30 22 2c 22 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 56 61 6c 75 65 22 3a 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 2c 22 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 4c 61 62 65 6c 22 3a 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 2c 22 69 73 44 65 66 61 75 6c 74 53 65 6c 65 63 74 69 6f 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6b 65 79 22 3a 22 33 30 22 7d 2c 7b 22 69 6e 64 65 78 22 3a 22 31 33 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 35 32 36 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 33 31 22 2c 22 64 69 73 70 6c 61 79 4f Data Ascii: ex":"13","displayElementID":"236712526","displaySequence":"30","displayOptionValue":"New Hampshire","displayOptionLabel":"New Hampshire","isDefaultSelection":"false","key":"30"},{"index":"13","displayElementID":"236712526","displaySequence":"31","displayO
2024-10-24 00:57:24 UTC	10136	IN	Data Raw: 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 69 6e 64 65 78 22 3a 22 31 39 22 2c 22 62 6f 74 74 6f 6d 50 61 64 64 69 6e 67 22 3a 31 32 2c 22 64 69 73 70 6c 61 79 74 79 70 65 63 6f 64 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 22 3a 7b 22 69 6e 64 65 78 22 3a 22 31 39 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 35 30 32 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 Data Ascii: "-1","height":"-1","width":"-1","mediaURLID":"-1","index":"19","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session":"1","displayelementoption":{"index":"19","displayElementID":"236712502","displaySequ
2024-10-24 00:57:24 UTC	877	IN	Data Raw: 6e 74 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 2f 34 36 2f 36 37 2f 36 39 2f 37 2f 72 74 2f 31 2f 72 65 67 62 61 63 6b 67 72 6f 75 6e 64 2f 73 76 67 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 73 76 67 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 72 65 67 5f 62 6b 67 5f 73 76 67 5f 75 72 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 34 30 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c Data Ascii: ntValue":"https://event.on24.com/event/46/67/69/7/rt/1/regbackground/svg/background.svg","displayElementValueCode":"template_reg_bkg_svg_url","validationTypeCode":"none","displaySequence":"40","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:24 UTC	1284	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
2024-10-24 00:57:24 UTC	590	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:24 GMT Content-Type: application/json Content-Length: 7339 Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.023 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20000752aa2c4b10dbf5f9a88514b166d1718ab9ec0e60eec9cc306b23de78870cec081f7dabd21130002c3826e0ee0f5dcb67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113; Path=/; SameSite=None; Secure
2024-10-24 00:57:24 UTC	4130	IN	Data Raw: 7b 22 65 76 65 6e 74 22 3a 34 36 36 37 36 39 37 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 36 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 Data Ascii: {"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712460","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElement
2024-10-24 00:57:24 UTC	1448	IN	Data Raw: 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 36 39 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 48 65 6c 70 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 6c 6f 62 62 79 5f 6f 6e 6c 69 6e 65 5f 68 65 6c 70 22 2c 22 76 61 Data Ascii: entoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712469","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#Help","displayElementValueCode":"lobby_online_help","va
2024-10-24 00:57:24 UTC	1761	IN	Data Raw: 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 59 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 6c 6f 62 62 79 5f 64 6f 77 6e 6c 6f 61 64 5f 77 69 6e 64 6f 77 73 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 31 32 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 Data Ascii: alse","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"lobby_download_windows","validationTypeCode":"none","displaySequence":"12","topOffset":"-1","leftOffset":"-1","height":"-1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:24 UTC	1256	OUT	GET /apic/eventRegistration/EventServlet?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&random=0.9347843741463768&filter=json HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
2024-10-24 00:57:24 UTC	611	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:24 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.067 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20004f9285e0cf40dca7191982a2053c69813d6bbd437a79da434056e9beb36d754a084cc34bc611300016aeb4d41514ee3f67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113; Path=/; SameSite=None; Secure
2024-10-24 00:57:24 UTC	1213	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 7b 22 69 64 22 3a 22 34 36 36 37 36 39 37 22 2c 22 6e 61 6d 65 22 3a 22 6e 75 6c 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 74 65 72 70 72 65 74 69 6e 67 20 45 4d 53 20 52 65 73 65 61 72 63 68 20 41 62 73 74 72 61 63 74 73 22 2c 22 6c 6f 63 61 6c 65 6c 61 6e 67 75 61 67 65 63 6f 64 65 22 3a 22 65 6e 22 2c 22 6c 6f 63 61 6c 65 63 6f 75 6e 74 72 79 63 6f 64 65 22 3a 22 6e 75 6c 6c 22 2c 22 63 6c 69 65 6e 74 69 64 22 3a 22 34 39 30 35 33 22 2c 22 63 6c 69 65 6e 74 6e 61 6d 65 22 3a 22 65 6c 69 74 65 49 6d 61 67 65 54 72 65 6e 64 49 6e 63 22 2c 22 64 69 73 70 6c 61 79 74 69 6d 65 7a 6f 6e 65 22 3a 22 43 65 6e 74 72 61 6c 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 64 69 73 70 6c 61 79 74 69 Data Ascii: 8000{"event":{"id":"4667697","name":"null","description":"Interpreting EMS Research Abstracts","localelanguagecode":"en","localecountrycode":"null","clientid":"49053","clientname":"eliteImageTrendInc","displaytimezone":"Central Daylight Time","displayti
2024-10-24 00:57:24 UTC	2896	IN	Data Raw: 3a 22 62 6c 6f 63 6b 2d 66 6c 61 73 68 22 2c 22 74 65 78 74 22 3a 22 4e 6f 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6c 69 74 65 2d 61 63 63 6f 75 6e 74 2d 74 79 70 65 22 2c 22 74 65 78 74 22 3a 22 45 6c 69 74 65 20 2b 20 45 6c 69 74 65 20 50 72 65 73 65 6e 74 61 74 69 6f 6e 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6e 61 62 6c 65 2d 68 74 6d 6c 35 2d 63 6f 6e 73 6f 6c 65 22 2c 22 74 65 78 74 22 3a 22 59 65 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6e 61 62 6c 65 2d 6d 6f 64 65 72 6e 2d 63 6f 6e 73 6f 6c 65 22 2c 22 74 65 78 74 22 3a 22 59 65 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 6f 77 65 72 65 64 2d 62 79 2d 6f 6e 32 34 2d 76 69 73 69 62 69 6c 69 74 79 22 2c 22 74 65 78 74 22 3a 22 59 65 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 75 72 69 74 79 2d Data Ascii: :"block-flash","text":"No"},{"name":"elite-account-type","text":"Elite + Elite Presentations"},{"name":"enable-html5-console","text":"Yes"},{"name":"enable-modern-console","text":"Yes"},{"name":"powered-by-on24-visibility","text":"Yes"},{"name":"security-
2024-10-24 00:57:24 UTC	8688	IN	Data Raw: 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 63 6f 6e 73 6f 6c 65 2f 45 76 65 6e 74 43 6f 6e 73 6f 6c 65 4e 47 2e 6a 73 70 3f 75 69 6d 6f 64 65 3d 6e 65 78 74 67 65 6e 65 72 61 74 69 6f 6e 22 7d 2c 22 70 6d 4d 6f 64 65 22 3a 7b 22 69 64 22 3a 22 32 33 32 37 32 30 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 76 61 6c 75 65 22 3a 22 6d 6f 64 65 31 22 7d 2c 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 3a 7b 22 69 64 22 3a 22 32 33 32 36 35 31 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 70 6f 6c 6c 22 2c 22 76 61 6c 75 65 22 3a 22 43 48 45 43 4b 45 44 22 7d 2c Data Ascii: 4.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration"},"pmMode":{"id":"232720","typecode":"pmMode","category":"pmMode","value":"mode1"},"pollingRequired":{"id":"232651","typecode":"pollingRequired","category":"poll","value":"CHECKED"},
2024-10-24 00:57:24 UTC	2896	IN	Data Raw: 5c 22 4e 75 6d 62 65 72 5c 22 3e 32 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6e 73 6f 6c 65 57 69 64 67 65 74 53 68 61 64 6f 77 4f 70 61 63 69 74 79 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 35 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 75 73 65 4e 65 77 49 63 6f 6e 73 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 69 73 43 4d 41 46 53 65 67 6d 65 6e 74 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6c 6f 62 62 79 4d 75 73 69 63 50 72 65 66 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 64 65 66 Data Ascii: \"Number\">2</param><param name=\"consoleWidgetShadowOpacity\" type=\"Number\">50</param><param name=\"useNewIcons\" type=\"Boolean\">true</param><param name=\"isCMAFSegment\" type=\"Boolean\">true</param><param name=\"lobbyMusicPref\" type=\"String\">def
2024-10-24 00:57:24 UTC	1448	IN	Data Raw: 5c 22 63 75 73 74 6f 6d 49 63 6f 6e 55 72 6c 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 74 69 74 6c 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 48 65 6c 70 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 65 66 61 75 6c 74 48 65 69 67 68 74 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 6f 63 6b 54 6f 6f 6c 62 61 72 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6d 61 78 69 6d 69 7a 65 4f 6e 4c 61 75 6e 63 68 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 Data Ascii: \"customIconUrl\" type=\"String\"></param><param name=\"title\" type=\"String\">Help</param><param name=\"defaultHeight\" type=\"Number\">0</param><param name=\"dockToolbar\" type=\"Boolean\">true</param><param name=\"maximizeOnLaunch\" type=\"Boolean\">f
2024-10-24 00:57:24 UTC	13032	IN	Data Raw: 69 74 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 70 61 6e 65 6c 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 70 65 72 73 69 73 74 65 6e 63 65 53 74 61 74 75 73 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 50 65 72 73 69 73 74 65 6e 63 65 53 74 61 74 75 73 53 61 76 65 43 6f 6d 70 6c 65 74 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 72 65 61 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 31 33 33 39 31 31 32 35 31 35 33 38 34 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 Data Ascii: it\" type=\"Boolean\">true</param><param name=\"componentType\" type=\"String\">panel</param><param name=\"persistenceStatus\" type=\"String\">PersistenceStatusSaveComplete</param><param name=\"creationTimestamp\" type=\"Number\">1339112515384</param><par
2024-10-24 00:57:24 UTC	5792	IN	Data Raw: 5d 26 67 74 3b 26 6c 74 3b 2f 6d 65 64 69 61 55 72 6c 49 64 26 67 74 3b 26 6c 74 3b 66 61 76 69 63 6f 6e 4c 6f 63 61 6c 55 52 4c 26 67 74 3b 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 76 69 65 77 2f 57 69 64 67 65 74 4c 69 62 2f 62 75 69 6c 64 73 2f 61 70 6f 6c 6c 6f 2f 69 6d 67 2f 77 65 62 73 69 74 65 2d 6e 65 77 2e 70 6e 67 26 6c 74 3b 2f 66 61 76 69 63 6f 6e 4c 6f 63 61 6c 55 52 4c 26 67 74 3b 26 6c 74 3b 72 65 73 6f 75 72 63 65 4e 61 6d 65 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 77 77 77 31 2e 69 6d 61 67 65 74 72 65 6e 64 2e 63 6f 6d 2f 64 69 76 69 6e 67 2d 69 6e 74 6f 2d 74 68 65 2d 64 61 74 61 2d 76 6f 6c 75 6d 65 2d 33 2d 6f 66 2d 74 68 65 2d 69 6d 61 67 65 74 72 65 6e 64 2d 63 6f 6c 6c 61 Data Ascii: ]></mediaUrlId><faviconLocalURL>https://event.on24.com/view/WidgetLib/builds/apollo/img/website-new.png</faviconLocalURL><resourceName><![CDATA[https://www1.imagetrend.com/diving-into-the-data-volume-3-of-the-imagetrend-colla
2024-10-24 00:57:24 UTC	2896	IN	Data Raw: 64 65 70 6c 6f 79 6d 65 6e 74 2c 20 61 6e 64 20 70 72 65 68 6f 73 70 69 74 61 6c 20 73 79 73 74 65 6d 73 20 6f 66 20 63 61 72 65 2e 20 41 6c 79 73 73 61 26 61 70 6f 73 3b 73 20 65 78 70 65 72 69 65 6e 63 65 20 69 6e 63 6c 75 64 65 73 20 66 6f 75 72 20 79 65 61 72 73 20 69 6e 20 70 68 61 73 65 20 31 20 63 6c 69 6e 69 63 61 6c 20 72 65 73 65 61 72 63 68 2c 20 73 69 78 20 79 65 61 72 73 20 61 73 20 61 20 70 61 72 61 6d 65 64 69 63 20 6f 6e 20 61 20 39 2d 31 2d 31 20 61 6d 62 75 6c 61 6e 63 65 20 69 6e 20 61 20 73 75 62 75 72 62 61 6e 20 45 4d 53 20 73 79 73 74 65 6d 20 61 6e 64 20 74 68 72 65 65 20 79 65 61 72 73 20 61 73 20 61 20 76 6f 6c 75 6e 74 65 65 72 20 45 4d 54 20 66 6f 72 20 61 20 72 75 72 61 6c 20 45 4d 53 20 64 65 70 61 72 74 6d 65 6e 74 2e 20 53 Data Ascii: deployment, and prehospital systems of care. Alyssa's experience includes four years in phase 1 clinical research, six years as a paramedic on a 9-1-1 ambulance in a suburban EMS system and three years as a volunteer EMT for a rural EMS department. S
2024-10-24 00:57:24 UTC	16384	IN	Data Raw: 69 64 67 65 74 55 72 6c 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 43 6f 6e 74 61 63 74 55 73 57 69 64 67 65 74 2e 73 77 66 3f 6d 6f 64 65 3d 61 64 6d 69 6e 26 61 6d 70 3b 76 69 65 77 3d 73 6c 69 64 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 72 61 67 67 61 62 6c 65 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 68 6f 77 4f 6e 4c 61 75 6e 63 68 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c 73 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6d 69 6e 69 6d 69 7a 61 62 6c 65 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 Data Ascii: idgetUrl\" type=\"String\">ContactUsWidget.swf?mode=admin&view=slide</param><param name=\"draggable\" type=\"Boolean\">true</param><param name=\"showOnLaunch\" type=\"Boolean\">false</param><param name=\"minimizable\" type=\"Boolean\">true</param><par
2024-10-24 00:57:24 UTC	7298	IN	Data Raw: 30 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 5c 22 53 65 67 6f 65 20 55 49 5c 22 2c 20 46 72 75 74 69 67 65 72 2c 20 5c 22 46 72 75 74 69 67 65 72 20 4c 69 6e 6f 74 79 70 65 5c 22 2c 20 5c 22 44 65 6a 61 76 75 20 53 61 6e 73 5c 22 2c 20 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 2d 6c 69 67 61 74 75 72 65 73 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 2d 63 61 70 73 3a 20 6e 6f 72 6d 61 6c 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 6e 6f 72 6d 61 6c 3b 20 6f 72 70 68 61 6e 73 3a 20 32 3b 20 74 65 78 Data Ascii: 0); font-family: \"Segoe UI\", Frutiger, \"Frutiger Linotype\", \"Dejavu Sans\", \"Helvetica Neue\", Arial, sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; letter-spacing: normal; orphans: 2; tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:24 UTC	977	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373 HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20000752aa2c4b10dbf5f9a88514b166d1718ab9ec0e60eec9cc306b23de78870cec081f7dabd21130002c3826e0ee0f5dcb67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
2024-10-24 00:57:25 UTC	672	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:25 GMT Content-Type: application/json Content-Length: 7339 Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.018 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000b400e56419d4606f9bfe200ad01e2344c64de6bc4db545c599329d68f885691a089f939e92113000c39812c50a8a256d72de33f0e265bf38eb38694fe8051fcc7940be54669e146b372d0199cf72427014050c95f05007d4; Path=/; SameSite=None; Secure
2024-10-24 00:57:25 UTC	2682	IN	Data Raw: 7b 22 65 76 65 6e 74 22 3a 34 36 36 37 36 39 37 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 36 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 Data Ascii: {"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712460","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElement
2024-10-24 00:57:25 UTC	1448	IN	Data Raw: 70 65 63 6f 64 65 22 3a 22 6c 6f 62 62 79 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 36 36 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 59 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 Data Ascii: pecode":"lobby","displayelementoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712466","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode"
2024-10-24 00:57:25 UTC	3209	IN	Data Raw: 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 36 39 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 48 65 6c 70 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 6c 6f 62 62 79 5f 6f 6e 6c 69 6e 65 5f 68 65 6c 70 22 2c 22 76 61 Data Ascii: entoptioninfo":{"event":"4667697","session":"1"}},{"displayElementID":"236712469","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#Help","displayElementValueCode":"lobby_online_help","va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:25 UTC	984	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=registration&mode=login&random=0.4621875418947743 HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f9285e0cf40dca7191982a2053c69813d6bbd437a79da434056e9beb36d754a084cc34bc611300016aeb4d41514ee3f67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
2024-10-24 00:57:25 UTC	677	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close ProX-Cache-Status: HIT ProX-Response-Time: 0.000 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab20000adb0ae11e425e5c911f8122e945061e1c50103aebeb8a4f60b966d411944d4108e33fd867113000db3fc5c40c684cbf72de33f0e265bf38eb38694fe8051fcc7940be54669e146b372d0199cf72427014050c95f05007d4; Path=/; SameSite=None; Secure
2024-10-24 00:57:25 UTC	4125	IN	Data Raw: 37 39 34 63 0d 0a 7b 22 65 76 65 6e 74 22 3a 34 36 36 37 36 39 37 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 38 37 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 Data Ascii: 794c{"event":4667697,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"236712487","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayE
2024-10-24 00:57:25 UTC	8688	IN	Data Raw: 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 34 39 36 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 74 65 78 74 62 6f 78 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 57 6f 72 6b 20 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 65 Data Ascii: fo":{"event":"4667697","session":"1"}},{"displayElementID":"236712496","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"textbox","displayElementValue":"Work Email","displayElementValueCode":"email","validationTypeCode":"e
2024-10-24 00:57:25 UTC	10136	IN	Data Raw: 78 22 3a 22 31 33 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 35 32 36 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 33 30 22 2c 22 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 56 61 6c 75 65 22 3a 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 2c 22 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 4c 61 62 65 6c 22 3a 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 2c 22 69 73 44 65 66 61 75 6c 74 53 65 6c 65 63 74 69 6f 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6b 65 79 22 3a 22 33 30 22 7d 2c 7b 22 69 6e 64 65 78 22 3a 22 31 33 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 36 37 31 32 35 32 36 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 33 31 22 2c 22 64 69 73 70 6c 61 79 4f 70 Data Ascii: x":"13","displayElementID":"236712526","displaySequence":"30","displayOptionValue":"New Hampshire","displayOptionLabel":"New Hampshire","isDefaultSelection":"false","key":"30"},{"index":"13","displayElementID":"236712526","displaySequence":"31","displayOp
2024-10-24 00:57:25 UTC	7240	IN	Data Raw: 6c 6f 72 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 32 35 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 69 6e 64 65 78 22 3a 22 32 35 22 2c 22 62 6f 74 74 6f 6d 50 61 64 64 69 6e 67 22 3a 31 32 2c 22 64 69 73 70 6c 61 79 74 79 70 65 63 6f 64 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 36 36 37 36 39 37 22 2c 22 73 65 73 73 69 6f 6e Data Ascii: lor","validationTypeCode":"none","displaySequence":"25","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"25","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4667697","session
2024-10-24 00:57:25 UTC	876	IN	Data Raw: 74 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 2f 34 36 2f 36 37 2f 36 39 2f 37 2f 72 74 2f 31 2f 72 65 67 62 61 63 6b 67 72 6f 75 6e 64 2f 73 76 67 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 73 76 67 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 72 65 67 5f 62 6b 67 5f 73 76 67 5f 75 72 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 34 30 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c 22 Data Ascii: tValue":"https://event.on24.com/event/46/67/69/7/rt/1/regbackground/svg/background.svg","displayElementValueCode":"template_reg_bkg_svg_url","validationTypeCode":"none","displaySequence":"40","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:25 UTC	949	OUT	GET /apic/eventRegistration/EventServlet?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&random=0.9347843741463768&filter=json HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f9285e0cf40dca7191982a2053c69813d6bbd437a79da434056e9beb36d754a084cc34bc611300016aeb4d41514ee3f67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
2024-10-24 00:57:25 UTC	693	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:57:25 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.044 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000170b229c28df5d74274fbe8c0954478498345e2789769459b2e55cb71250c88508c61e5a5c1130004f44ae38621b1a4472de33f0e265bf38eb38694fe8051fcc7940be54669e146b372d0199cf72427014050c95f05007d4; Path=/; SameSite=None; Secure
2024-10-24 00:57:25 UTC	4109	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 7b 22 69 64 22 3a 22 34 36 36 37 36 39 37 22 2c 22 6e 61 6d 65 22 3a 22 6e 75 6c 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 74 65 72 70 72 65 74 69 6e 67 20 45 4d 53 20 52 65 73 65 61 72 63 68 20 41 62 73 74 72 61 63 74 73 22 2c 22 6c 6f 63 61 6c 65 6c 61 6e 67 75 61 67 65 63 6f 64 65 22 3a 22 65 6e 22 2c 22 6c 6f 63 61 6c 65 63 6f 75 6e 74 72 79 63 6f 64 65 22 3a 22 6e 75 6c 6c 22 2c 22 63 6c 69 65 6e 74 69 64 22 3a 22 34 39 30 35 33 22 2c 22 63 6c 69 65 6e 74 6e 61 6d 65 22 3a 22 65 6c 69 74 65 49 6d 61 67 65 54 72 65 6e 64 49 6e 63 22 2c 22 64 69 73 70 6c 61 79 74 69 6d 65 7a 6f 6e 65 22 3a 22 43 65 6e 74 72 61 6c 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 64 69 73 70 6c 61 79 74 69 Data Ascii: 8000{"event":{"id":"4667697","name":"null","description":"Interpreting EMS Research Abstracts","localelanguagecode":"en","localecountrycode":"null","clientid":"49053","clientname":"eliteImageTrendInc","displaytimezone":"Central Daylight Time","displayti
2024-10-24 00:57:25 UTC	7240	IN	Data Raw: 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 63 6f 6e 73 6f 6c 65 2f 45 76 65 6e 74 43 6f 6e 73 6f 6c 65 4e 47 2e 6a 73 70 3f 75 69 6d 6f 64 65 3d 6e 65 78 74 67 65 6e 65 72 61 74 69 6f 6e 22 7d 2c 22 70 6d 4d 6f 64 65 22 3a 7b 22 69 64 22 3a 22 32 33 32 37 32 30 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 76 61 6c 75 65 22 3a 22 6d 6f 64 65 31 22 7d 2c 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 3a 7b 22 69 64 22 3a 22 32 33 32 36 35 31 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 70 6f 6c 6c 22 2c 22 76 61 6c 75 65 22 3a 22 43 48 45 43 4b 45 44 22 7d 2c Data Ascii: 4.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration"},"pmMode":{"id":"232720","typecode":"pmMode","category":"pmMode","value":"mode1"},"pollingRequired":{"id":"232651","typecode":"pollingRequired","category":"poll","value":"CHECKED"},
2024-10-24 00:57:25 UTC	13032	IN	Data Raw: 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6d 6f 62 69 6c 65 42 61 63 6b 67 72 6f 75 6e 64 47 72 61 64 69 65 6e 74 41 6e 67 6c 65 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6e 73 6f 6c 65 42 75 74 74 6f 6e 43 6f 6c 6f 72 5c 22 20 74 79 70 65 3d 5c 22 75 69 6e 74 5c 22 3e 36 37 33 30 31 38 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 68 69 64 65 49 6e 61 63 74 69 76 65 57 69 64 67 65 74 73 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 42 65 68 61 76 69 6f Data Ascii: \" type=\"Number\">0</param><param name=\"mobileBackgroundGradientAngle\" type=\"Number\">0</param><param name=\"consoleButtonColor\" type=\"uint\">6730180</param><param name=\"hideInactiveWidgets\" type=\"Boolean\"></param><param name=\"backgroundBehavio
2024-10-24 00:57:25 UTC	2896	IN	Data Raw: 6c 61 79 65 72 5f 71 61 5f 62 6c 6f 63 6b 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 61 74 65 67 6f 72 79 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 4f 4e 32 34 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6e 74 65 6e 74 49 6d 61 67 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 75 6e 64 65 66 69 6e 65 64 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 68 6f 77 50 72 65 76 69 65 77 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 77 69 64 67 65 74 42 6f 72 64 65 72 54 68 69 63 6b 6e 65 73 73 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 31 3c 2f 70 61 72 61 Data Ascii: layer_qa_block</param><param name=\"category\" type=\"String\">ON24</param><param name=\"contentImage\" type=\"String\">undefined</param><param name=\"showPreview\" type=\"Boolean\">true</param><param name=\"widgetBorderThickness\" type=\"Number\">1</para
2024-10-24 00:57:25 UTC	4344	IN	Data Raw: 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6d 61 78 69 6d 69 7a 65 4f 6e 4c 61 75 6e 63 68 45 6e 61 62 6c 65 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c 73 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 63 61 6c 65 43 6f 6e 74 65 6e 74 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c 73 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 65 66 61 75 6c 74 57 69 64 74 68 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 31 35 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 74 79 70 65 4b 65 79 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 72 65 73 6f 75 72 63 65 6c 69 73 74 3c 2f 70 61 Data Ascii: \">true</param><param name=\"maximizeOnLaunchEnable\" type=\"Boolean\">false</param><param name=\"scaleContent\" type=\"Boolean\">false</param><param name=\"defaultWidth\" type=\"Number\">150</param><param name=\"typeKey\" type=\"String\">resourcelist</pa
2024-10-24 00:57:25 UTC	16384	IN	Data Raw: 77 77 77 2e 69 6d 61 67 65 74 72 65 6e 64 2e 63 6f 6d 2f 73 6f 6c 75 74 69 6f 6e 73 2f 65 6c 69 74 65 2d 72 65 73 63 75 65 2f 5d 5d 26 67 74 3b 26 6c 74 3b 2f 72 65 73 6f 75 72 63 65 4e 61 6d 65 26 67 74 3b 26 6c 74 3b 69 64 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 31 5d 5d 26 67 74 3b 26 6c 74 3b 2f 69 64 26 67 74 3b 26 6c 74 3b 74 79 70 65 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 55 52 4c 5d 5d 26 67 74 3b 26 6c 74 3b 2f 74 79 70 65 26 67 74 3b 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 49 6d 61 67 65 54 72 65 6e 64 20 45 6c 69 74 65 5d 5d 26 67 74 3b 26 6c 74 3b 2f 74 69 74 6c 65 26 67 74 3b 26 6c 74 3b 63 61 74 65 67 6f 72 79 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 72 65 73 6f 75 72 63 65 4c 69 73 Data Ascii: www.imagetrend.com/solutions/elite-rescue/]]></resourceName><id><![CDATA[1]]></id><type><![CDATA[URL]]></type><title><![CDATA[ImageTrend Elite]]></title><category><![CDATA[resourceLis
2024-10-24 00:57:25 UTC	11128	IN	Data Raw: 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 22 3a 5b 5d 7d 7d 2c 22 6d 65 6e 75 5f 73 65 74 74 69 6e 67 73 22 3a 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 33 39 34 33 36 30 35 30 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 3c 63 6f 6e 66 69 67 3e 3c 70 61 72 61 6d 73 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 74 79 6c 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6c 69 6e 6b 54 65 78 74 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 45 6e 67 61 67 65 6d 65 6e 74 20 54 6f 6f 6c 73 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d Data Ascii: layelementoptioninfo":{"displayelementoption":[]}},"menu_settings":{"displayElementID":"239436050","displayElementValue":"<config><params><param name=\"style\" type=\"String\"></param><param name=\"linkText\" type=\"String\">Engagement Tools</param><param
2024-10-24 00:57:25 UTC	3410	IN	Data Raw: 65 20 69 6e 20 41 70 70 6c 69 65 64 20 53 74 61 74 69 73 74 69 63 73 2c 20 44 61 74 61 20 41 6e 61 6c 79 73 69 73 20 61 6e 64 20 44 61 74 61 20 53 63 69 65 6e 63 65 20 66 72 6f 6d 20 74 68 65 20 55 6e 69 76 65 72 73 69 74 79 20 6f 66 20 4b 61 6e 73 61 73 2c 20 77 68 65 72 65 20 73 68 65 20 77 61 73 20 70 75 62 6c 69 73 68 65 64 20 69 6e 20 50 72 65 68 6f 73 70 69 74 61 6c 20 45 6d 65 72 67 65 6e 63 79 20 43 61 72 65 2e 3c 2f 70 3e 22 2c 22 65 76 65 6e 74 4c 6f 62 62 79 41 62 73 74 72 61 63 74 22 3a 22 3c 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 5c 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 5c 22 3e 3c 73 74 72 6f 6e Data Ascii: e in Applied Statistics, Data Analysis and Data Science from the University of Kansas, where she was published in Prehospital Emergency Care.</p>","eventLobbyAbstract":"<p style=\"margin-top:4px; margin-bottom:4px;\"><span style=\"font-size:22px;\"><stron

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49762	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:26 UTC	1150	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab2000170b229c28df5d74274fbe8c0954478498345e2789769459b2e55cb71250c88508c61e5a5c1130004f44ae38621b1a4472de33f0e265bf38eb38694fe8051fcc7940be54669e146b372d0199cf72427014050c95f05007d4
2024-10-24 00:57:26 UTC	833	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:26 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Set-Cookie: BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; path=/; Httponly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000b023f8260b9c7c16fe9dc8dc824c2d6ee41b686b0f4a9e89a73c3e93831d2bc708da26d4d5113000f534b914deea3beb65cce20ce7692486e4ec4c3eede993d3d660a230ac0d50773183622764da13f6fd594e193ccec84b; Path=/; SameSite=None; Secure
2024-10-24 00:57:26 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49766	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:27 UTC	1012	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; TS0af49cbe027=082972b052ab2000b023f8260b9c7c16fe9dc8dc824c2d6ee41b686b0f4a9e89a73c3e93831d2bc708da26d4d5113000f534b914deea3beb65cce20ce7692486e4ec4c3eede993d3d660a230ac0d50773183622764da13f6fd594e193ccec84b
2024-10-24 00:57:27 UTC	672	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:27 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000c41ddfe8bd24969becf4f3173cba0cb40b03cd6626745023f0a6661509c07fd208922e5a35113000a46cce06b10e980fe4d6e094f0d3ef813852fd532c9d6f4510444459cddbfe56dc6ff707fdcd1c161ffecdab62270e75; Path=/; SameSite=None; Secure
2024-10-24 00:57:27 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49776	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:44 UTC	1625	OUT	POST /eventRegistration/eventRegistrationServlet HTTP/1.1 Host: event.on24.com Connection: keep-alive Content-Length: 260 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://event.on24.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; TS0af49cbe027=082972b052ab2000c41ddfe8bd24969becf4f3173cba0cb40b03cd6626745023f0a6661509c07fd208922e5a35113000a46cce06b10e980fe4d6e094f0d3ef813852fd532c9d6f4510444459cddbfe56dc6ff707fdcd1c161ffecdab62270e75
2024-10-24 00:57:44 UTC	260	OUT	Data Raw: 65 6d 61 69 6c 3d 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 25 34 30 63 69 74 79 6f 66 72 63 2e 75 73 26 6d 6f 64 65 3d 6c 6f 67 69 6e 26 65 6d 61 69 6c 3d 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 25 34 30 63 69 74 79 6f 66 72 63 2e 75 73 26 69 73 4c 6f 62 62 79 3d 66 61 6c 73 65 26 68 74 74 70 70 72 6f 74 6f 63 6f 6c 3d 68 74 74 70 73 25 33 41 26 68 6f 73 74 3d 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 26 65 76 65 6e 74 69 64 3d 34 36 36 37 36 39 37 26 73 65 73 73 69 6f 6e 69 64 3d 31 26 6b 65 79 3d 37 45 45 34 43 32 38 36 43 45 45 37 44 36 42 31 41 41 31 38 37 41 31 39 31 32 41 45 31 37 46 35 26 72 65 67 54 61 67 3d 26 73 6f 75 72 63 65 70 61 67 65 3d 72 65 67 69 73 74 65 72 26 6c 6f 67 69 6e 61 63 74 69 6f 6e 3d 79 26 72 65 63 6f 6f Data Ascii: email=patricia.eickholt%40cityofrc.us&mode=login&email=patricia.eickholt%40cityofrc.us&isLobby=false&httpprotocol=https%3A&host=event.on24.com&eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&regTag=&sourcepage=register&loginaction=y&recoo
2024-10-24 00:57:44 UTC	837	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:44 GMT Transfer-Encoding: chunked Content-Type: text/html Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; HttpOnly; secure; domain=.on24.com; expires=Wed, 22-Jan-2025 00:57:44 GMT; path=/; SameSite=None Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://event.on24.com Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000e1f9d8a117a7b036b58f0d36f76f4521cc7de24415025e8d848fca97bc9c03e50820656ca6113000339aa95ce57602e10d1ba43395c437d64b358c153b0c53636135304ca88b84f5c28b6936be78576ce904c13f843aed37; Path=/; SameSite=None; Secure
2024-10-24 00:57:44 UTC	1448	IN	Data Raw: 30 36 61 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6f 6e 6c 6f 61 64 3d 27 72 65 64 69 72 65 63 74 49 74 28 29 3b 27 3e 3c 63 65 6e 74 65 72 3e 3c 21 2d 2d 68 36 3e 54 68 61 6e 6b 20 79 6f 75 2e 20 50 6c 65 61 73 65 20 77 61 69 74 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 20 77 68 69 6c 65 20 79 6f 75 20 61 72 65 20 72 65 64 69 72 65 63 74 65 64 20 28 6f 72 20 3c 61 20 68 72 65 66 3d 27 2f 75 74 69 6c 41 70 70 2f 4d 65 64 69 61 4d 65 74 72 69 63 53 65 72 76 6c 65 74 3f 6d 6f 64 65 3d 6c 61 75 6e 63 68 26 6d 65 64 69 61 6d 65 74 72 69 63 69 64 3d 36 35 37 32 30 31 34 26 65 76 65 6e 74 69 64 3d 34 36 36 37 36 39 37 26 65 76 65 6e 74 75 73 65 72 69 64 3d 37 30 35 31 34 37 34 31 34 26 75 73 65 72 63 64 3d 37 30 35 31 Data Ascii: 06a6<html><head></head><body onload='redirectIt();'><center>...h6>Thank you. Please wait a few seconds while you are redirected (or <a href='/utilApp/MediaMetricServlet?mode=launch&mediametricid=6572014&eventid=4667697&eventuserid=705147414&usercd=7051
2024-10-24 00:57:44 UTC	262	IN	Data Raw: 6f 6c 65 25 33 44 66 61 6c 73 65 25 32 36 63 6f 6e 73 6f 6c 65 45 61 72 43 6c 6f 75 64 41 70 69 25 33 44 66 61 6c 73 65 25 32 36 74 65 78 74 5f 6c 61 6e 67 75 61 67 65 5f 69 64 25 33 44 65 6e 25 32 36 70 6c 61 79 65 72 77 69 64 74 68 25 33 44 37 34 38 25 32 36 70 6c 61 79 65 72 68 65 69 67 68 74 25 33 44 35 32 36 25 32 36 65 76 65 6e 74 75 73 65 72 69 64 25 33 44 37 30 35 31 34 37 34 31 34 25 32 36 63 6f 6e 74 65 6e 74 74 79 70 65 25 33 44 41 26 74 61 72 67 65 74 3d 6d 65 64 69 61 75 72 6c 26 6b 65 79 3d 37 45 45 34 43 32 38 36 43 45 45 37 44 36 42 31 41 41 31 38 37 41 31 39 31 32 41 45 31 37 46 35 27 3b 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 6c 6f 62 62 79 52 65 64 69 72 65 63 74 55 72 6c 3b 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 Data Ascii: ole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D705147414%26contenttype%3DA&target=mediaurl&key=7EE4C286CEE7D6B1AA187A1912AE17F5';location.href=lobbyRedirectUrl;}</script></body></h
2024-10-24 00:57:44 UTC	8	IN	Data Raw: 30 30 30 30 0d 0a 0d 0a Data Ascii: 0000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49775	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:44 UTC	2134	OUT	GET /utilApp/MediaMetricServlet?mode=launch&mediametricid=6572014&eventid=4667697&eventuserid=705147414&usercd=705147414&mediametricsubid=1&mediaurl=https%3A%2F%2Fevent.on24.com%2FeventRegistration%2Fconsole%2Fapollox%2FmainEvent%3F%26eventid%3D4667697%26sessionid%3D1%26username%3D%26partnerref%3D%26format%3Dfhvideo1%26mobile%3D%26flashsupportedmobiledevice%3D%26helpcenter%3D%26key%3D7EE4C286CEE7D6B1AA187A1912AE17F5%26newConsole%3Dtrue%26nxChe%3Dtrue%26newTabCon%3Dtrue%26consoleEarEventConsole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D705147414%26contenttype%3DA&target=mediaurl&key=7EE4C286CEE7D6B1AA187A1912AE17F5 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://event.on24.com/eventRegistration/eventRegistrationServlet Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; TS0af49cbe027=082972b052ab2000e1f9d8a117a7b036b58f0d36f76f4521cc7de24415025e8d848fca97bc9c03e50820656ca6113000339aa95ce57602e10d1ba43395c437d64b358c153b0c53636135304ca88b84f5c28b6936be78576ce904c13f843aed37
2024-10-24 00:57:45 UTC	1271	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 24 Oct 2024 00:57:44 GMT Location: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Content-Length: 1351 Content-Type: application/json; charset=UTF-8 Set-Cookie: mediametricid6572014=612798560; domain=.on24.com; path=/; SameSite=None; Secure Set-Cookie: sessionpulse6572014=612798560; domain=.on24.com; expires=Thu, 24-Oct-2024 01:07:44 GMT; path=/; secure; HttpOnly; SameSite=None Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20004ac7c84ebb8f96697ae5a21492346f1a4b60c5871b9ac72b1f81d74b5edc9dbc085e761e30113000323402e89e2625b609a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda; Path=/; SameSite=None; Secure
2024-10-24 00:57:45 UTC	1351	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0d 0a 3c 70 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 0d 0a 74 65 6d 70 6f 72 61 72 69 6c 79 2e 3c 2f 70 3e 0d 0a 3c 70 3e 49 74 27 73 20 6e 6f 77 20 61 74 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 63 6f 6e 73 6f 6c 65 2f 61 70 6f 6c 6c 6f 78 2f 6d 61 69 6e 45 76 65 6e 74 3f 26 61 6d 70 3b 65 76 65 6e 74 69 64 3d 34 36 36 37 36 39 37 Data Ascii: <html><head><title>302 Moved Temporarily</title></head><body bgcolor="#FFFFFF"><p>This document you requested has moved temporarily.</p><p>It's now at <a href="https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49777	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:45 UTC	1967	OUT	GET /eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch HTTP/1.1 Host: event.on24.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://event.on24.com/eventRegistration/eventRegistrationServlet Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20004ac7c84ebb8f96697ae5a21492346f1a4b60c5871b9ac72b1f81d74b5edc9dbc085e761e30113000323402e89e2625b609a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda
2024-10-24 00:57:45 UTC	518	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:45 GMT Content-Length: 2416 Content-Type: text/html; charset=UTF-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000b364a9415eaa9e39e00baddf65792d2155ac33043dff6ddde67c5b2c958888b408da494a5e1130008f295f201ecd9edb09a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda; Path=/; SameSite=None; Secure
2024-10-24 00:57:45 UTC	2416	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 74 2d 73 75 70 70 6f 72 74 65 64 2d 69 65 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 74 2d 73 75 70 70 6f 72 74 65 64 2d 69 65 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 4d 45 54 41 Data Ascii: <!DOCTYPE HTML>...[if lt IE 9 ]> <html class="not-supported-ie"> <![endif]-->...[if IE 9 ]> <html class="not-supported-ie"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...> <html lang="en"> ...<![endif]--><head><META

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49780	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:47 UTC	1781	OUT	GET /view/react-console/build/ HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000b364a9415eaa9e39e00baddf65792d2155ac33043dff6ddde67c5b2c958888b408da494a5e1130008f295f201ecd9edb09a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda
2024-10-24 00:57:48 UTC	602	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:48 GMT Server: Apache Last-Modified: Mon, 23 Sep 2024 07:24:23 GMT Accept-Ranges: bytes Content-Length: 6784 Content-Type: text/html; charset=UTF-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3; Path=/; SameSite=None; Secure
2024-10-24 00:57:48 UTC	2816	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="theme-color" content="#000000" /> <meta http-equiv="Pragma" content="no-cache" /> <me
2024-10-24 00:57:48 UTC	1206	IN	Data Raw: 63 6f 6e 73 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 4e 61 6d 65 20 3d 20 27 70 72 6f 64 2d 63 6f 6e 73 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 45 41 43 54 20 2b 20 66 69 6c 65 4e 61 6d 65 20 2b 20 27 2e 6a 73 3f 62 3d 27 20 2b 20 77 69 6e 64 6f 77 2e 63 61 63 68 65 42 75 73 74 65 72 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 2f 20 49 6e 6a 65 63 74 20 63 75 73 74 6f 6d 4a 53 46 6f 72 43 6f 6e 6f 73 6c 65 0a 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 4a 73 46 6f 72 43 6f 6e 73 6f 6c 65 20 26 26 Data Ascii: const'; } else { fileName = 'prod-const'; } } loadScriptSync(BASE_URL_REACT + fileName + '.js?b=' + window.cacheBusterValue); } // Inject customJSForConosle if (window.customJsForConsole &&
2024-10-24 00:57:48 UTC	2762	IN	Data Raw: 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 6c 6f 63 61 6c 48 6f 73 74 20 2b 20 27 2f 76 69 65 77 2f 63 6f 6e 73 6f 6c 65 2f 73 68 61 72 65 64 2f 6a 73 2f 6c 69 62 73 2f 62 69 74 6d 6f 76 69 6e 70 6c 61 79 65 72 2d 38 2e 31 38 31 2e 30 2e 6a 73 27 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 4c 6f 61 64 20 73 68 61 72 65 64 20 63 6f 6e 73 74 61 6e 74 0a 20 20 20 20 20 20 2f 2f 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 45 41 43 54 20 2b 20 27 69 6e 64 65 78 2e 6a 73 3f 62 3d 27 20 2b 20 77 69 6e 64 6f 77 2e 63 61 63 68 65 42 75 73 74 65 72 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 Data Ascii: else { loadScriptSync(localHost + '/view/console/shared/js/libs/bitmovinplayer-8.181.0.js'); } // Load shared constant // loadScriptSync(BASE_URL_REACT + 'index.js?b=' + window.cacheBusterValue); loadScriptSync(BASE_URL_R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49782	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:48 UTC	1841	OUT	GET /view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
2024-10-24 00:57:49 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:48 GMT Server: Apache Last-Modified: Fri, 27 Sep 2024 18:10:57 GMT Accept-Ranges: bytes Content-Length: 642061 Cache-Control: max-age=43200,s-maxage=43200,public,must-revalidate,proxy-revalidate Access-Control-Allow-Origin: * Vary: Origin Content-Type: application/javascript Content-Encoding: gzip Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20007d354190ac6bd9f364836c877082ce44db3e8faba3cb80710ce27b1ba547acde08c5b34b44113000224be6cce7c01158888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3; Path=/; SameSite=None; Secure
2024-10-24 00:57:49 UTC	3867	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 ec bd eb 72 e3 38 96 2e fa 7f 9e c2 95 3d a8 b0 bb 9c 59 96 ec 74 de da 55 21 4b 72 59 bb 7d 2b 49 ce ec 9a 9a 3c 0a 5a 84 24 76 52 24 8b 84 6c 6b 32 1d b1 df e1 bc e1 79 92 fd 2d 10 00 01 50 92 5d 97 9e 99 7d a6 2b 3a 3a 2d 12 97 85 85 75 5f 0b e0 b7 7f fe 03 ff db fa 97 ad 3f 6f b5 d3 6c 99 47 d3 99 d8 da 6e ef 6c 35 f7 1a 6f 76 b7 8e 23 31 4f 6f a3 64 77 ab 97 8c 5f ec 6e b5 e2 78 ab 4f 6d 8a ad 3e 2f 78 7e cb 43 d9 97 fa 0f 67 51 b1 55 a4 8b 7c cc b7 c6 69 c8 b7 82 24 dc 8a d0 72 51 94 7f 87 51 21 f2 e8 66 21 a2 14 03 52 e3 c5 cd df f9 58 6c 89 74 4b cc f8 96 e0 f9 bc 90 c3 51 cf 71 9a 84 11 35 2d b6 d2 89 7c 1f 64 59 1c 8d 83 9b 98 6f e1 5f 9e d0 b0 d3 9c f3 39 4f c4 0b 03 86 06 79 eb 2a 0e 96 3c df 7a cf f3 02 a3 6c bd Data Ascii: r8.=YtU!KrY}+I<Z$vR$lk2y-P]}+::-u_?olGnl5ov#1Oodw_nxOm>/x~CgQU\|i$rQQ!f!RXltKQq5-\|dYo_9Oy*<zl
2024-10-24 00:57:49 UTC	4224	IN	Data Raw: 39 9e 83 fb f2 05 49 f3 14 06 28 f0 12 15 79 d1 ba 8d 60 58 0b 7e 0c 7a 19 ce 61 2e 07 7c 18 b4 96 dd 4c c0 24 fb 0f d8 ab ed 6e 31 6a 23 17 33 ed b7 c4 1c 48 e8 8d d3 ac 07 0b a8 0b b6 1e 15 30 f3 2f 79 16 65 79 1b 76 59 14 cd f2 bb 18 d6 1b 58 21 82 50 14 a3 6b 98 33 33 48 75 40 3a 89 e3 68 99 42 9a 74 a5 36 29 a6 0c 32 7d c0 13 96 8c a2 82 9f df 80 54 61 46 c3 0c 59 c2 8c c5 16 73 c8 a3 a5 b8 0d 7b a7 62 b1 10 45 00 52 68 b3 68 d2 bf 04 55 dd 4e 4e c0 2a 93 bb 70 71 b5 c0 36 4c 06 cf 03 d8 2c 11 bf cd 60 88 74 d3 f1 08 8a 2f 17 59 b4 e4 41 08 23 ea 47 90 d2 14 4a 97 c8 6a 11 22 21 05 d2 e0 b0 f4 cf 8e 7b 67 30 95 e2 76 3f 4a d2 1f e0 16 91 05 0e 83 97 07 f3 62 9c 07 90 64 fc be f8 29 45 48 29 8e e1 2a f5 88 f4 5b 82 9c c6 19 54 6c 31 ff 11 c4 0d dc c1 Data Ascii: 9I(y`X~za.\|L$n1j#3H0/yeyvYX!Pk33Hu@:hBt6)2}TaFYs{bERhhUNNpq6L,`t/YA#GJj"!{g0v?Jbd)EH)[Tl1
2024-10-24 00:57:49 UTC	2816	IN	Data Raw: 46 5f e3 c7 9a 9b 8e e9 6e 98 5b 47 9b 68 6b 4a 58 75 d8 d9 36 65 71 f8 5b ab 68 32 5f b5 f2 dd d3 68 01 c5 18 58 c9 32 28 a3 a5 d8 9f d2 00 97 af a5 ca 85 26 28 67 81 77 56 2d 8f 30 ec 69 1a 03 0f b6 ed 09 db 6e a0 27 af d0 6c 10 fa 2a 7a b4 55 3d ad a5 8a 25 aa c1 29 49 22 21 04 3d 97 58 d4 74 03 95 6e 16 5c be 21 ef b9 fc eb e0 d0 51 2d 98 cf a0 a1 41 e5 10 6a a8 ba 22 05 57 99 69 6a 54 a9 17 03 1c 78 5b 67 51 65 03 c5 7a aa dc 02 78 fe 79 af c2 a6 7c 53 41 68 41 04 51 5c da 49 b5 1e 78 53 d1 b5 11 2f d4 cc 08 a8 a6 31 72 08 ae e7 0d 4d 04 75 0f 55 67 d8 e0 02 78 bb 4a 92 45 e3 d0 20 de de 30 2d d8 30 85 35 33 56 5a 9a 8d ee 63 00 ad 06 31 02 c6 d9 80 aa 9b f3 18 dd 34 ec 7a a7 cb 3a 11 ac 5b 11 ae 3f bb c2 9a 33 0c 46 57 ee a5 d3 ba c2 b1 d3 9a 10 ec Data Ascii: F_n[GhkJXu6eq[h2_hX2(&(gwV-0in'l*zU=%)I"!=Xtn\!Q-Aj"WijTx[gQezxy\|SAhAQ\IxS/1rMuUgxJE 0-053VZc14z:[?3FW
2024-10-24 00:57:49 UTC	2816	IN	Data Raw: 03 5c 65 f4 bc 09 37 94 43 d8 36 92 23 8c 4a 82 34 23 9a 89 e8 b9 15 88 50 aa bc 52 18 72 58 ac c7 74 20 03 81 14 6e 7d 67 15 0d c3 82 ab bf ab ba 63 3e f3 a3 49 47 f0 aa a5 f8 fd 60 a9 58 66 06 c4 b9 2f 98 6d 43 8d 16 e2 19 f4 d2 d4 71 60 71 0e ee 35 f7 d0 bf 9c 1d ac 6f d4 92 65 8e 83 d0 fc 29 6d f0 9d 93 7d fe 49 02 67 de 15 49 f6 27 0f dc c4 9d 19 1a 49 64 4a ca a3 f3 f5 d1 8f 3e 8f 70 1e 58 c6 61 46 37 f8 72 44 59 73 bc b7 1b e4 79 b0 ec e1 1a d5 fb b7 cf 1b 0f ae be 82 18 81 98 f2 c6 22 f6 f6 8d c6 ba 37 e8 f5 aa 37 f8 f2 c5 14 2a 42 20 5b 5b 4e 9e 92 33 65 bd c4 53 c2 f5 08 0c b0 26 36 c3 80 06 4a fd db ca 97 6e 63 fb 03 a6 27 1d bd 71 7a 6a 60 a3 c0 ba 95 04 f7 16 3f 15 06 97 f1 9b 7b b2 82 49 69 e3 3d d8 16 0e 1e 57 10 19 e4 9c db 44 3a 14 d2 f1 Data Ascii: \e7C6#J4#PRrXt n}gc>IG`Xf/mCq`q5oe)m}IgI'IdJ>pXaF7rDYsy"77*B [[N3eS&6Jnc'qzj`?{Ii=WD:
2024-10-24 00:57:49 UTC	4224	IN	Data Raw: 4f 9b af c5 22 3f a4 56 53 de a8 ee f1 a9 a7 90 9c 13 aa de 77 8f 3c 07 d2 35 25 29 5e 5e 2d d1 6f ea 58 8a 9b 9b 3a f6 a0 db d4 d3 3c f6 05 41 5e d0 59 15 06 95 8c 6d 3b 3d fa d6 a3 fa 1b b2 5a fe 79 2d 94 8a 34 f9 57 27 5b c8 a9 d5 3c 98 7b 8c a4 c1 56 f9 90 be bf d0 78 22 1f 6b a7 53 4b 65 6f d7 ab bb 87 4c 01 9f 0e f6 7a 00 fc 61 d7 42 ad 53 3a 24 b2 3c df f4 f7 5f 0b 55 dd 52 a4 73 65 f0 cc 94 27 a3 33 89 14 3b d4 e8 29 ff 80 52 b5 62 25 55 c0 f7 4d 55 75 a4 e2 d5 fb 3a 62 ab f3 76 88 e6 ba 5e 96 5b a2 72 00 d5 54 32 36 c2 f8 56 f4 dc bd 64 a7 49 8c e5 37 23 67 ef 38 4d 63 1e 24 95 68 d0 01 6c 3b 55 f0 1a 73 a8 25 d6 aa 1f 6c df 96 52 c4 b5 49 70 81 91 9e c4 d5 1b 14 93 80 1f 42 b9 e3 cd a7 a9 e8 08 94 c2 a7 ce 64 20 64 bc 31 9c 21 8f 70 ea 92 21 44 Data Ascii: O"?VSw<5%)^^-oX:<A^Ym;=Zy-4W'[<{Vx"kSKeoLzaBS:$<_URse'3;)Rb%UMUu:bv^[rT26VdI7#g8Mc$hl;Us%lRIpBd d1!p!D
2024-10-24 00:57:49 UTC	2816	IN	Data Raw: af 21 3f 71 eb 1f ac 6d e0 f4 1d 0c b1 75 e4 b2 2a 26 a6 59 c9 18 d7 d5 4e 53 7c f6 c9 90 af c7 03 ec 6d fb db 67 2b 08 55 73 9e 59 9d 6b e8 ee ee ed 28 22 b5 28 4e 1a ce 5f be 3c 6f bc a3 20 36 e1 c6 8f a1 ad c7 f2 1a 58 81 64 c0 8a 9c 92 23 6e 5e f9 69 36 ba 0b b6 fe 35 97 75 9f 78 f1 4e 78 91 45 29 23 77 ba 1e 56 ae 1d ea be 24 3e 10 51 49 de 14 4e 57 7f 59 a2 bf 49 75 d9 4a fa 69 a3 d1 a6 3b a7 3c 48 fa a0 46 54 d6 07 f3 1a 13 60 e5 46 68 27 6a fd c8 24 a0 0d f7 3d 36 32 59 59 aa b1 ce 6f ad 1d 59 5e 54 56 36 36 e7 1c d7 37 96 99 3e 09 33 34 d1 a3 60 80 25 d5 c8 fa 3e a6 b5 23 37 c9 da 52 8d 55 86 bd b1 b6 71 95 34 b7 be 5d 62 6d 9a 83 e7 2a 1d df 40 d2 f9 11 98 ed cf 91 ac da 6e 29 66 8e b4 1d 46 07 78 ea 03 ee ef 81 ac 4d 9b 7d 54 c3 d7 db 34 49 3c Data Ascii: !?qmu&YNS\|mg+UsYk("(N_<o 6Xd#n^i65uxNxE)#wV$>QINWYIuJi;<HFT`Fh'j$=62YYoY^TV667>34`%>#7RUq4]bm@n)fFxM}T4I<
2024-10-24 00:57:49 UTC	4224	IN	Data Raw: 6b 4f 1f d7 a8 34 85 d6 8d 8e 16 5e 57 7b 43 5f ce 30 24 eb e9 2e 3a 2b 56 da 2e ba 10 cc c4 7d 30 9b 1f 41 26 4d b7 ea 59 a9 d7 ff 99 eb f8 e7 b5 73 94 a4 f0 a4 45 49 7a 10 bd c6 7c 20 51 f6 47 5e 3b 47 da d4 cb c0 19 0f 15 24 5b 8a 47 00 60 9b 91 da be 46 5f 03 d7 ef ab bd 81 d1 69 e7 2f 3c 46 33 46 22 69 57 cb 65 36 e6 ac 65 fc fd a7 44 5f 56 25 94 37 5a 87 6e 50 0c d8 f4 a3 6a d6 0e cb f0 85 76 93 cd 75 a6 14 58 71 62 64 7e 0f b3 13 65 b4 ab dc b8 4a ea 51 7f c7 99 da a7 a4 d1 ba 78 8e 6d 88 63 8c 7f 4c 4c 67 1f e3 96 f2 f3 f1 6f 8a cb 45 29 ef 89 fa 95 21 16 80 b6 2a c4 02 72 55 4e 85 13 2c 02 19 b9 fe e4 3e 59 52 9e 0f 6f 85 58 6a 65 2e b2 b9 13 f8 50 ec a1 19 02 33 e8 c3 1b 74 21 85 0c c0 94 f2 9d e2 05 e0 b3 d4 fb 7e 9e eb b1 bb 21 03 d7 0f 70 5b Data Ascii: kO4^W{C_0$.:+V.}0A&MYsEIz\| QG^;G$[G`F_i/<F3F"iWe6eD_V%7ZnPjvuXqbd~eJQxmcLLgoE)!*rUN,>YRoXje.P3t!~!p[
2024-10-24 00:57:49 UTC	7040	IN	Data Raw: 5c 28 50 62 d3 fa ee fb 3b f9 38 79 32 ab 0a 84 64 7b 26 62 b7 a7 23 c6 62 21 9f e7 fd ca cc 6e 5c 7f 0b a6 fe 35 85 69 d4 07 47 75 52 cc 80 a5 44 73 3c 4d 79 9b de c2 af 89 df 8d 61 7a 5c 8e cf 92 ec 68 3c c9 e0 62 f6 fb 51 f6 31 ea 4d eb 30 09 6f 96 e7 d0 02 c3 4f 6f 21 ad c6 57 bf c0 9d 84 07 18 cf 67 c9 3b a8 ed 71 7d 04 a1 9c d6 cf e7 c7 73 08 21 88 83 3a 2c 84 38 3b 5c ae 92 71 ff a7 79 3d fa 65 3e cf d2 ce 38 bf 06 a1 4c 0e a0 a4 d3 de 18 08 ee 83 ca d3 08 1c 0b d8 cc a7 71 e7 7e 9a c2 c6 39 5d c6 ab 69 f4 ee fb fa 74 16 f7 de ae ba f5 fe 62 79 9c 1c c3 91 cb a6 c3 fc 2d 14 67 54 ff 11 22 a5 06 ef aa 1b e5 3f 76 ae 06 dd 79 e7 1f 70 40 cf 46 58 54 37 5e 24 4b 6c 2f ee 81 63 93 39 08 09 3e 16 44 60 3d be 84 6d be 84 23 1e 65 e3 59 7d 31 25 1e 07 ef Data Ascii: \(Pb;8y2d{&b#b!n\5iGuRDs<Myaz\h<bQ1M0oOo!Wg;q}s!:,8;\qy=e>8Lq~9]itby-gT"?vyp@FXT7^$Kl/c9>D`=m#eY}1%
2024-10-24 00:57:49 UTC	2816	IN	Data Raw: b1 77 da f9 e3 e0 07 63 c6 85 ed 65 f4 0b 61 91 87 c5 0a b5 16 23 1c 04 75 32 d3 00 6a a7 cd 1c a4 c5 ba d0 ce 14 e0 fe ee bb c0 91 6e ec 38 72 0a da 0a 22 02 80 d4 d3 0e 05 55 e1 2e 75 03 23 38 c8 61 26 bb 77 d8 5a 4e c0 d8 98 8e 14 30 0d 7a c5 9e c9 d0 4d da c0 35 c5 82 a2 ad 60 b0 4b a0 db ce 43 72 b6 f7 a1 41 ea 55 6a 3d 25 0b aa 34 22 e9 df e2 6a bd ad 51 f0 db d0 0a 59 ee c6 27 b6 98 93 40 50 f4 23 e2 a6 c4 31 aa 3d 96 e0 40 b5 03 2a 33 82 94 8d 46 ef 77 d0 fb cb 25 8c 67 2b cc 94 66 18 a1 c6 a0 66 5d 37 7a 0f d7 d0 3e 0d 61 a3 21 c8 89 bc bc 22 0a 79 19 b4 6e 95 b6 6e ca 5b c6 4a 11 45 29 0a 27 50 59 b5 bf 7a f0 69 ce db 1e bd 82 6b fc c6 c2 77 b8 7a 6b 7e 72 20 a2 a8 fd c6 0d 45 37 40 ce 49 c4 6d 16 56 c0 c3 76 2a 64 01 00 aa 44 91 c5 e5 36 ca 42 Data Ascii: wcea#u2jn8r"U.u#8a&wZN0zM5`KCrAUj=%4"jQY'@P#1=@3Fw%g+ff]7z>a!"ynn[JE)'PYzikwzk~r E7@ImVvdD6B
2024-10-24 00:57:49 UTC	5632	IN	Data Raw: d6 98 7b 0c b4 56 31 ea d1 29 84 fa 60 3f b1 cc fb cf 99 7e b2 df 02 1c 39 fb 90 63 2a 04 bc 47 c5 79 83 4d 70 0c fa d9 12 80 31 50 e4 50 06 23 a2 d8 8c 2c 0f 45 e2 6c 06 ff e7 4c bf 81 12 3c 95 2f 3a d3 8f f7 5a 35 e8 65 c4 4a 9d f5 fd ff f1 09 f9 a6 a8 b4 28 68 2f 58 77 01 91 fe 47 26 19 4b 91 02 e1 4a 7b c9 02 2d 03 2c 58 ca 81 c1 f1 9f 7b 46 0a 0a 46 09 36 0b 42 56 3b f4 d5 85 73 61 71 89 14 a4 34 c4 64 b2 83 ae 7f a9 14 d4 14 72 0f e4 33 3b f9 2a d4 81 a2 90 9a 7b 75 5b c4 aa 81 c5 3f ff 9e 91 bd ff c8 24 63 51 8b 02 91 26 d5 65 31 9f 05 a8 85 c3 67 d8 ec 8f b4 24 a9 2e ac c4 92 24 cb 3e b8 3f 83 9c 8d e0 53 93 ca 40 8a 1f 49 e9 07 2d 2b 0c 56 75 2c a9 64 fa 66 c9 fc e5 4e 5a f9 f2 cb 1d b4 0a a3 99 32 14 a5 6b 20 e7 b7 e0 74 51 16 5b b5 fe 1f 73 bb Data Ascii: {V1)`?~9cGyMp1PP#,ElL</:Z5eJ(h/XwG&KJ{-,X{FF6BV;saq4dr3;{u[?$cQ&e1g$.$>?S@I-+Vu,dfNZ2k tQ[s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49783	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:48 UTC	1806	OUT	GET /view/react-console/build/24.4.1/const/index.js HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
2024-10-24 00:57:49 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:48 GMT Server: Apache Last-Modified: Thu, 17 Oct 2024 16:57:19 GMT Accept-Ranges: bytes Content-Length: 6676 Cache-Control: max-age=43200,s-maxage=43200,public,must-revalidate,proxy-revalidate Access-Control-Allow-Origin: * Vary: Origin Content-Type: application/javascript Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20008881e0af1fa5a16d3f2444be46c4d891b1d72f1a955359255899dacee1479e840815542fe4113000da54bb5325f5c67a888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3; Path=/; SameSite=None; Secure
2024-10-24 00:57:49 UTC	3893	IN	Data Raw: 76 61 72 20 73 65 61 72 63 68 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0d 0a 76 61 72 20 70 72 65 76 65 6e 74 4d 61 78 69 6d 69 7a 65 20 3d 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 70 72 65 76 65 6e 74 4d 61 78 69 6d 69 7a 65 27 29 20 3d 3d 3d 20 27 74 72 75 65 27 3b 0d 0a 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6f 6e 32 34 29 20 77 69 6e 64 6f 77 2e 6f 6e 32 34 20 3d 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 32 34 2e 63 6c 69 65 6e 74 50 72 6f 70 65 72 74 69 65 73 20 3d 20 7b 0d 0a 2f 2f 20 6d 69 63 20 61 6e 64 20 68 6c 73 20 6d 65 74 61 20 64 61 74 61 20 64 65 6c 61 79 20 66 6f 72 20 63 68 72 6f 6d 65 0d 0a 20 20 20 Data Ascii: var searchParams = new URLSearchParams(window.location.search);var preventMaximize = searchParams.get('preventMaximize') === 'true';if (!window.on24) window.on24 = {};window.on24.clientProperties = {// mic and hls meta data delay for chrome
2024-10-24 00:57:49 UTC	2783	IN	Data Raw: 73 75 65 73 0d 0a 20 20 20 20 75 73 65 55 70 64 61 74 65 64 53 46 41 44 69 6d 65 6e 73 69 6f 6e 73 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 76 69 64 65 6f 57 69 64 74 68 4e 6f 53 6c 69 64 65 73 3a 20 31 32 38 30 2c 0d 0a 20 20 20 20 76 69 64 65 6f 48 65 69 67 68 74 4e 6f 53 6c 69 64 65 73 3a 20 37 32 30 2c 0d 0a 20 20 20 20 73 79 6e 63 4d 65 65 74 75 70 41 73 73 65 74 73 57 69 74 68 52 65 63 6f 72 64 69 6e 67 54 69 6d 65 44 75 72 69 6e 67 41 72 63 68 69 76 65 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 2f 2f 20 53 68 6f 77 20 73 6c 69 64 65 20 6c 6f 61 64 65 72 20 77 68 69 6c 65 20 64 69 73 70 6c 61 79 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 6c 20 73 6c 69 64 65 0d 0a 20 20 20 20 73 68 6f 77 53 6c 69 64 65 4c 6f 61 64 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 Data Ascii: sues useUpdatedSFADimensions: true, videoWidthNoSlides: 1280, videoHeightNoSlides: 720, syncMeetupAssetsWithRecordingTimeDuringArchive: true, // Show slide loader while displaying the initial slide showSlideLoader: false,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49787	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:48 UTC	1148	OUT	GET /view/react-console/build/ HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
2024-10-24 00:57:49 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:49 GMT Server: Apache Last-Modified: Mon, 23 Sep 2024 07:24:23 GMT Accept-Ranges: bytes Content-Length: 6784 Content-Type: text/html; charset=UTF-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab200047e351d545805277b0bd4e2affe0feca2e7852e8b8b4cc76d3f38e76dae9fbf808ceafdcf21130009c95f513e513ce202b1528440894c9af65d405da3d891c90543725b74533419bd98be56eaecef6a852f18b92cdf99ce4; Path=/; SameSite=None; Secure
2024-10-24 00:57:49 UTC	4022	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="theme-color" content="#000000" /> <meta http-equiv="Pragma" content="no-cache" /> <me
2024-10-24 00:57:49 UTC	2762	IN	Data Raw: 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 6c 6f 63 61 6c 48 6f 73 74 20 2b 20 27 2f 76 69 65 77 2f 63 6f 6e 73 6f 6c 65 2f 73 68 61 72 65 64 2f 6a 73 2f 6c 69 62 73 2f 62 69 74 6d 6f 76 69 6e 70 6c 61 79 65 72 2d 38 2e 31 38 31 2e 30 2e 6a 73 27 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 4c 6f 61 64 20 73 68 61 72 65 64 20 63 6f 6e 73 74 61 6e 74 0a 20 20 20 20 20 20 2f 2f 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 45 41 43 54 20 2b 20 27 69 6e 64 65 78 2e 6a 73 3f 62 3d 27 20 2b 20 77 69 6e 64 6f 77 2e 63 61 63 68 65 42 75 73 74 65 72 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 Data Ascii: else { loadScriptSync(localHost + '/view/console/shared/js/libs/bitmovinplayer-8.181.0.js'); } // Load shared constant // loadScriptSync(BASE_URL_REACT + 'index.js?b=' + window.cacheBusterValue); loadScriptSync(BASE_URL_R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49788	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:49 UTC	1169	OUT	GET /view/react-console/build/24.4.1/const/index.js HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20008881e0af1fa5a16d3f2444be46c4d891b1d72f1a955359255899dacee1479e840815542fe4113000da54bb5325f5c67a888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
2024-10-24 00:57:49 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:49 GMT Server: Apache Last-Modified: Thu, 17 Oct 2024 16:57:19 GMT Accept-Ranges: bytes Content-Length: 6676 Cache-Control: max-age=43200,s-maxage=43200,public,must-revalidate,proxy-revalidate Access-Control-Allow-Origin: * Vary: Origin Content-Type: application/javascript Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000181d4b22e802731e24811536a349a3e1d85cb83c8585dbad19d126c3f5990a6308b3cb904b1130007781b525b843480b2b1528440894c9af65d405da3d891c90543725b74533419bd98be56eaecef6a852f18b92cdf99ce4; Path=/; SameSite=None; Secure
2024-10-24 00:57:49 UTC	2816	IN	Data Raw: 76 61 72 20 73 65 61 72 63 68 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0d 0a 76 61 72 20 70 72 65 76 65 6e 74 4d 61 78 69 6d 69 7a 65 20 3d 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 70 72 65 76 65 6e 74 4d 61 78 69 6d 69 7a 65 27 29 20 3d 3d 3d 20 27 74 72 75 65 27 3b 0d 0a 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6f 6e 32 34 29 20 77 69 6e 64 6f 77 2e 6f 6e 32 34 20 3d 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 32 34 2e 63 6c 69 65 6e 74 50 72 6f 70 65 72 74 69 65 73 20 3d 20 7b 0d 0a 2f 2f 20 6d 69 63 20 61 6e 64 20 68 6c 73 20 6d 65 74 61 20 64 61 74 61 20 64 65 6c 61 79 20 66 6f 72 20 63 68 72 6f 6d 65 0d 0a 20 20 20 Data Ascii: var searchParams = new URLSearchParams(window.location.search);var preventMaximize = searchParams.get('preventMaximize') === 'true';if (!window.on24) window.on24 = {};window.on24.clientProperties = {// mic and hls meta data delay for chrome
2024-10-24 00:57:49 UTC	3860	IN	Data Raw: 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 63 6f 6e 73 6f 6c 65 20 28 77 69 64 67 65 74 20 6e 61 6d 65 28 73 29 29 0d 0a 20 20 20 20 65 78 63 6c 75 64 65 57 69 64 67 65 74 73 3a 20 5b 5d 2c 0d 0a 20 20 20 20 2f 2f 20 66 6c 61 67 20 74 6f 20 65 6e 61 62 6c 65 20 6c 6f 62 62 79 20 6d 75 73 69 63 20 66 6f 72 20 6b 6f 6c 6c 65 63 74 69 76 65 20 73 74 72 65 61 6d 73 0d 0a 20 20 20 20 65 6e 61 62 6c 65 4b 6f 6c 6c 65 63 74 69 76 65 4c 6f 62 62 79 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 65 6e 61 62 6c 65 42 4f 52 49 6e 46 6f 72 75 6d 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 65 6e 61 62 6c 65 4d 65 65 74 75 70 73 53 6c 69 64 65 43 6f 6e 74 72 6f 6c 54 6f 6f 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 65 6e 61 62 6c 65 Data Ascii: that should be removed from console (widget name(s)) excludeWidgets: [], // flag to enable lobby music for kollective streams enableKollectiveLobby: false, enableBORInForum: false, enableMeetupsSlideControlTool: true, enable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49798	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:57:52 UTC	1204	OUT	GET /view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000181d4b22e802731e24811536a349a3e1d85cb83c8585dbad19d126c3f5990a6308b3cb904b1130007781b525b843480b2b1528440894c9af65d405da3d891c90543725b74533419bd98be56eaecef6a852f18b92cdf99ce4
2024-10-24 00:57:52 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:57:52 GMT Server: Apache Last-Modified: Fri, 27 Sep 2024 18:10:57 GMT Accept-Ranges: bytes Content-Length: 642061 Cache-Control: max-age=43200,s-maxage=43200,public,must-revalidate,proxy-revalidate Access-Control-Allow-Origin: * Vary: Origin Content-Type: application/javascript Content-Encoding: gzip Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2; Path=/; SameSite=None; Secure
2024-10-24 00:57:52 UTC	1408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 ec bd eb 72 e3 38 96 2e fa 7f 9e c2 95 3d a8 b0 bb 9c 59 96 ec 74 de da 55 21 4b 72 59 bb 7d 2b 49 ce ec 9a 9a 3c 0a 5a 84 24 76 52 24 8b 84 6c 6b 32 1d b1 df e1 bc e1 79 92 fd 2d 10 00 01 50 92 5d 97 9e 99 7d a6 2b 3a 3a 2d 12 97 85 85 75 5f 0b e0 b7 7f fe 03 ff db fa 97 ad 3f 6f b5 d3 6c 99 47 d3 99 d8 da 6e ef 6c 35 f7 1a 6f 76 b7 8e 23 31 4f 6f a3 64 77 ab 97 8c 5f ec 6e b5 e2 78 ab 4f 6d 8a ad 3e 2f 78 7e cb 43 d9 97 fa 0f 67 51 b1 55 a4 8b 7c cc b7 c6 69 c8 b7 82 24 dc 8a d0 72 51 94 7f 87 51 21 f2 e8 66 21 a2 14 03 52 e3 c5 cd df f9 58 6c 89 74 4b cc f8 96 e0 f9 bc 90 c3 51 cf 71 9a 84 11 35 2d b6 d2 89 7c 1f 64 59 1c 8d 83 9b 98 6f e1 5f 9e d0 b0 d3 9c f3 39 4f c4 0b 03 86 06 79 eb 2a 0e 96 3c df 7a cf f3 02 a3 6c bd Data Ascii: r8.=YtU!KrY}+I<Z$vR$lk2y-P]}+::-u_?olGnl5ov#1Oodw_nxOm>/x~CgQU\|i$rQQ!f!RXltKQq5-\|dYo_9Oy*<zl
2024-10-24 00:57:52 UTC	2459	IN	Data Raw: 78 78 26 ce 79 34 4d e3 d1 25 8b 5a bc 9f e5 45 18 44 01 0f e7 5c b0 99 48 96 73 96 62 2e ce 83 21 5b 40 ec 04 bd 80 a7 39 cf a3 5c f0 93 fe 7c 94 1e 47 23 76 3a 4c 2e e3 a0 7f d7 0d f3 e4 58 5c 05 e0 4b 0e ad cc 78 98 04 e2 a6 9b 9f 40 6e 25 62 76 37 e5 ad 73 96 8f db d3 c1 32 e2 82 5c a0 78 36 3e 1e c4 62 d4 cc d3 56 fe e3 10 d3 b0 9b 60 32 4e db 11 fc a9 c5 32 e4 5d 98 a3 d3 38 9f 8a f4 ec 36 6b f5 62 1e 70 71 96 dc 0e 30 41 78 9a b4 3f b0 7e 0b 58 11 03 16 5e 73 96 dd c5 45 14 0e 46 49 c0 fb 2d 7e 9a 84 e2 8e f7 83 68 01 d3 98 47 2c c9 d2 c5 ed 40 8c 62 21 06 22 e0 f3 f7 e3 51 37 1a 5e f3 0f 8b 24 4d d8 c5 e8 bc df 87 1f 75 c6 78 9c 9d 60 84 bb 44 b0 6e 74 59 84 23 11 9e 8b f4 84 f3 f1 34 0b 46 fc 96 05 2c e6 82 8b e3 e8 84 47 c0 05 17 33 71 ce 8e 8b Data Ascii: xx&y4M%ZED\Hsb.![@9\\|G#v:L.X\Kx@n%bv7s2\x6>bV`2N2]86kbpq0Ax?~X^sEFI-~hG,@b!"Q7^$Mux`DntY#4F,G3q
2024-10-24 00:57:52 UTC	7040	IN	Data Raw: 39 9e 83 fb f2 05 49 f3 14 06 28 f0 12 15 79 d1 ba 8d 60 58 0b 7e 0c 7a 19 ce 61 2e 07 7c 18 b4 96 dd 4c c0 24 fb 0f d8 ab ed 6e 31 6a 23 17 33 ed b7 c4 1c 48 e8 8d d3 ac 07 0b a8 0b b6 1e 15 30 f3 2f 79 16 65 79 1b 76 59 14 cd f2 bb 18 d6 1b 58 21 82 50 14 a3 6b 98 33 33 48 75 40 3a 89 e3 68 99 42 9a 74 a5 36 29 a6 0c 32 7d c0 13 96 8c a2 82 9f df 80 54 61 46 c3 0c 59 c2 8c c5 16 73 c8 a3 a5 b8 0d 7b a7 62 b1 10 45 00 52 68 b3 68 d2 bf 04 55 dd 4e 4e c0 2a 93 bb 70 71 b5 c0 36 4c 06 cf 03 d8 2c 11 bf cd 60 88 74 d3 f1 08 8a 2f 17 59 b4 e4 41 08 23 ea 47 90 d2 14 4a 97 c8 6a 11 22 21 05 d2 e0 b0 f4 cf 8e 7b 67 30 95 e2 76 3f 4a d2 1f e0 16 91 05 0e 83 97 07 f3 62 9c 07 90 64 fc be f8 29 45 48 29 8e e1 2a f5 88 f4 5b 82 9c c6 19 54 6c 31 ff 11 c4 0d dc c1 Data Ascii: 9I(y`X~za.\|L$n1j#3H0/yeyvYX!Pk33Hu@:hBt6)2}TaFYs{bERhhUNNpq6L,`t/YA#GJj"!{g0v?Jbd)EH)[Tl1
2024-10-24 00:57:52 UTC	4224	IN	Data Raw: 03 5c 65 f4 bc 09 37 94 43 d8 36 92 23 8c 4a 82 34 23 9a 89 e8 b9 15 88 50 aa bc 52 18 72 58 ac c7 74 20 03 81 14 6e 7d 67 15 0d c3 82 ab bf ab ba 63 3e f3 a3 49 47 f0 aa a5 f8 fd 60 a9 58 66 06 c4 b9 2f 98 6d 43 8d 16 e2 19 f4 d2 d4 71 60 71 0e ee 35 f7 d0 bf 9c 1d ac 6f d4 92 65 8e 83 d0 fc 29 6d f0 9d 93 7d fe 49 02 67 de 15 49 f6 27 0f dc c4 9d 19 1a 49 64 4a ca a3 f3 f5 d1 8f 3e 8f 70 1e 58 c6 61 46 37 f8 72 44 59 73 bc b7 1b e4 79 b0 ec e1 1a d5 fb b7 cf 1b 0f ae be 82 18 81 98 f2 c6 22 f6 f6 8d c6 ba 37 e8 f5 aa 37 f8 f2 c5 14 2a 42 20 5b 5b 4e 9e 92 33 65 bd c4 53 c2 f5 08 0c b0 26 36 c3 80 06 4a fd db ca 97 6e 63 fb 03 a6 27 1d bd 71 7a 6a 60 a3 c0 ba 95 04 f7 16 3f 15 06 97 f1 9b 7b b2 82 49 69 e3 3d d8 16 0e 1e 57 10 19 e4 9c db 44 3a 14 d2 f1 Data Ascii: \e7C6#J4#PRrXt n}gc>IG`Xf/mCq`q5oe)m}IgI'IdJ>pXaF7rDYsy"77*B [[N3eS&6Jnc'qzj`?{Ii=WD:
2024-10-24 00:57:52 UTC	4224	IN	Data Raw: 23 c5 07 9a a4 0d 66 4b 9a d7 47 ec 28 4c 20 0f e9 fd 86 5b 0f 61 16 28 01 07 35 b4 d6 72 97 25 fb fa 46 44 72 91 ca f9 3c 43 dd 48 70 e3 7b 97 cd 60 1a d6 e3 38 b4 c0 b7 cf b7 e9 2b b8 ef b6 bf d2 ce ba e9 60 5d 33 5a 3e 33 35 f6 98 5e d5 d5 01 62 ed b6 41 bf 1a 98 2c a3 9c 1e 93 37 a7 cd 01 47 80 37 c9 d9 df ae 2c 24 ff ea 3c ea 68 4e 28 f8 df af 68 4a 2f ba 0a b8 f8 24 2d ab e1 dc e9 9e 78 33 5c 53 1e ae a8 6e 7a b3 6c c5 e6 4b 0a 99 b9 a3 c2 80 71 2d 84 55 37 bd 35 29 6d a8 24 a3 e5 24 fd d6 9b db a4 29 7c 64 40 b4 dd 8e a6 fc 4a e3 6f 02 11 0e 9b 35 a6 45 5b cd d5 27 5c 57 2d db df 06 1c dd 95 e4 03 8b 7b 3d 75 5b b6 99 e7 81 59 01 b8 ff 66 d7 47 5a 54 41 3e 2d d9 29 0e d2 65 ad af da 71 bf 9e 7b 45 1d b0 16 3b 3e 0f 78 63 52 6e c7 4a 49 d4 2a 05 c9 Data Ascii: #fKG(L [a(5r%FDr<CHp{`8+`]3Z>35^bA,7G7,$<hN(hJ/$-x3\SnzlKq-U75)m$$)\|d@Jo5E['\W-{=u[YfGZTA>-)eq{E;>xcRnJI*
2024-10-24 00:57:52 UTC	5632	IN	Data Raw: 6b 1b 5b f6 a8 a6 4c 2c c3 d0 8b 03 b3 95 54 00 1e 1f 85 99 84 7f 89 0e 2d 55 ed 91 4b 7b d4 98 a3 d6 9c 92 46 8f 1a c6 1e 75 5e c1 cf b4 ec 51 92 3f ea 84 d0 9e 55 64 f5 5f 90 16 f8 9d f6 28 5d 78 a5 90 55 b7 47 cd e7 15 74 42 a9 da 57 79 91 dc 22 19 d3 51 37 73 d9 30 28 7c 5d b6 f5 91 6c 80 56 10 e5 de 4a 11 a5 1f 19 92 f8 e7 51 2c 84 bd fe 19 d3 27 3b 05 04 f2 54 7b 14 f7 0e f8 54 69 7f db 4f 11 1c 15 62 1b bb 88 cc 35 49 7d e8 5b 51 df ef 88 e9 cb 3c 77 49 cf b6 45 b1 3a a6 df 20 8e d4 5f b5 b7 c3 64 fb f4 99 90 a3 55 c7 a7 f6 65 d2 00 25 64 6a 35 76 22 00 93 98 35 d0 c7 91 cd 8f a7 9d 9e 2a 87 96 b0 bb d6 b9 3d 6e b3 bc e5 57 09 c4 df 79 7a ca b7 cf 64 a6 c2 13 2b 8e cd 56 22 96 ac c8 15 35 3e fb 14 3c 33 68 f9 e6 c8 d8 7a 06 0f fb 4d e8 0b f5 e1 77 Data Ascii: k[L,T-UK{Fu^Q?Ud_(]xUGtBWy"Q7s0(\|]lVJQ,';T{TiOb5I}[Q<wIE: _dUe%dj5v"5*=nWyzd+V"5><3hzMw
2024-10-24 00:57:52 UTC	5632	IN	Data Raw: 5c 28 50 62 d3 fa ee fb 3b f9 38 79 32 ab 0a 84 64 7b 26 62 b7 a7 23 c6 62 21 9f e7 fd ca cc 6e 5c 7f 0b a6 fe 35 85 69 d4 07 47 75 52 cc 80 a5 44 73 3c 4d 79 9b de c2 af 89 df 8d 61 7a 5c 8e cf 92 ec 68 3c c9 e0 62 f6 fb 51 f6 31 ea 4d eb 30 09 6f 96 e7 d0 02 c3 4f 6f 21 ad c6 57 bf c0 9d 84 07 18 cf 67 c9 3b a8 ed 71 7d 04 a1 9c d6 cf e7 c7 73 08 21 88 83 3a 2c 84 38 3b 5c ae 92 71 ff a7 79 3d fa 65 3e cf d2 ce 38 bf 06 a1 4c 0e a0 a4 d3 de 18 08 ee 83 ca d3 08 1c 0b d8 cc a7 71 e7 7e 9a c2 c6 39 5d c6 ab 69 f4 ee fb fa 74 16 f7 de ae ba f5 fe 62 79 9c 1c c3 91 cb a6 c3 fc 2d 14 67 54 ff 11 22 a5 06 ef aa 1b e5 3f 76 ae 06 dd 79 e7 1f 70 40 cf 46 58 54 37 5e 24 4b 6c 2f ee 81 63 93 39 08 09 3e 16 44 60 3d be 84 6d be 84 23 1e 65 e3 59 7d 31 25 1e 07 ef Data Ascii: \(Pb;8y2d{&b#b!n\5iGuRDs<Myaz\h<bQ1M0oOo!Wg;q}s!:,8;\qy=e>8Lq~9]itby-gT"?vyp@FXT7^$Kl/c9>D`=m#eY}1%
2024-10-24 00:57:52 UTC	4224	IN	Data Raw: bf da 7f 39 60 00 f7 86 2f d5 b9 70 c1 a3 54 9d ef ea ee d5 15 47 f6 d3 96 45 9e 69 0e 88 07 18 a3 c7 10 c0 75 43 e4 1b 50 5f 35 1c be 78 ff e1 73 82 22 34 ba ed 15 37 bb c2 d7 88 ee cd f9 6b 08 04 77 6c 79 4b e0 59 cd 06 e0 85 27 c9 78 e3 16 47 4a 29 95 a1 c6 9e 51 d3 64 c7 07 fc 70 64 e8 b3 85 84 d9 81 1c 8a d1 c6 50 52 97 d6 10 75 f3 21 b2 fd f6 eb 60 c7 f4 14 a0 19 0c 90 7c 61 fe 29 90 29 6e be d1 c7 eb 34 69 43 03 8a 1b 15 50 de ef 4e 2e 48 4a f6 8e 10 60 c3 95 40 a1 63 85 01 2c 18 60 44 02 c1 b9 60 ff 1a d9 87 cf e2 48 04 66 61 46 72 a0 80 c4 d6 b2 d0 42 10 37 0e 11 9c c3 05 72 0f 92 44 96 67 71 73 31 d3 3b 37 a0 6b 8b ed 63 21 98 d3 7d 67 19 a6 a7 92 3f 91 20 b3 37 08 7a 7d 58 96 15 fb 10 fe cb fa 28 23 a4 f4 07 16 6a 85 c1 94 7e 10 7d 3c 61 86 53 Data Ascii: 9`/pTGEiuCP_5xs"47kwlyKY'xGJ)QdpdPRu!`\|a))n4iCPN.HJ`@c,`D`HfaFrB7rDgqs1;7kc!}g? 7z}X(#j~}<aS
2024-10-24 00:57:53 UTC	5632	IN	Data Raw: d6 98 7b 0c b4 56 31 ea d1 29 84 fa 60 3f b1 cc fb cf 99 7e b2 df 02 1c 39 fb 90 63 2a 04 bc 47 c5 79 83 4d 70 0c fa d9 12 80 31 50 e4 50 06 23 a2 d8 8c 2c 0f 45 e2 6c 06 ff e7 4c bf 81 12 3c 95 2f 3a d3 8f f7 5a 35 e8 65 c4 4a 9d f5 fd ff f1 09 f9 a6 a8 b4 28 68 2f 58 77 01 91 fe 47 26 19 4b 91 02 e1 4a 7b c9 02 2d 03 2c 58 ca 81 c1 f1 9f 7b 46 0a 0a 46 09 36 0b 42 56 3b f4 d5 85 73 61 71 89 14 a4 34 c4 64 b2 83 ae 7f a9 14 d4 14 72 0f e4 33 3b f9 2a d4 81 a2 90 9a 7b 75 5b c4 aa 81 c5 3f ff 9e 91 bd ff c8 24 63 51 8b 02 91 26 d5 65 31 9f 05 a8 85 c3 67 d8 ec 8f b4 24 a9 2e ac c4 92 24 cb 3e b8 3f 83 9c 8d e0 53 93 ca 40 8a 1f 49 e9 07 2d 2b 0c 56 75 2c a9 64 fa 66 c9 fc e5 4e 5a f9 f2 cb 1d b4 0a a3 99 32 14 a5 6b 20 e7 b7 e0 74 51 16 5b b5 fe 1f 73 bb Data Ascii: {V1)`?~9cGyMp1PP#,ElL</:Z5eJ(h/XwG&KJ{-,X{FF6BV;saq4dr3;{u[?$cQ&e1g$.$>?S@I-+Vu,dfNZ2k tQ[s
2024-10-24 00:57:53 UTC	4224	IN	Data Raw: e3 f3 77 df 69 0e b2 34 0b 0f ed bb ef 88 a9 bd 0f 6a 10 c4 73 bf fb 8e 4f c8 31 7c d5 35 d5 36 e5 8f 36 fe 0f 06 f7 88 f7 ea b5 91 28 7a f5 ea 9b 06 3a f8 bb 56 b1 16 35 4f 35 a1 b4 e8 d1 7b 03 73 a4 3e 0c ff 82 0d 8a 43 f1 2a 8c 9d 15 0a 5e 67 35 81 8d 02 ab 49 ad 82 8c a9 82 d7 03 d1 55 78 f2 be 2b 1c 3c b3 a2 92 fa 00 cf f8 65 e6 60 09 27 cb 20 76 e9 22 39 d6 55 66 48 2e 1c a1 c2 5d bb 40 de a4 20 31 28 86 c0 28 c7 24 66 34 4f 69 90 45 a3 f1 2a 8d 7d 3f 4a a0 0c 5b 3d 1b fa 3a 51 88 be b6 3e 4a e4 6a 7c 03 97 e8 f1 ef 3b 42 a6 30 1b c9 cd fa 7d 02 a3 58 cd ec b5 76 68 c3 68 65 68 23 7f a9 80 36 08 45 a0 cd b3 26 f1 8c 0a 63 01 33 68 d7 22 50 26 be 51 87 4b 62 5d b1 19 cb 47 48 1f c6 42 8b d2 65 06 5f 2c 8f bd df 59 07 12 f0 df 33 43 6a 08 0b e1 12 3a Data Ascii: wi4jsO1\|566(z:V5O5{s>C^g5IUx+<e`' v"9UfH.]@ 1(($f4OiE}?J[=:Q>Jj\|;B0}Xvhheh#6E&c3h"P&QKb]GHBe_,Y3Cj:

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:04 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 89fa8e61-601e-0070-0c14-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005804Z-r197bdfb6b4ld6jc5asqwvvz0w00000000u000000000t9vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:04 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 00:58:04 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 00:58:04 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 00:58:04 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 00:58:04 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 00:58:05 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 00:58:05 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 00:58:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 00:58:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 00:58:05 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:06 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:06 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005806Z-16849878b785jsrm4477mv3ezn00000007100000000026m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:06 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:06 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:06 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005806Z-16849878b78ngdnlw4w0762cms000000075g00000000156c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:06 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:06 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005806Z-16849878b78bkvbz1ry47zvsas00000006yg00000000gzxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:06 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:06 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005806Z-16849878b782h9tt5z2wa5rfxg00000006zg0000000076uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:06 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:06 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:06 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005806Z-16849878b78mhkkf6kbvry07q000000006w000000000cuyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:06 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:07 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005807Z-16849878b78dghrpt8v731n7r400000006wg00000000bnrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:07 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:07 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005807Z-16849878b785jsrm4477mv3ezn00000007100000000026pa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:07 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:07 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005807Z-r197bdfb6b429k2s6br3k49qn4000000043000000000k8ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:07 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:07 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005807Z-15b8d89586fst84k5f3z220tec0000000dpg0000000097dg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:07 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:07 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005807Z-16849878b78c2tmb7nhatnd68s000000070g00000000av1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:07 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:08 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005808Z-16849878b78rjhv97f3nhawr7s0000000700000000005gw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:08 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005808Z-16849878b7862vlcc7m66axrs0000000071g0000000075zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:08 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005808Z-15b8d89586flzzks5bs37v2b9000000002f000000000m4p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:08 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005808Z-15b8d89586fst84k5f3z220tec0000000dp00000000097zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:08 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005808Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bag00000000f8w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:09 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005809Z-r197bdfb6b4cz6xrsdncwtgzd40000000nmg00000000ndva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:09 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005809Z-16849878b787sbpl0sv29sm89s00000006y000000000unpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:09 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005809Z-16849878b78dghrpt8v731n7r400000006t000000000pv9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:09 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:09 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005809Z-16849878b78bkvbz1ry47zvsas000000073g000000000sx5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:09 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:09 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:09 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005809Z-16849878b78k46f8kzwxznephs00000006wg000000009rgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:09 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 5074b8ce-701e-005c-627a-25bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005810Z-15b8d89586fqj7k5uht6e8nnew0000000d700000000062p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005810Z-16849878b78z5q7jpbgf6e9mcw000000073g0000000077h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:10 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005810Z-16849878b78s2lqfdex4tmpp7800000006yg00000000hqbm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:10 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005810Z-16849878b7842t5ke0k7mzbt3c00000006s000000000n3hz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:10 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:10 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005810Z-16849878b78p4hmjy4vha5ddqw00000006v000000000g36x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:10 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005811Z-16849878b7862vlcc7m66axrs000000006y000000000mqhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005811Z-16849878b782h9tt5z2wa5rfxg0000000700000000005mck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:11 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005811Z-r197bdfb6b4h2vctng0a0nubg80000000a3000000000cwn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 56a14f83-001e-002b-1ff2-2499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005811Z-r197bdfb6b487xlkrahepdse5000000008eg00000000ffvs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005811Z-15b8d89586f6nn8zquf2vw6t54000000041g00000000k225 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-r197bdfb6b49q495mwyebb3r6s00000009y000000000gsp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:12 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-15b8d89586fnsf5zm1ryrxu0bc00000002cg00000000mhv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-16849878b7862vlcc7m66axrs000000006wg00000000sf1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-15b8d89586fx2hlt035xdehq580000000dtg000000005nw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-16849878b78fmrkt2ukpvh9wh4000000071g000000000mde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-15b8d89586fwzdd8urmg0p1ebs00000008f000000000dktx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-15b8d89586f6nn8zquf2vw6t54000000044g000000009ace x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-16849878b78bkvbz1ry47zvsas0000000720000000005qcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 6177d94c-d01e-0028-6bfc-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-r197bdfb6b4ld6jc5asqwvvz0w00000000y000000000bdfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:12 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:12 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005812Z-r197bdfb6b4h2vctng0a0nubg80000000a6g0000000028m7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:13 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:13 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 71363f0e-d01e-0065-7af4-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005813Z-r197bdfb6b4cz6xrsdncwtgzd40000000nqg00000000bntx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:13 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:13 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005813Z-16849878b78ngdnlw4w0762cms000000074g000000003yb3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:13 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:13 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005813Z-r197bdfb6b4kkrkjudg185sarw00000000z000000000mw7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:13 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:13 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005813Z-16849878b78jfqwd1dsrhqg3aw000000071000000000h9m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:13 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005813Z-15b8d89586fcvr6p5956n5d0rc000000044g000000001frr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:14 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f2a27b04-801e-0047-6ef4-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005814Z-r197bdfb6b429k2s6br3k49qn4000000042g00000000muu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:14 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 700672c4-201e-0096-3cf2-24ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005814Z-r197bdfb6b4kkm8440c459r6k8000000015g000000003dsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:14 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9a9b06d2-601e-0032-5ff9-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005814Z-r197bdfb6b4b582bwynewx7zgn0000000bk000000000tf72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:14 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005814Z-16849878b787c9z7hb8u9yysp00000000750000000002htp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:14 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005814Z-16849878b7877w64p2ge9s25rg00000000g0000000002em5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:15 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005815Z-16849878b78jfqwd1dsrhqg3aw000000073g000000007tee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:15 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 02f2a2dc-901e-0064-11fc-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005815Z-15b8d89586fvk4kmwqg9fgbkn800000002eg00000000mnqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:15 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005815Z-16849878b78mhkkf6kbvry07q000000006ug00000000kay8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:15 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005815Z-15b8d89586f8l5961kfst8fpb000000008p0000000001h4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:15 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005815Z-16849878b78hz7zj8u0h2zng14000000073g0000000088a5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:16 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:16 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005816Z-16849878b78dkr6tqerbnpg1zc000000070g00000000bder x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:16 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:16 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:16 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: e3ffbf99-001e-0014-2c05-255151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005816Z-r197bdfb6b4t7wszdvrfk02ah400000008e000000000khsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:16 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:16 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:16 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005816Z-16849878b785g992cz2s9gk35c00000006x000000000ray4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:16 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:16 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005816Z-16849878b7862vlcc7m66axrs0000000070g00000000as0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:16 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005816Z-16849878b782558xg5kpzay6es00000006ug00000000rw2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:17 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:17 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b1315031-501e-000a-22f5-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005817Z-r197bdfb6b4kkm8440c459r6k80000000160000000001x1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:17 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 43134ec5-e01e-003c-4115-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005817Z-r197bdfb6b4rt57kw3q0f43mqg0000000b9g00000000bbfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:17 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005817Z-16849878b788tnsxzb2smucwdc00000006xg00000000r10r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:17 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005817Z-r197bdfb6b4b582bwynewx7zgn0000000bt00000000029f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:17 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005817Z-r197bdfb6b42sc4ddemybqpm140000000npg000000007a4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7acd244f-d01e-002b-55f2-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005818Z-r197bdfb6b4kzncf21qcaynxz8000000013g00000000f6gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:18 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 18d6d76d-f01e-0052-73f2-249224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005818Z-15b8d89586fqckbz0ssbuzzp1n00000001f00000000076kt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:18 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:18 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005818Z-r197bdfb6b4b582bwynewx7zgn0000000bsg000000004hgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005818Z-16849878b785g992cz2s9gk35c0000000720000000005erh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005818Z-16849878b782558xg5kpzay6es00000007100000000024ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:18 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005819Z-16849878b78c5zx4gw8tcga1b400000006t000000000pzqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:19 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005819Z-16849878b786vsxz21496wc2qn00000007500000000036pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:19 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 082cae3b-c01e-0079-2af2-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005819Z-r197bdfb6b4kkm8440c459r6k800000000z000000000sucq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:19 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:19 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005819Z-15b8d89586fzhrwgk23ex2bvhw00000000x000000000p7z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:19 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:19 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:19 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005819Z-16849878b78jfqwd1dsrhqg3aw00000006z000000000rt82 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:19 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-15b8d89586f989rks44whx5v7s0000000dfg000000002n62 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:20 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-16849878b785g992cz2s9gk35c00000006wg00000000seug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:20 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-16849878b78plcdqu15wsb88640000000700000000005nzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:20 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8e096af2-401e-0015-41f3-240e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-r197bdfb6b49k6rsrbz098tg80000000045000000000bp19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:20 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4fe2bab2-201e-0071-71f2-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-r197bdfb6b46gt25anfa5gg2fw00000002k00000000031g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:20 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:20 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:20 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005820Z-16849878b78c2tmb7nhatnd68s000000071g000000007p9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-16849878b787c9z7hb8u9yysp0000000075g000000001223 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-r197bdfb6b4sn8wg20e97vn7ps0000000nf000000000kvvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a956e522-e01e-0020-405a-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-r197bdfb6b487xlkrahepdse5000000008kg000000004w2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-15b8d89586f4zwgbz365q03b0c0000000dvg0000000024h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-16849878b78rjhv97f3nhawr7s00000006w000000000kzrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-16849878b78c2tmb7nhatnd68s0000000730000000002cnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-16849878b78k46f8kzwxznephs00000006xg000000006fke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:21 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005821Z-15b8d89586fmhkw4gksnr1w3ds0000000dq0000000006r3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:21 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 4e110991-201e-0033-6186-25b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-r197bdfb6b4lbgfqwkqbrm672s00000000rg00000000bquk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:22 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 06a6de3a-901e-002a-7f50-237a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-r197bdfb6b4vlqfn9hfre6k1s80000000br000000000k4a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:22 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 998f428a-101e-007a-649d-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-15b8d89586ffsjj9qb0gmb1stn00000002f000000000b03h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:22 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: b5c58150-601e-0070-04f2-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-r197bdfb6b4ld6jc5asqwvvz0w0000000100000000005we2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:22 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-16849878b7877w64p2ge9s25rg00000000eg0000000021rb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:22 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005822Z-15b8d89586fqj7k5uht6e8nnew0000000d3000000000k614 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:23 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:23 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005823Z-16849878b785jsrm4477mv3ezn00000006vg00000000nkx3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:23 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:23 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005823Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bb000000000c3a8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:23 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e4dfd9e9-c01e-00ad-24f5-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005823Z-15b8d89586f2hk28h0h6zye26c00000000s000000000bd1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:23 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 508e2446-401e-0048-3188-250409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005823Z-15b8d89586ffsjj9qb0gmb1stn00000002eg00000000bxf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:23 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:23 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005823Z-16849878b785jsrm4477mv3ezn00000006w000000000n6ar x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:24 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 62bbcfe8-a01e-0032-2ffc-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005824Z-r197bdfb6b4rkc6mhwyt3e61pc00000000x000000000ecgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:24 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:24 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 81a8d0db-401e-0047-0515-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005824Z-r197bdfb6b4ld6jc5asqwvvz0w0000000110000000002bc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:24 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:24 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:24 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 332ff9ef-a01e-003d-42f3-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005824Z-r197bdfb6b4tq6ldv3s2dcykm800000000xg000000000dhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:24 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:24 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4e335343-a01e-000d-7cf4-24d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005824Z-r197bdfb6b4lkrtc7na2dkay2800000002cg000000006skg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:24 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005824Z-16849878b78k46f8kzwxznephs00000006yg0000000038yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:25 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:25 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e80f69c8-601e-0097-55f4-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005825Z-15b8d89586fxdh48qknu9dqk2g000000025g00000000k3ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:25 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:25 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:25 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005825Z-r197bdfb6b4ld6jc5asqwvvz0w0000000100000000005whc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:25 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:25 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005825Z-r197bdfb6b4qpk6v9629ad4b5s0000000bh000000000gzuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:25 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005825Z-16849878b78lhh9t0fb3392enw00000006wg000000009e6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:25 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005825Z-15b8d89586fqj7k5uht6e8nnew0000000d5000000000c1uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:26 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005826Z-15b8d89586fnsf5zm1ryrxu0bc00000002f000000000b7ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:26 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005826Z-16849878b78plcdqu15wsb886400000006vg00000000p9fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:26 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:26 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a3259b44-001e-0065-2af2-240b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005826Z-r197bdfb6b4sn8wg20e97vn7ps0000000nng000000002zwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:26 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005826Z-16849878b785f8wh85a0w3ennn0000000700000000005k1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:26 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: f032e2a4-a01e-0084-6c15-259ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005826Z-r197bdfb6b4rt57kw3q0f43mqg0000000b6000000000qdca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49925	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1958	OUT	GET /apic/utilApp/EventConsoleCachedServlet?eventId=4667697&eventSessionId=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&useCache=false&displayProfile=player&random=1729731505719 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
2024-10-24 00:58:27 UTC	698	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-ORACLE-DMS-ECID: 74e2919d-a5d9-46f1-8093-b7eb76b88264-000c4f12 X-ORACLE-DMS-RID: 0 ProX-Cache-Status: MISS ProX-Response-Time: 0.061 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000bb246b79e8c8b9668a295eecbebab2d013454de4ea6912f31cf22f3cb6a19b5808f7e00f5811300079a399211cc175ccbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	11262	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 6e 66 6f 22 3a 7b 22 77 69 64 67 65 74 73 22 3a 5b 7b 22 77 69 64 67 65 74 6e 61 6d 65 22 3a 22 70 6c 61 79 65 72 5f 6f 6e 6c 69 6e 65 5f 68 65 6c 70 22 2c 22 68 65 69 67 68 74 22 3a 34 35 30 2c 22 77 69 64 74 68 22 3a 34 35 30 2c 22 74 6f 70 6f 66 66 73 65 74 22 3a 31 37 39 2c 22 6c 65 66 74 6f 66 66 73 65 74 22 3a 31 31 31 32 2c 22 6c 6f 61 64 43 6f 6e 66 69 67 56 4f 46 72 6f 6d 58 4d 4c 22 3a 22 66 61 6c 73 65 22 2c 22 61 6c 6c 6f 77 54 72 61 63 6b 48 69 74 22 3a 22 74 72 75 65 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 65 6d 70 74 79 22 2c 22 63 72 65 61 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 22 3a 22 31 33 32 33 38 38 39 39 35 30 39 31 31 22 2c 22 68 61 73 43 68 72 6f Data Ascii: 8000{"displayElementInfo":{"widgets":[{"widgetname":"player_online_help","height":450,"width":450,"topoffset":179,"leftoffset":1112,"loadConfigVOFromXML":"false","allowTrackHit":"true","componentType":"empty","creationTimestamp":"1323889950911","hasChro
2024-10-24 00:58:27 UTC	2896	IN	Data Raw: 6d 58 4d 4c 22 3a 22 66 61 6c 73 65 22 2c 22 61 6c 6c 6f 77 54 72 61 63 6b 48 69 74 22 3a 22 74 72 75 65 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 70 61 6e 65 6c 22 2c 22 63 72 65 61 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 22 3a 22 31 36 32 38 35 32 35 37 37 33 34 39 31 22 2c 22 68 61 73 43 68 72 6f 6d 65 22 3a 22 74 72 75 65 22 2c 22 7a 49 6e 64 65 78 22 3a 22 31 32 39 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 68 61 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 74 72 75 65 22 2c 22 73 65 6c 65 63 74 65 64 52 61 74 69 6f 22 3a 22 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 2c 22 6c 6f 63 6b 41 73 70 65 63 74 52 61 74 69 6f 22 3a 22 66 61 6c 73 65 22 2c 22 69 Data Ascii: mXML":"false","allowTrackHit":"true","componentType":"panel","creationTimestamp":"1628525773491","hasChrome":"true","zIndex":"129","description":"","hasConfiguration":"true","selectedRatio":"","version":"1.0","visible":"false","lockAspectRatio":"false","i
2024-10-24 00:58:27 UTC	11584	IN	Data Raw: 46 46 22 2c 22 74 65 78 74 46 6f 6e 74 22 3a 22 61 72 69 61 6c 22 2c 22 74 65 78 74 53 69 7a 65 22 3a 22 31 38 70 78 22 2c 22 62 75 74 74 6f 6e 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 62 75 74 74 6f 6e 22 3a 22 52 45 51 55 45 53 54 20 4e 4f 57 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 43 6f 6c 6f 72 22 3a 22 23 35 32 32 46 38 30 22 2c 22 62 75 74 74 6f 6e 46 6f 6e 74 22 3a 22 73 65 67 6f 65 20 75 69 22 2c 22 62 75 74 74 6f 6e 53 69 7a 65 22 3a 22 31 34 70 78 22 2c 22 62 75 74 74 6f 6e 41 63 74 69 6f 6e 22 3a 22 75 72 6c 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6d 61 67 65 74 72 65 6e 64 2e 63 6f 6d 2f 73 6f 6c 75 74 69 6f 6e 73 2f 65 6c 69 74 65 2d 65 6d 73 2f 23 43 6f 6e 74 61 63 74 22 2c 22 65 6d 61 69 6c 22 3a 22 22 Data Ascii: FF","textFont":"arial","textSize":"18px","buttonColor":"#FFFFFF","button":"REQUEST NOW","buttonTextColor":"#522F80","buttonFont":"segoe ui","buttonSize":"14px","buttonAction":"url","url":"https://www.imagetrend.com/solutions/elite-ems/#Contact","email":""
2024-10-24 00:58:27 UTC	16384	IN	Data Raw: 70 65 64 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 22 2c 22 62 79 74 65 73 22 3a 34 34 31 31 36 32 2c 22 70 6f 70 75 70 22 3a 22 4e 22 2c 22 73 6f 75 72 63 65 66 69 6c 65 6e 61 6d 65 22 3a 22 73 74 72 69 70 65 64 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 22 7d 2c 7b 22 69 64 22 3a 33 32 31 39 31 32 33 36 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 2f 34 36 2f 36 37 2f 36 39 2f 37 2f 72 74 2f 31 2f 69 6d 61 67 65 73 2f 70 6c 61 79 65 72 62 61 63 6b 67 72 6f 75 6e 64 2f 61 62 73 74 72 61 63 74 5f 62 61 63 6b 67 72 6f 75 6e 64 32 2e 70 6e 67 22 2c 22 63 6f 64 65 22 3a 22 69 6d 61 67 65 73 22 2c 22 63 6f 64 65 63 61 74 65 67 6f 72 79 22 3a 22 70 6c 61 79 65 72 62 61 63 6b 67 72 6f 75 6e Data Ascii: ped_background.png","bytes":441162,"popup":"N","sourcefilename":"striped_background.png"},{"id":321912360,"url":"https://event.on24.com/event/46/67/69/7/rt/1/images/playerbackground/abstract_background2.png","code":"images","codecategory":"playerbackgroun
2024-10-24 00:58:27 UTC	992	IN	Data Raw: 36 2f 36 37 2f 36 39 2f 37 2f 72 74 2f 31 2f 6c 6f 67 6f 2f 65 76 65 6e 74 2f 69 6d 61 67 65 74 72 65 6e 64 5f 62 61 6e 6e 65 72 73 6c 61 74 65 5f 63 6f 6c 6f 72 73 5f 73 6d 61 6c 6c 65 72 5f 6c 6f 67 6f 2e 70 6e 67 22 2c 22 63 6f 64 65 22 3a 22 6c 6f 67 6f 22 2c 22 63 6f 64 65 63 61 74 65 67 6f 72 79 22 3a 22 65 76 65 6e 74 22 2c 22 73 65 71 75 65 6e 63 65 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 34 38 30 2c 22 77 69 64 74 68 22 3a 36 34 30 2c 22 61 63 74 69 76 65 22 3a 22 59 22 2c 22 6e 61 6d 65 22 3a 22 69 6d 61 67 65 74 72 65 6e 64 5f 62 61 6e 6e 65 72 73 6c 61 74 65 5f 63 6f 6c 6f 72 73 5f 73 6d 61 6c 6c 65 72 5f 6c 6f 67 6f 2e 70 6e 67 22 2c 22 62 79 74 65 73 22 3a 35 38 30 37 32 38 2c 22 70 6f 70 75 70 22 3a 22 4e 22 2c 22 73 6f 75 72 63 65 66 69 6c Data Ascii: 6/67/69/7/rt/1/logo/event/imagetrend_bannerslate_colors_smaller_logo.png","code":"logo","codecategory":"event","sequence":0,"height":480,"width":640,"active":"Y","name":"imagetrend_bannerslate_colors_smaller_logo.png","bytes":580728,"popup":"N","sourcefil
2024-10-24 00:58:27 UTC	16384	IN	Data Raw: 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 34 38 30 2c 22 77 69 64 74 68 22 3a 36 34 30 2c 22 61 63 74 69 76 65 22 3a 22 59 22 2c 22 6e 61 6d 65 22 3a 22 62 61 6e 6e 65 72 2e 6a 70 67 22 2c 22 62 79 74 65 73 22 3a 39 36 33 30 32 2c 22 70 6f 70 75 70 22 3a 22 4e 22 2c 22 73 6f 75 72 63 65 66 69 6c 65 6e 61 6d 65 22 3a 22 62 61 6e 6e 65 72 2e 6a 70 67 22 7d 2c 7b 22 69 64 22 3a 33 32 31 39 31 32 34 31 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 2f 34 36 2f 36 37 2f 36 39 2f 37 2f 72 74 2f 31 2f 6c 6f 67 6f 2f 65 76 65 6e 74 2f 6f 6e 32 34 5f 72 75 6e 66 6f 72 6d 63 72 65 77 73 6c 6f 76 65 5f 68 65 61 64 65 72 2e 70 6e 67 22 2c 22 63 6f 64 65 22 3a 22 6c 6f 67 6f 22 2c 22 63 6f 64 65 63 61 74 65 Data Ascii: ":0,"height":480,"width":640,"active":"Y","name":"banner.jpg","bytes":96302,"popup":"N","sourcefilename":"banner.jpg"},{"id":321912411,"url":"https://event.on24.com/event/46/67/69/7/rt/1/logo/event/on24_runformcrewslove_header.png","code":"logo","codecate
2024-10-24 00:58:27 UTC	16384	IN	Data Raw: 3a 22 59 22 2c 22 6e 61 6d 65 22 3a 22 42 6c 6f 67 3a 20 45 4d 53 20 61 6e 64 20 50 75 62 6c 69 63 20 48 65 61 6c 74 68 20 2d 20 57 6f 72 6b 69 6e 67 20 54 6f 67 65 74 68 65 72 20 66 6f 72 20 43 6f 6d 6d 75 6e 69 74 79 20 48 65 61 6c 74 68 22 2c 22 62 79 74 65 73 22 3a 30 2c 22 70 6f 70 75 70 22 3a 22 59 22 7d 2c 7b 22 69 64 22 3a 33 33 30 31 35 35 31 35 38 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 76 69 65 77 2f 57 69 64 67 65 74 4c 69 62 2f 62 75 69 6c 64 73 2f 61 70 6f 6c 6c 6f 2f 69 6d 67 2f 77 65 62 73 69 74 65 2d 6e 65 77 2e 70 6e 67 22 2c 22 63 6f 64 65 22 3a 22 64 6f 63 75 6d 65 6e 74 73 22 2c 22 73 65 71 75 65 6e 63 65 22 3a 30 2c 22 61 63 74 69 76 65 22 3a 22 59 22 2c 22 62 79 74 65 73 22 3a 30 Data Ascii: :"Y","name":"Blog: EMS and Public Health - Working Together for Community Health","bytes":0,"popup":"Y"},{"id":330155158,"url":"https://event.on24.com/view/WidgetLib/builds/apollo/img/website-new.png","code":"documents","sequence":0,"active":"Y","bytes":0
2024-10-24 00:58:27 UTC	4572	IN	Data Raw: 22 2c 22 6f 6e 64 65 6d 61 6e 64 6f 66 66 73 65 74 22 3a 35 30 39 30 31 33 2c 22 6d 73 74 69 6d 65 73 74 61 6d 70 22 3a 22 22 7d 2c 7b 22 69 6e 64 65 78 22 3a 31 32 2c 22 69 64 22 3a 33 33 31 34 34 32 36 33 36 2c 22 69 73 61 63 74 69 76 65 22 3a 22 59 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 22 2c 22 6f 6e 64 65 6d 61 6e 64 6f 66 66 73 65 74 22 3a 35 32 33 30 31 35 2c 22 6d 73 74 69 6d 65 73 74 61 6d 70 22 3a 22 22 7d 2c 7b 22 69 6e 64 65 78 22 3a 31 33 2c 22 69 64 22 3a 33 33 31 34 34 32 36 33 37 2c 22 69 73 61 63 74 69 76 65 22 3a 22 59 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 22 2c 22 6f 6e 64 65 6d 61 6e 64 6f 66 66 73 65 74 22 3a 35 35 36 30 32 31 2c 22 6d 73 74 69 6d 65 73 74 61 6d 70 22 3a 22 22 7d 2c 7b 22 69 6e 64 65 78 22 3a 31 34 2c 22 Data Ascii: ","ondemandoffset":509013,"mstimestamp":""},{"index":12,"id":331442636,"isactive":"Y","timestamp":"","ondemandoffset":523015,"mstimestamp":""},{"index":13,"id":331442637,"isactive":"Y","timestamp":"","ondemandoffset":556021,"mstimestamp":""},{"index":14,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49922	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1971	OUT	GET /apic/utilApp/CdnAssignmentCachedServlet?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=fhvideo1&streamNames=true&mode=getdashxml&ctype=A&streamnames=false HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
2024-10-24 00:58:27 UTC	596	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 636 Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.017 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20006e0fa3c3aa8b54f59abfe874ec6b42751ab4231aa803d4a5105f1216bb1e9bb6084061e3d61130009e1dbeb916509b89bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	636	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 3f 3e 3c 66 63 73 20 63 64 6e 3d 27 74 72 75 65 27 3e 3c 63 6f 6e 74 65 6e 74 20 74 79 70 65 3d 27 6f 6e 64 65 6d 61 6e 64 27 20 6f 63 74 6f 63 68 61 6e 6e 65 6c 3d 27 27 20 66 61 69 6c 6f 76 65 72 74 6f 63 64 6e 3d 27 27 20 66 61 62 54 79 70 65 3d 27 27 20 73 69 6d 32 4c 69 76 65 3d 27 6e 27 20 69 73 56 50 42 45 76 65 6e 74 3d 27 79 27 20 69 73 4d 65 65 74 75 70 45 76 65 6e 74 3d 27 6e 27 20 69 73 48 69 76 65 45 6e 61 62 6c 65 64 3d 27 27 20 64 72 6d 53 75 70 70 6f 72 74 3d 27 6e 27 20 69 73 43 4d 41 46 3d 27 79 27 20 69 73 4c 69 76 65 54 72 61 6e 73 63 72 69 70 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 27 6e 27 20 63 6c 75 73 74 65 72 49 64 3d 27 31 27 3e 3c 73 65 72 76 65 72 20 74 79 70 65 3d 27 70 Data Ascii: <?xml version='1.0' ?><fcs cdn='true'><content type='ondemand' octochannel='' failovertocdn='' fabType='' sim2Live='n' isVPBEvent='y' isMeetupEvent='n' isHiveEnabled='' drmSupport='n' isCMAF='y' isLiveTranscriptionEnabled='n' clusterId='1'><server type='p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49924	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1947	OUT	GET /eventManager/includes/registrant.jsp?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=xml HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/xml content-type: application/xml sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
2024-10-24 00:58:27 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Length: 630 Content-Type: text/xml; charset=utf-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000d08d494c3537366d53a2d2de2085bad5f2f29d78286ab2fc3139acaa40f8e3b608a2ba754e113000512667a12820c373bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	630	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 65 76 65 6e 74 73 3e 0a 3c 65 76 65 6e 74 3e 0a 3c 69 64 3e 34 36 36 37 36 39 37 3c 2f 69 64 3e 0a 3c 72 65 67 69 73 74 72 61 74 69 6f 6e 3e 0a 3c 76 61 6c 69 64 75 73 65 72 3e 74 72 75 65 3c 2f 76 61 6c 69 64 75 73 65 72 3e 0a 0a 3c 66 69 72 73 74 6e 61 6d 65 3e 50 61 74 72 69 63 69 61 3c 2f 66 69 72 73 74 6e 61 6d 65 3e 0a 0a 3c 6c 61 73 74 6e 61 6d 65 3e 45 69 63 6b 68 6f 6c 74 3c 2f 6c 61 73 74 6e 61 6d 65 3e 0a 0a 3c 65 6d 61 69 6c 3e 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 40 63 69 74 79 6f 66 72 63 2e 75 73 3c 2f 65 6d 61 69 6c 3e 0a 0a 3c 63 6f 6d 70 61 6e 79 3e 52 61 6e 63 68 6f 20 43 75 63 61 6d 6f 6e 67 61 20 46 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><events><event><id>4667697</id><registration><validuser>true</validuser><firstname>Patricia</firstname><lastname>Eickholt</lastname><email>patricia.eickholt@cityofrc.us</email><company>Rancho Cucamonga Fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49923	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1784	OUT	GET /wcc/webapi/service/timestamp HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
2024-10-24 00:58:27 UTC	502	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Length: 13 Content-Type: text/plain Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000d906992d5b4a1194129f811c7bc8c57606cd58a643ed1a4be9717ecbcf4a422a085dfdcfb7113000e8fa6ddfc9f687c7bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	13	IN	Data Raw: 31 37 32 39 37 33 31 35 30 37 31 31 36 Data Ascii: 1729731507116

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49926	199.83.44.71	443	2500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1846	OUT	GET /apic/console-survey/api/v1/poll/style?eventId=4667697&key=7EE4C286CEE7D6B1AA187A1912AE17F5 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
2024-10-24 00:58:27 UTC	596	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 91 Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.003 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab200087bf9efb28f8c7c21b9497cfeb8ed7b356c75015d5451dfed2cecb966ab7246408ef480c50113000d379db8c64800fafbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	91	IN	Data Raw: 7b 71 75 65 73 74 69 6f 6e 54 65 78 74 43 6f 6c 6f 72 3a 20 27 23 33 33 33 33 33 33 27 2c 20 61 6e 73 77 65 72 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 20 27 23 45 32 46 30 46 46 27 2c 61 6e 73 77 65 72 54 65 78 74 43 6f 6c 6f 72 3a 20 27 23 30 45 35 34 42 43 27 7d Data Ascii: {questionTextColor: '#333333', answerBackgroundColor: '#E2F0FF',answerTextColor: '#0E54BC'}

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005827Z-16849878b785jsrm4477mv3ezn00000006wg00000000gw2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005827Z-16849878b78k8q5pxkgux3mbgg00000006wg00000000hd4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:27 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005827Z-16849878b7877w64p2ge9s25rg00000000hg000000002rbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005827Z-15b8d89586ffsjj9qb0gmb1stn00000002f000000000b07w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 00:58:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 00:58:27 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T005827Z-16849878b78dghrpt8v731n7r400000006tg00000000nvvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 00:58:27 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49935	199.83.44.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1874	OUT	POST /utilApp/webapi/generate/jwttoken HTTP/1.1 Host: event.on24.com Connection: keep-alive Content-Length: 126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://event.on24.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000d08d494c3537366d53a2d2de2085bad5f2f29d78286ab2fc3139acaa40f8e3b608a2ba754e113000512667a12820c373bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
2024-10-24 00:58:27 UTC	126	OUT	Data Raw: 7b 22 65 76 65 6e 74 49 64 22 3a 22 34 36 36 37 36 39 37 22 2c 22 66 69 72 73 74 4e 61 6d 65 22 3a 22 50 61 74 72 69 63 69 61 22 2c 22 6c 61 73 74 4e 61 6d 65 22 3a 22 45 69 63 6b 68 6f 6c 74 22 2c 22 65 6d 61 69 6c 22 3a 22 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 40 63 69 74 79 6f 66 72 63 2e 75 73 22 2c 22 61 70 70 4e 61 6d 65 22 3a 22 43 6f 6e 73 6f 6c 65 22 7d Data Ascii: {"eventId":"4667697","firstName":"Patricia","lastName":"Eickholt","email":"patricia.eickholt@cityofrc.us","appName":"Console"}
2024-10-24 00:58:28 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Length: 780 Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * X-ORACLE-DMS-RID: 0 Access-Control-Allow-Methods: * X-ORACLE-DMS-ECID: f92323b4-0ce7-4e98-81f2-98ed4cef43fe-000aafda Access-Control-Allow-Origin: https://event.on24.com Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000ba231d0a5b5ef4eac1fcc06dd36d4b2bb505d641ed12edd93a894461f3aca36e0821ec78051130007263772efb44569cbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:28 UTC	780	IN	Data Raw: 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 6a 62 32 35 7a 62 32 78 6c 62 47 39 6e 61 32 46 6d 61 32 46 68 63 47 6c 6e 59 58 52 6c 64 32 46 35 4c 54 46 6f 4d 57 56 31 63 44 4d 32 61 7a 55 7a 4d 6e 45 75 59 58 42 70 5a 32 46 30 5a 58 64 68 65 53 35 7a 64 6d 4d 74 63 48 4a 71 4c 58 42 79 62 32 51 74 61 32 46 6d 61 32 45 74 63 48 4a 76 5a 48 56 6a 5a 58 49 75 59 32 78 76 64 57 51 75 5a 32 39 76 5a 79 49 73 49 6e 4e 31 59 69 49 36 49 6b 4e 76 62 6e 4e 76 62 47 55 69 4c 43 4a 70 63 33 4d 69 4f 69 4a 6a 62 32 35 7a 62 32 78 6c 62 47 39 6e 61 32 46 6d 61 32 46 7a 5a 58 4a 32 61 57 4e 6c 51 48 4e 32 59 79 31 77 63 6d 6f 74 63 48 4a 76 5a 43 31 72 59 57 5a 72 59 53 Data Ascii: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJjb25zb2xlbG9na2Fma2FhcGlnYXRld2F5LTFoMWV1cDM2azUzMnEuYXBpZ2F0ZXdheS5zdmMtcHJqLXByb2Qta2Fma2EtcHJvZHVjZXIuY2xvdWQuZ29vZyIsInN1YiI6IkNvbnNvbGUiLCJpc3MiOiJjb25zb2xlbG9na2Fma2FzZXJ2aWNlQHN2Yy1wcmotcHJvZC1rYWZrYS

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49934	199.83.44.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1882	OUT	POST /utilApp/webapi/generate/generic/jwttoken HTTP/1.1 Host: event.on24.com Connection: keep-alive Content-Length: 130 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://event.on24.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000d08d494c3537366d53a2d2de2085bad5f2f29d78286ab2fc3139acaa40f8e3b608a2ba754e113000512667a12820c373bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
2024-10-24 00:58:27 UTC	130	OUT	Data Raw: 7b 22 65 76 65 6e 74 49 64 22 3a 22 34 36 36 37 36 39 37 22 2c 22 66 69 72 73 74 4e 61 6d 65 22 3a 22 50 61 74 72 69 63 69 61 22 2c 22 6c 61 73 74 4e 61 6d 65 22 3a 22 45 69 63 6b 68 6f 6c 74 22 2c 22 65 6d 61 69 6c 22 3a 22 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 40 63 69 74 79 6f 66 72 63 2e 75 73 22 2c 22 61 70 70 4e 61 6d 65 22 3a 22 75 74 69 6c 73 65 72 76 69 63 65 22 7d Data Ascii: {"eventId":"4667697","firstName":"Patricia","lastName":"Eickholt","email":"patricia.eickholt@cityofrc.us","appName":"utilservice"}
2024-10-24 00:58:27 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Length: 297 Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * X-ORACLE-DMS-RID: 0 Access-Control-Allow-Methods: * X-ORACLE-DMS-ECID: f92323b4-0ce7-4e98-81f2-98ed4cef43fe-000aafdb Access-Control-Allow-Origin: https://event.on24.com Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab200076a93ecb2edb24c508592d709d1c1617101c892384dc0c6007f4ee5e59bbb76108a1b34f2a11300014c32080630b678fbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:27 UTC	297	IN	Data Raw: 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 31 64 47 6c 73 63 32 56 79 64 6d 6c 6a 5a 53 49 73 49 6d 56 32 5a 57 35 30 53 57 51 69 4f 6a 51 32 4e 6a 63 32 4f 54 63 73 49 6e 42 79 5a 58 4e 6c 62 6e 52 6c 63 6b 6c 6b 49 6a 6f 30 4e 6a 59 33 4e 6a 6b 33 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 6a 6b 33 4e 6a 63 31 4d 44 63 73 49 6d 6c 68 64 43 49 36 4d 54 63 79 4f 54 63 7a 4d 54 55 77 4e 79 77 69 64 58 4e 6c 63 69 49 36 49 6b 56 70 59 32 74 6f 62 32 78 30 49 46 42 68 64 48 4a 70 59 32 6c 68 49 69 77 69 5a 57 31 68 61 57 77 69 4f 69 4a 77 59 58 52 79 61 57 4e 70 59 53 35 6c 61 57 4e 72 61 47 39 73 64 45 42 6a 61 58 52 35 62 32 5a 79 59 79 35 31 63 79 4a 39 2e 72 Data Ascii: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJ1dGlsc2VydmljZSIsImV2ZW50SWQiOjQ2Njc2OTcsInByZXNlbnRlcklkIjo0NjY3Njk3LCJleHAiOjE3Mjk3Njc1MDcsImlhdCI6MTcyOTczMTUwNywidXNlciI6IkVpY2tob2x0IFBhdHJpY2lhIiwiZW1haWwiOiJwYXRyaWNpYS5laWNraG9sdEBjaXR5b2ZyYy51cyJ9.r

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49936	199.83.44.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 00:58:27 UTC	1882	OUT	POST /utilApp/webapi/generate/generic/jwttoken HTTP/1.1 Host: event.on24.com Connection: keep-alive Content-Length: 129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://event.on24.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000d08d494c3537366d53a2d2de2085bad5f2f29d78286ab2fc3139acaa40f8e3b608a2ba754e113000512667a12820c373bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
2024-10-24 00:58:27 UTC	129	OUT	Data Raw: 7b 22 65 76 65 6e 74 49 64 22 3a 22 34 36 36 37 36 39 37 22 2c 22 66 69 72 73 74 4e 61 6d 65 22 3a 22 50 61 74 72 69 63 69 61 22 2c 22 6c 61 73 74 4e 61 6d 65 22 3a 22 45 69 63 6b 68 6f 6c 74 22 2c 22 65 6d 61 69 6c 22 3a 22 70 61 74 72 69 63 69 61 2e 65 69 63 6b 68 6f 6c 74 40 63 69 74 79 6f 66 72 63 2e 75 73 22 2c 22 61 70 70 4e 61 6d 65 22 3a 22 75 74 69 6c 69 74 79 41 70 70 22 7d Data Ascii: {"eventId":"4667697","firstName":"Patricia","lastName":"Eickholt","email":"patricia.eickholt@cityofrc.us","appName":"utilityApp"}
2024-10-24 00:58:28 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 00:58:27 GMT Content-Length: 296 Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * X-ORACLE-DMS-RID: 0 Access-Control-Allow-Methods: * X-ORACLE-DMS-ECID: f92323b4-0ce7-4e98-81f2-98ed4cef43fe-000aafdc Access-Control-Allow-Origin: https://event.on24.com Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000bc34f4ec0db6c5594b06c3a76121edf96e3f1b21b0ab626bed54efbef52287ba08401e6122113000740fea47941c4f57bf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4; Path=/; SameSite=None; Secure
2024-10-24 00:58:28 UTC	296	IN	Data Raw: 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 31 64 47 6c 73 61 58 52 35 51 58 42 77 49 69 77 69 5a 58 5a 6c 62 6e 52 4a 5a 43 49 36 4e 44 59 32 4e 7a 59 35 4e 79 77 69 63 48 4a 6c 63 32 56 75 64 47 56 79 53 57 51 69 4f 6a 51 32 4e 6a 63 32 4f 54 63 73 49 6d 56 34 63 43 49 36 4d 54 63 79 4f 54 63 32 4e 7a 55 77 4e 79 77 69 61 57 46 30 49 6a 6f 78 4e 7a 49 35 4e 7a 4d 78 4e 54 41 33 4c 43 4a 31 63 32 56 79 49 6a 6f 69 52 57 6c 6a 61 32 68 76 62 48 51 67 55 47 46 30 63 6d 6c 6a 61 57 45 69 4c 43 4a 6c 62 57 46 70 62 43 49 36 49 6e 42 68 64 48 4a 70 59 32 6c 68 4c 6d 56 70 59 32 74 6f 62 32 78 30 51 47 4e 70 64 48 6c 76 5a 6e 4a 6a 4c 6e 56 7a 49 6e 30 2e 54 43 Data Ascii: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJ1dGlsaXR5QXBwIiwiZXZlbnRJZCI6NDY2NzY5NywicHJlc2VudGVySWQiOjQ2Njc2OTcsImV4cCI6MTcyOTc2NzUwNywiaWF0IjoxNzI5NzMxNTA3LCJ1c2VyIjoiRWlja2hvbHQgUGF0cmljaWEiLCJlbWFpbCI6InBhdHJpY2lhLmVpY2tob2x0QGNpdHlvZnJjLnVzIn0.TC

Target ID:	0
Start time:	20:57:03
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:57:08
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,8103378915802617690,6396049276166915808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:57:11
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No favicon
Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/eventRegistrationServlet	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch	HTTP Parser: No favicon

Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No <meta name="author".. found
Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No <meta name="author".. found

Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No <meta name="copyright".. found
Source: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiGLsUMgvu49HZQe-2Bzh6sjt9ybZ9vVl9bgQACfpZ9kpsBAmtsV4HSvSu9lftga7l7gV5lWhUfn2hVFfAcv3XKyi59wIkSDgg8UQpdQiuRhmwwC-2FmjJ5JepRiZZAM8yvCWag-3DHYji_viv87QBHgf3cZPYRGDRhIXa6hoPcia8Vp9LLw3LpuBGLsuHi99W62OlSEG2wms8Lef0n3BdPyo2jMn0DcSaAncJDJ-2FUJYKiMQjVdIyYXME3PwZkaUAhY3w8ZdadKXO-2F4Q7Yn-2B4FWCfA2thlySPyh9zwKw16Uk3NmFfkNhdG0Fgw0Y0UzbQ-2Fv57irikneHNB2hswIPVHMknU-2FBxQW3h42Yyu5Jym85X4w1-2FHRy88WRnXz4HydJUMG-2Fbkypo-2FkWsMGGZPdghwzHlJF3HgUlpO-2FBGEMWgVrkKaihwaw00hwGDvnuSdWqDG0lYALa0yuWqyF6XQpmjojEIkqUqV3S0qUUg-3D-3D HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.us HTTP/1.1Host: event.on24.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=registration&mode=login&random=0.4621875418947743 HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373 HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/EventServlet?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&random=0.9347843741463768&filter=json HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f260f486522f98d1504967e6b5545ad2889f2feb024930ec2cc6dafb4bff45208bf3d78cc113000a291ea1c42cc15f6e01247ee7a1fe1cf333fa5d6dfc2086e8b3d9c978f57fc478206a92500b0043b9cb002b75fe23434
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=lobby&mode=login&random=0.2069918196253373 HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20000752aa2c4b10dbf5f9a88514b166d1718ab9ec0e60eec9cc306b23de78870cec081f7dabd21130002c3826e0ee0f5dcb67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&code=registration&mode=login&random=0.4621875418947743 HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f9285e0cf40dca7191982a2053c69813d6bbd437a79da434056e9beb36d754a084cc34bc611300016aeb4d41514ee3f67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
Source: global traffic	HTTP traffic detected: GET /apic/eventRegistration/EventServlet?eventid=4667697&sessionid=1&key=7EE4C286CEE7D6B1AA187A1912AE17F5&random=0.9347843741463768&filter=json HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab20004f9285e0cf40dca7191982a2053c69813d6bbd437a79da434056e9beb36d754a084cc34bc611300016aeb4d41514ee3f67ace0328264f41050de0adb88b670052a4d478c327e946a519e07d9d11fe8e87f5b84c9a674d113
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://event.on24.com/wcc/r/4667697/7EE4C286CEE7D6B1AA187A1912AE17F5?mode=login&email=patricia.eickholt@cityofrc.usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; TS0af49cbe027=082972b052ab2000170b229c28df5d74274fbe8c0954478498345e2789769459b2e55cb71250c88508c61e5a5c1130004f44ae38621b1a4472de33f0e265bf38eb38694fe8051fcc7940be54669e146b372d0199cf72427014050c95f05007d4
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; TS0af49cbe027=082972b052ab2000b023f8260b9c7c16fe9dc8dc824c2d6ee41b686b0f4a9e89a73c3e93831d2bc708da26d4d5113000f534b914deea3beb65cce20ce7692486e4ec4c3eede993d3d660a230ac0d50773183622764da13f6fd594e193ccec84b
Source: global traffic	HTTP traffic detected: GET /utilApp/MediaMetricServlet?mode=launch&mediametricid=6572014&eventid=4667697&eventuserid=705147414&usercd=705147414&mediametricsubid=1&mediaurl=https%3A%2F%2Fevent.on24.com%2FeventRegistration%2Fconsole%2Fapollox%2FmainEvent%3F%26eventid%3D4667697%26sessionid%3D1%26username%3D%26partnerref%3D%26format%3Dfhvideo1%26mobile%3D%26flashsupportedmobiledevice%3D%26helpcenter%3D%26key%3D7EE4C286CEE7D6B1AA187A1912AE17F5%26newConsole%3Dtrue%26nxChe%3Dtrue%26newTabCon%3Dtrue%26consoleEarEventConsole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D705147414%26contenttype%3DA&target=mediaurl&key=7EE4C286CEE7D6B1AA187A1912AE17F5 HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://event.on24.com/eventRegistration/eventRegistrationServletAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; TS0af49cbe027=082972b052ab2000e1f9d8a117a7b036b58f0d36f76f4521cc7de24415025e8d848fca97bc9c03e50820656ca6113000339aa95ce57602e10d1ba43395c437d64b358c153b0c53636135304ca88b84f5c28b6936be78576ce904c13f843aed37
Source: global traffic	HTTP traffic detected: GET /eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launch HTTP/1.1Host: event.on24.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://event.on24.com/eventRegistration/eventRegistrationServletAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20004ac7c84ebb8f96697ae5a21492346f1a4b60c5871b9ac72b1f81d74b5edc9dbc085e761e30113000323402e89e2625b609a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda
Source: global traffic	HTTP traffic detected: GET /view/react-console/build/ HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000b364a9415eaa9e39e00baddf65792d2155ac33043dff6ddde67c5b2c958888b408da494a5e1130008f295f201ecd9edb09a23c737c0e2ed7a4f45d4dd80fbac6e5c8c1a526c7ebf7147cf84d22511991b407253a6b834cda
Source: global traffic	HTTP traffic detected: GET /view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
Source: global traffic	HTTP traffic detected: GET /view/react-console/build/24.4.1/const/index.js HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
Source: global traffic	HTTP traffic detected: GET /view/react-console/build/ HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20005dd8e947e14984a8dc2bd6a020a467f075c0e484be4de78ab239e838bd72aefb088019d7ee113000576c432b84ae9c21888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
Source: global traffic	HTTP traffic detected: GET /view/react-console/build/24.4.1/const/index.js HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab20008881e0af1fa5a16d3f2444be46c4d891b1d72f1a955359255899dacee1479e840815542fe4113000da54bb5325f5c67a888ed49227ea18af456114e2439646319e3757ac122ad8cae125b6f1a91abdcf03a98bbbf02a6bb3
Source: global traffic	HTTP traffic detected: GET /view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000181d4b22e802731e24811536a349a3e1d85cb83c8585dbad19d126c3f5990a6308b3cb904b1130007781b525b843480b2b1528440894c9af65d405da3d891c90543725b74533419bd98be56eaecef6a852f18b92cdf99ce4
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apic/utilApp/EventConsoleCachedServlet?eventId=4667697&eventSessionId=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&useCache=false&displayProfile=player&random=1729731505719 HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
Source: global traffic	HTTP traffic detected: GET /apic/utilApp/CdnAssignmentCachedServlet?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=fhvideo1&streamNames=true&mode=getdashxml&ctype=A&streamnames=false HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
Source: global traffic	HTTP traffic detected: GET /eventManager/includes/registrant.jsp?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=xml HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/xmlcontent-type: application/xmlsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
Source: global traffic	HTTP traffic detected: GET /wcc/webapi/service/timestamp HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
Source: global traffic	HTTP traffic detected: GET /apic/console-survey/api/v1/poll/style?eventId=4667697&key=7EE4C286CEE7D6B1AA187A1912AE17F5 HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000e7e5a4f50bf7e3e3afc6b33b7f633e8d78cc32ed7ed824567952d5663b703dcc08d79f2a531130002febc6be615332d1f9aa0d738e6669bedcc24711618b32426bfb14427326730ae5ca9285801ae26d0d76a73aa69354e2
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /eventManager/includes/registrant.jsp?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=xml HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab200087bf9efb28f8c7c21b9497cfeb8ed7b356c75015d5451dfed2cecb966ab7246408ef480c50113000d379db8c64800fafbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /apic/utilApp/CdnAssignmentCachedServlet?eventid=4667697&sessionid=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&format=fhvideo1&streamNames=true&mode=getdashxml&ctype=A&streamnames=false HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab200087bf9efb28f8c7c21b9497cfeb8ed7b356c75015d5451dfed2cecb966ab7246408ef480c50113000d379db8c64800fafbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /wcc/webapi/service/timestamp HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000bb246b79e8c8b9668a295eecbebab2d013454de4ea6912f31cf22f3cb6a19b5808f7e00f5811300079a399211cc175ccbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /apic/console-survey/api/v1/poll/style?eventId=4667697&key=7EE4C286CEE7D6B1AA187A1912AE17F5 HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000bb246b79e8c8b9668a295eecbebab2d013454de4ea6912f31cf22f3cb6a19b5808f7e00f5811300079a399211cc175ccbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apic/utilApp/EventConsoleCachedServlet?eventId=4667697&eventSessionId=1&eventuserid=705147414&key=7EE4C286CEE7D6B1AA187A1912AE17F5&contentType=A&useCache=false&displayProfile=player&random=1729731505719 HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000bb246b79e8c8b9668a295eecbebab2d013454de4ea6912f31cf22f3cb6a19b5808f7e00f5811300079a399211cc175ccbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /view/react-console/build/24.4.1/static/css/7.7b0168e2.chunk.css HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4667697&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=7EE4C286CEE7D6B1AA187A1912AE17F5&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=705147414&contenttype=A&mediametricsessionid=612798560&mediametricid=6572014&usercd=705147414&mode=launchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NmJhZjRmNmMtN2YyNS00MGM5LTk3NjAtNzg4NzlkNGI2NTZk; sa-4667697=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons6_prd_wl_LNX=!4mK1JZlu+nJrgiuntfwALduEGSG61QYVK3YjqlfTkiB4PkGSfhlq1h/bGQpm0pR0FARlWMvqWYVt5Q==; ON24_Pool=cons6_prd_wl_LNX; BIGipServereventprd_apache=!K2+C1vGQEA+PCvQeSVii2HqB/dyrq5zg3MO7tCaKewXtdPpG7qTdgS5ikrB9liNNmQPw+se5TGLUts56HKN1DExl1lPwpOXFG6VWVnls+1di8+Rkzpf4TDRRTy/o3zliOJtY41RSz7SnR1vWk4groIqzOpSv2zc=; event4667697=MHFoFzr+sZXm8EfIOshvfROPLJOufZpT2/K8cK74mHs=; mediametricid6572014=612798560; sessionpulse6572014=612798560; TS0af49cbe027=082972b052ab2000c508442486c7d9f5898968b7857157577640404fe59a6c08961c4c6b13df5df60862aee02111300067bc743090dda28dbf04e81ac570e097dcd973d57dd782ba1ea45ed5707ef64dfefd990ca713f6da050cb4665e04c2d4
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: email.sg.on24event.com
Source: global traffic	DNS traffic detected: DNS query: event.on24.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: wcc.on24.com
Source: global traffic	DNS traffic detected: DNS query: vids-chat.on24.com
Source: global traffic	DNS traffic detected: DNS query: analytics-ingress-global.bitmovin.com
Source: global traffic	DNS traffic detected: DNS query: licensing.bitmovin.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76