Edit tour

Windows Analysis Report
https://google.pt/amp/web.authe.net

Overview

General Information

Sample URL:	https://google.pt/amp/web.authe.net
Analysis ID:	1562444
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2260,i,7126620117422468491,13946143623704063901,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://google.pt/amp/web.authe.net" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious URL

Source: Email	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://web.authe.net
Source: Email	Joe Sandbox AI: AI detected Typosquatting in URL: https://web.authe.net

Source: https://web.authe.net/	HTTP Parser: Number of links: 0
Source: https://web.authe.net/#services	HTTP Parser: Number of links: 0

Source: https://web.authe.net/	HTTP Parser: Title: Home - Brand does not match URL
Source: https://web.authe.net/#services	HTTP Parser: Title: Home - Brand does not match URL

Source: https://web.authe.net/	HTTP Parser: Invalid link: Privacy Policy
Source: https://web.authe.net/	HTTP Parser: Invalid link: Terms of Use
Source: https://web.authe.net/	HTTP Parser: Invalid link: Privacy Policy
Source: https://web.authe.net/	HTTP Parser: Invalid link: Terms of Use
Source: https://web.authe.net/#services	HTTP Parser: Invalid link: Privacy Policy
Source: https://web.authe.net/#services	HTTP Parser: Invalid link: Terms of Use

Source: https://web.authe.net/	HTTP Parser: No favicon
Source: https://web.authe.net/	HTTP Parser: No favicon
Source: https://web.authe.net/#services	HTTP Parser: No favicon

Source: https://web.authe.net/	HTTP Parser: No <meta name="author".. found
Source: https://web.authe.net/	HTTP Parser: No <meta name="author".. found
Source: https://web.authe.net/#services	HTTP Parser: No <meta name="author".. found

Source: https://web.authe.net/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.authe.net/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.authe.net/#services	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.9:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.9:49913 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.pt to http://web.authe.net

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /amp/web.authe.net HTTP/1.1Host: google.ptConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /amp/web.authe.net HTTP/1.1Host: www.google.ptConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=g4AMVdXEZm6Noem&MD=wwDXwtMO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: web.authe.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/fonts/font-awesome.min.css HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/header-bg.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/1-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/2-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/3-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/4-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/5-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/1-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/4-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/js/agency.js HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/3-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/2-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/5-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/header-bg.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/6-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/1.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/2.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/3.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/4.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/js/agency.js HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/1.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/about/1.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/2.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/6-thumbnail.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/3.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/creative-market.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/designmodo.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/2.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/3.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/envato.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/about/4.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/themeforest.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/1.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/creative-market.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/1-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/2-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/designmodo.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/envato.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/3-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/2.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/team/3.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/4-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/5-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/6-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/clients/themeforest.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/map-image.png HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/2-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.authe.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.authe.net/assets/fonts/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/1-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/3-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/4-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/5-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/img/portfolio/6-full.jpg HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: web.authe.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.authe.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: web.authe.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=g4AMVdXEZm6Noem&MD=wwDXwtMO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: web.authe.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: web.authe.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: google.pt
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.pt
Source: global traffic	DNS traffic detected: DNS query: web.authe.net

Source: chromecache_92.3.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_92.3.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_86.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Kaushan
Source: chromecache_86.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:400
Source: chromecache_109.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/kaushanscript/v18/vm8vdRfvXFLG3OLnsO15WYS5DG72wNJHMw.woff2)
Source: chromecache_109.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/kaushanscript/v18/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2)
Source: chromecache_119.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_119.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_119.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_119.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_119.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_130.3.dr, chromecache_86.3.dr, chromecache_111.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_130.3.dr, chromecache_86.3.dr, chromecache_111.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_130.3.dr, chromecache_111.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.9:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.9:49913 version: TLS 1.2

Source: classification engine

Classification label: sus22.win@17/102@14/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2260,i,7126620117422468491,13946143623704063901,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://google.pt/amp/web.authe.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2260,i,7126620117422468491,13946143623704063901,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://google.pt/amp/web.authe.net	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://web.authe.net/assets/img/portfolio/3-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/4-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/6-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/bootstrap/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/team/2.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/6-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/clients/themeforest.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/5-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/about/2.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/fonts/fontawesome-webfont.woff2?v=4.7.0	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/clients/designmodo.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/team/1.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/clients/creative-market.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/map-image.png	0%	Avira URL Cloud	safe
http://web.authe.net/	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/1-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/about/1.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/1-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/header-bg.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/3-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/5-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/about/4.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/about/3.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/4-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/fonts/font-awesome.min.css	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/2-full.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/favicon.ico	0%	Avira URL Cloud	safe
https://web.authe.net/assets/bootstrap/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/portfolio/2-thumbnail.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/clients/envato.jpg	0%	Avira URL Cloud	safe
https://web.authe.net/assets/js/agency.js	0%	Avira URL Cloud	safe
https://web.authe.net/assets/img/team/3.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
web.authe.net	24.199.99.22	true	true	unknown
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
google.pt	172.217.17.67	true	false	high
www.google.pt	172.217.19.195	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://google.pt/amp/web.authe.net	false		high
https://web.authe.net/assets/img/portfolio/6-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/3-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/6-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/clients/themeforest.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/fonts/fontawesome-webfont.woff2?v=4.7.0	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/4-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/about/2.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/bootstrap/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/team/2.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/	false		unknown
https://web.authe.net/assets/img/portfolio/5-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/map-image.png	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/3-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/clients/creative-market.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/about/1.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.pt/amp/web.authe.net	false		high
https://web.authe.net/assets/img/team/1.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/1-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
http://web.authe.net/	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/clients/designmodo.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/header-bg.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/1-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/5-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/about/4.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/about/3.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/fonts/font-awesome.min.css	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/2-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/bootstrap/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://web.authe.net/favicon.ico	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/4-full.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/portfolio/2-thumbnail.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/img/clients/envato.jpg	false	Avira URL Cloud: safe	unknown
https://web.authe.net/assets/js/agency.js	false	Avira URL Cloud: safe	unknown
https://web.authe.net/#services	false		unknown
https://web.authe.net/assets/img/team/3.jpg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_92.3.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_130.3.dr, chromecache_86.3.dr, chromecache_111.3.dr	false	high
https://getbootstrap.com/)	chromecache_130.3.dr, chromecache_86.3.dr, chromecache_111.3.dr	false	high
http://fontawesome.io/license	chromecache_92.3.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_130.3.dr, chromecache_111.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.17.67	google.pt	United States	15169	GOOGLEUS	false
24.199.99.22	web.authe.net	United States	12271	TWC-12271-NYCUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.19.195	www.google.pt	United States	15169	GOOGLEUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562444
Start date and time:	2024-11-25 15:34:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://google.pt/amp/web.authe.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.win@17/102@14/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 64.233.165.84, 172.217.17.46, 34.104.35.123, 192.229.221.95, 172.217.19.170, 216.58.208.227, 172.217.19.234, 142.250.181.10, 172.217.21.42, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.17.74, 172.217.19.202, 216.58.208.234, 172.217.19.10, 142.250.181.74, 172.217.17.35
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://google.pt/amp/web.authe.net

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: https://google.pt Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://google.pt
URL: https://web.authe.net/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "TELL ME MORE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://web.authe.net Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://web.authe.net
URL: https://web.authe.net/ Model: Joe Sandbox AI	{ "brands": [ "Brand" ] }

URL: https://web.authe.net/#services Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://web.authe.net/#services Model: Joe Sandbox AI	{ "brands": [ "Brand" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:35:02 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9682863976943326
Encrypted:	false
SSDEEP:	48:8GdqkTdGMPHMWidAKZdA1P4ehwiZUklqehNy+3:8IcMrOqy
MD5:	E52EF4E1CD19FA64DEAD0167AB96CDD9
SHA1:	76E2017A51619FDF25D5C43E316F778F24303CB0
SHA-256:	70DB8442DD39F95803E8869D52ECD1B23FB2414224C90937811C02BFD69BF84D
SHA-512:	EAB24B0A9FEB6F01AE2611C23418F57B20CB896F6B94FC8D15CFB4E8A09FCFC89F067E0C39324205F1F10442FA619721B7A50477401992EBA7DCDB69703A6546
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......66G?....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VyYbt...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:35:02 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9843857120854893
Encrypted:	false
SSDEEP:	48:8XdqkTdGMPHMWidAKZdA1+4eh/iZUkAQkqehay+2:8TcMaF9QDy
MD5:	2DC86BF3C4487D3D4DF55187322C9E76
SHA1:	F87C2D1680A4FF704C5AEC3B0D0B214CF9CD8246
SHA-256:	050753CFD7657999C780A1E6161FE81B95D71C770B6F881A7F186067C3288639
SHA-512:	CB5CE92FA8EAA149D860A1BB49D30B4A20DE5C46E36A5ACB4C6D29798EE1FD9803E1363C467A28E5B23A29E93DC7BFD7E42B963E96EB65535A81B7D9C834A285
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......)6G?....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VyYbt...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	3.9970452912514944
Encrypted:	false
SSDEEP:	48:8sdqkTdGVHMWidAKZdA1404eh7sFiZUkmgqeh7sQy+BX:8uc5Inuy
MD5:	9CD533EDC561749BF4F01BA0F4FA7D02
SHA1:	18BC60CEB9F5F1CDE881692FE682070ACC10680A
SHA-256:	9A8E76FC266E9EFB9E4AB889C64D9198FD638A1D95385BCBFB21E5C88428BEBC
SHA-512:	D32C380FBFF72A9274F78F157AB3B9D2852F73507BE0152E22F11B737F26BBE7EAE2A7A3D595D61D22DA629C66C05F9CFD3D9CAD679189261B37BD20359E5A7A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:35:02 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983158383730971
Encrypted:	false
SSDEEP:	48:8medqkTdGMPHMWidAKZdA1p4ehDiZUkwqehWy+R:8mgcMN5Yy
MD5:	990ACF1B8E7D30071DCA952EF3DFEE0E
SHA1:	52581FCACD10BCECE4BE0A2D5763FB27C9945331
SHA-256:	631A5EE2ABC771A430C24F2FDBA15707F519D0201DD141D6CC2789848F6B2070
SHA-512:	2ED58C4A59B8BED1D5AD1A1D8724756048CE407009A0CBCF238AE829DB7437080A0068C66106D6F1CF726366B469D84DB32E98BA2C82B99AD49EAD4D6723F257
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..... "6G?....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VyYbt...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:35:02 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.971340504717829
Encrypted:	false
SSDEEP:	48:8WXdqkTdGMPHMWidAKZdA1X4ehBiZUk1W1qehky+C:8WTcMzb9Ey
MD5:	B2AEA30CC5E4B189C49C38CF87AD8ADE
SHA1:	A0FE81A58D556A41601E3CA16E47FAA291A3A56A
SHA-256:	7548174BB0E99B10EFA6D178D79440F9BF8CFF654A2C6486F35390BE0ACD01E7
SHA-512:	023D0BFBA2DCF48AC1CACA25DF26C70D9C2659B9EAD0D83614D08DAC91178A501DCB930F7A251E120611602C44748015E95B532E3A4E5C44F7C08CF541FA42AC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....C./6G?....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VyYbt...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:35:02 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.978624172350887
Encrypted:	false
SSDEEP:	48:89dqkTdGMPHMWidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbuy+yT+:85cMcTcJTbxWOvTbuy7T
MD5:	DE82E84D05791C53B2F2E31A8C12543E
SHA1:	18F4BC7104BBE0932941C9E3C4807612B531038C
SHA-256:	02F19404915A8AB8381A1C118B79238DC16D193648047106C4D4E180568A6832
SHA-512:	96B4A5A22F39C6DAE22A603F719AF361A92146B804B4299F854F9F5CFFBE9C44F0E9CF402B3E64607CAF997DBD41F7E94805754EA8D13ECDE60B48B9C013A291
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l.6G?....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IyY[t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY\t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VyY\t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VyY\t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VyYbt...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............K.L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	4.612922630249759
Encrypted:	false
SSDEEP:	24:2c0K+Ew7YjjWX7oHXuF9NCTYb+T2mRjAVq/TQLr12CJq9/L2cuRcUCW2V:70N1X7cXuj0TA0l46TQV2C02ckcUCt
MD5:	ACF54D2FF1689DDC6EAD1711BE64020A
SHA1:	DA009EDA42A5EA07323FAB9F73EEDDC8A55A6F2B
SHA-256:	79982B2D03CA9CCCFD31E62472DD794436CA1A3106C97F5F01491F2E6D36C094
SHA-512:	2A4805BF9F4EAD49FC68EF89A5320E878ADF8ED85AE0B983D9259994A1B34F3199CAA40C89C18D12509D230A3C09EE20B8214DCA58D11CD3053DD40E71D5730F
Malicious:	false
Reputation:	low
Preview:	(function() {. "use strict"; // Start of use strict.. var mainNav = document.querySelector('#mainNav');.. if (mainNav) {.. var navbarCollapse = mainNav.querySelector('.navbar-collapse');. . if (navbarCollapse) {. . var collapse = new bootstrap.Collapse(navbarCollapse, {. toggle: false. });. . var navbarItems = navbarCollapse.querySelectorAll('a');. . // Closes responsive menu when a scroll trigger link is clicked. for (var item of navbarItems) {. item.addEventListener('click', function (event) {. collapse.hide();. });. }. }.. // Collapse Navbar. var collapseNavbar = function() {.. var scrollTop = (window.pageYOffset !== undefined) ? window.pageYOffset : (document.documentElement \|\| document.body.parentNode \|\| document.body).scrollTop;.. if (scrollTop > 100) {. mainNav.classList.add("navbar-shrink");. } else {. mainNav.classList.remove("navbar-shrink");. }.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x1250, components 3
Category:	dropped
Size (bytes):	148216
Entropy (8bit):	7.951279706859046
Encrypted:	false
SSDEEP:	3072:1/vnPe+02CpZqgbcG56uKRq2qXnoFkmj0SlFf4/V8SWoMktPOXperiW:1/vPe+FqZq2cCo2Xoq8lpaVrRvt0pez
MD5:	A157AA4CAEECA73122FE93EF43ED8C56
SHA1:	2E25ADAB6D402B50565F2172DA54218AEE822CBF
SHA-256:	09BFD4BA5F9828E4073D4D244B423659541816F40476F4AD69B6A9F69D08ECA0
SHA-512:	5B9CCE1C54F52BB5997AC757259A5C8DB804F8E9CDB78628A99CCBD79B26A83FCE7C5F0CFACFC9F1FC7D92E875BDA2382188E3F3BDE37DA80B78DAAB34576021
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........l................................................................................3...$.$B BD$.".DDC.. 1..1..PB..T$.DC..C...1..TDP.Q.S..T...".. ..."#&........"!".2h..@.H...H...........@$.B.$@&D..6. @BDD.h..P$. @@DG2!"!"..."!"". .....V. ".4..LB.5DAQ...D T.h......H@..H........... "."!#@@ &D@@... .DDB.DDDB. D$. DDBd@....D.......""4d....*". ""9............"."...@H....@...! ....J.".".".@.$.h..H.....).@H..D.....D....H.@..@H.....@..AH....". ..".#"B.@$.D.$..D D..D@..................""..."".H......$.&D......(@......................!....@D&HD......H....D.......j..F)"!.."."D..B. @h.H....................&.HH@H..H........U........... 4.&j5........"!.!..!.".. 4.B.$......!.@.DBD .D.$@DD%.D...D j...`.c5.... ...!"."$B@..H....@.........D.......!.D$D0......! .4.DDDD..DD DD..B.@".@ $..$Bd...............4B.DB@ BD..R.. j ........f......U.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34728, version 1.0
Category:	downloaded
Size (bytes):	34728
Entropy (8bit):	7.993297048473188
Encrypted:	true
SSDEEP:	768:7kwcWiN8ncX3sbf/J3+r20biKHvwvvaOJMYfDXjLdEG0KGU6QpC:yfN6cnifxUbiKUvLJMYPLdoUZpC
MD5:	9D8C616F488D1CBB3C235AE2A1679FB1
SHA1:	C56B4E0A9B2FC7973EB939BCB244F200F9508CFC
SHA-256:	CCE6E5A4CCC41FD81D52D0802348827F4828BF7FC6B78E24002ED02A690D21B5
SHA-512:	936F40FC5903BE2A5E576BECE6E02E8CAF81BFA0CB3D4DD104A37B546327E24FE5C692C62AEF4347D1FDA205880BBCDEA18B76A56F58FF0330A2DDEA8F9154C2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/kaushanscript/v18/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2
Preview:	wOF2...................I...........................D....`..p...e...........H..6.$.... ..H..U.K[.qq..m....ILj..#....0`..Ud0.8...E...YIe.mS......."KIQ..j..7..F...Iq..v".4.........).v......X.-?....L.7frp..^..%.8hxa[.j_.O........;M5..Z[.7sn.'...6......T....c.l..z..:..rlN.d.'.......}TO....i..N$D.>...%./#..........c...... .....TI;.f.u#b...P'BeX%..5%..(.T..?.;.s..c....cclT...1rtJ...X..x....U.n..=.nE...t..q].3m...y..........t.TD..:T.CH.)..P.EB.?..W...j3..r4=..Q..p-..... ..<!..]P...^~I....Vk/....h......H.!7....k......'N.".~...ik..UQ.g.(...z%V..gl...r.z."..}}i..+.....A.).xCP...N.i&{l. 4.1.W.E.Yg.....,....3..}C'DL..1[.>]G............{q.$.....7....iJ.0.Q. .._..c.*......./...{....6.0..d..$JE~..V7........6U6.V]D}.k.p.28l-7....xJu....?...&F..y...E....T..m`...E.[..Y6. ..uA..{......fM.6.+.pBx.....T..?..Q.5.f.N.3.5N.9.Ki.8.d..~7..o4.6..l....c(@.p.1h..h4(?..f.5.9^.....m..6..hk.K7..Bc.l.. ._...m}B.B..S'.6.E...nv...>>!...=7...<..G6...C.QE...0..D".....,.k....V..H.&.B..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	53114
Entropy (8bit):	7.986356155504004
Encrypted:	false
SSDEEP:	1536:MqUsINuT5eLcF/gDHjF26Txefw8+xHSFKGC3Gv2HaIwLQ3Wx5c:IqEcF4LR26Txs/+1SFKn3Gv2HwEyc
MD5:	F7F5FC5CF2ED2196EBFEAD93DCC111F3
SHA1:	F3803DF623F4E7B71E91F42B8BDFEFE96A1AEAA8
SHA-256:	35FE99869C5779A50BD676EA89693F4044660723C5F34B870A742097041801B9
SHA-512:	D083BD533E1BBB111808E264B0D8ACA91C7B767648EF7C53A85E8E07E159142E324F5465F0069B0F7041BCADAF8F6ECAE8A9A1DE56103271F22A242FB9080F3B
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/team/1.jpg
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""..............................................................................................a..a[i...^N.H.<z...l7W(..l.....Gf.;0mB....b..H..a_.^......&#&...u.-.f[...P..\.t..V.KI3.R.F3.d..OrB5..u..Nn.T6....j.-\.\8[~h..i..&\|.....J..N@.l"....8..r.3.Z....X...(h.iA.z...Ljx8x..........\- .,......J4s4...k.>.c3...4.....!...r..F3.[........0"....+..j...o ..[<.2#+Lq.V.T....h[....~!. ...y..tNV.1..a.{E...O.."Vd......D\|fqU...@..2..2})...-0..Z#.2d.-9O..=...B.S7...r..z...V3.~)..(u....w.~0.{@Iu.F."..u.c.e...)......,.4...x.p(.V..}.".(.[....P.~A....%#...2w..K....\|.....k....WD..I.%Cf..dKye.?..^x@r...h9.j....s..@.~ja.......c...Vc'\|Q..X......Y.x`%J....... .Ko[lY...K.c.cd...8bN f.3.{G......fg.D..7.......D...fGK.S..Y..&..E...qmm^0......>........xk...!..^....y$.l../..lTU..,...\|zM.L..Ay.Z..h\D.f.pK5.... .y....^crLD.4L

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Category:	downloaded
Size (bytes):	37828
Entropy (8bit):	7.994199601770781
Encrypted:	true
SSDEEP:	768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk
MD5:	50B140B1E97D859D6D0603414F4298EE
SHA1:	500E4872EE1BA9CF89F1BA626D64987B0F9AB5C9
SHA-256:	FDC9964050BFA24C27A3C76C6791B3674292A5F352CBC83D7A4DC49595BC3FB1
SHA-512:	55EF84E956A7943E3FC61A8A349E64E9F35B7DFC63402AB52B995F43A7CD4B1D2ACD300126DCDD610D0B106AF426848F998CCF154F712034422D242D6AD9130D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2..............~....C..........................^...V..D?HVAR.'?MVARF.`?STAT.8'2..L+..\|.../~.....$.u....0..x.6.$.... .....e..([.lq...{En.0..I..h...[....-y2..)..@(.....T...K....$E.U.uA.b...AO..CU"O.W.]7..'............a.@...kF9.3.....xV..7.tg4#Ol.x}o.M...w...Q..))..-.i.R..&.P.......N..[F.C...x..9.\|.;......d$..L.<......=.M.S..HlLHr.#+.S}..+..C....D..'^..~.}..TeT`%.......^..$....0....1 A.. ...bm..]T.E...n;._Qqm....RK.....=....\{.h.O&.D$.U......YS U..i...@.:W........p..pS....-.w.EQwp@.....},.G.@,....0IAV....P...~..0.....8..f...5..Os...5..P...n&wS+.P:.7.e.$t~.s_...z..3..Z.....}.A..2Uj...@{.:Ln.}.t.....i.>Kl.."RQ..h.;.........%...eY.E?...W..00(.z.ml.J.TPP...........G...6.=.Z%...\T....W..q...9D.m...)6..1..\.....v7......U..jr..-i.c.3iL..,\..!...b.d.A...d..C.....Ra:Q.!.M,.e.SMC$$M.w..c.151=.m..o@.G$.X..P'..\|.E."..Z.k......i"......S8..@.d.....2..t..........{..X.]SN..$....K....j5..e..,.%...T..)+.";@.v...9.R..]......,...W.iY...f..r...Q.FY.P.#...X...S

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1469 x 720, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	98050
Entropy (8bit):	7.952534751241831
Encrypted:	false
SSDEEP:	1536:52zQol64UC4CYcIfhl0jTTOcioPe2wkzfUXFblSXcp2duj+pq1X6+zSb/82E9J:5A6lpMIZYrioGrkKCkj+41K+2b/83X
MD5:	9FCFFD0F97A3FE2E94D8EEFE1F80CC5F
SHA1:	888CB95B6C7910A4492F3CF8532BE6F4D3C6EAD1
SHA-256:	A54FD795D5ABAC96EFB3226309A0CAEB08075647D5550BA35DD862FDCB90ABCB
SHA-512:	DE8860883F6A3E95BFE8356D9ECE63D975309D8BEEB091EA845E6CAAEF6CC71FD2F857639469ADD691E1448E0A0EA61070C4C622BF3678FB06A083EE82F99423
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/map-image.png
Preview:	.PNG........IHDR...............-....6PLTE.......................................................c......tRNS...... $1(,5@<9DGK.......fIDATx...j.A..GG..e.......uS....>8HK8s..........T.....3..0......#....0.7...mz..a......@.0..?G.....x...]D.8....h..D.X@..k..a\|..]P.....{@h...o....>H.}..ss.i.@.yD..a....R....=.o.B..=.0......T@O.T...exJ.S......_.6'./..[...k.nN.W....0...@.r..%"wj=../.......Wp.U.U.Y?].&.a..N."\|O...o...s....}xJC....@.g.- l..%........<S.....6S.J...n....$ch.....3....p.4....2..Y....6....s,.BaT.1.........).s.....zO.3U...tz7...6.c.Z.S.<@.Mo.0.. p$..g.%..Z...........:.g...i]b....<.ZU.a........)@..r....N...6.]..EN..q.%...<.j..<..\......1..T=.!..S.....CRt>.....}N.T.ra..c....BR...)................w.S..X.e...P>S.35.S....Ri.......<...*Z.S..>..n.0...[@.=.=R.+{..3.-Q..Cx.,.A..}.4..}RS.........TjJ,[.o.~k.....z<K..3.ij..R..M-+5 .I..p.v.d.{..Rw..E..Y....T.?2....6...`&.%..S<+....a...u.. 2.."g...J...<u..h]}..H.......K..Z..0.Z...".k.~...A.[.1.q

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x904, components 3
Category:	downloaded
Size (bytes):	36832
Entropy (8bit):	7.965466296680534
Encrypted:	false
SSDEEP:	768:5iw/0XwSvK0XHaY1fX9xopt4IZlTlYGPfwNrTNLTqrWuX62tghwQsCF3:0w/0ASvNJXcpxlTqGPIRNSbK3hf/F3
MD5:	04BF80AED63EBF53F05C487A12258F35
SHA1:	1A5BD2F3C3C6654EF21E1AE9A592A721A8F67882
SHA-256:	347A5C6E28A5469A1FD540FEC5FE4C519B3AC1CDAE5E54D09FBF95EA436A30C4
SHA-512:	E5CA202F1934B6E6E59EB800540CA167268D5825221C9BBDAA2C215241D11437C0E2782F8EE095F4ADE8472C844DD0136E90A0429FA6A5890041F23D27480750
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/6-full.jpg
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."...............................................................................7..D..c.c...X+..4.-r.,.d..$...)....).#)...%u..[x...5.j\|......J......!..i"`..&VIel.aTdA.t.p.nFj.JJm.X.u...Y..7.A..L..IP..4.P.3...,.:..Y...U`...MtW.\...M.M...c...BW._n=......e%....E...Hu..P......%.4.`...l..+."Q..Ja.Q...2.>.J.l%.D....0D...K2.5X....E.(....7UX...sGW-.......3S.Mp...y..]L..I2.....a..L...... .0.$...(....C.U..@k.-g.".b...Hs.6,..CJ..+)O5..,.<L.P.D.J.D.L..^.9..gv5 t.=..i...P.e.d.:.nm\|.[!..@,.LL.HD....&...!1 .K.....:..5..M.(.kb.cElt\|.f'5.&...&.Q..).[.,..R..P.@...V+...k,ki.E,..?\R.E.e.b...K...KH1aH."I......V@"t"`.Q.\|.f..b"E&....."Ie!..%..2.7 .D...).....S..f{...!T..W $..H.....&.h...f~..2...l.\|.6...+...D..........(....Wfu3.#(..Wc$..D..H.8. .l...h..A1..H.....2.#M.].5IiT..!.....H...QN..2..chKq\.m@ea.., ..FR. ...`

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	4902
Entropy (8bit):	7.83296936442021
Encrypted:	false
SSDEEP:	96:rRaWWwHzr4XH2Pb/sJuIVpYSLjCTpLtmS2TqjPadHbE3FV2IRRKfK:rRavwHzwHaMu82SeLtIqLad7E3FZrKS
MD5:	D39BBBD72226ED7C69D4A766FF10C212
SHA1:	A52DACE1CBF15FD471CABE60FA16F6F9F9898CAD
SHA-256:	BE114343E6BB5DD2BF254FD9F956B6D6B90459AC39E3E175CE9599CC40865FA0
SHA-512:	2ACFB9328DFFB40D6794AF241A44470252E286DA011F070999995DBDFA7BFFB775BF2015AE377CB7E2E7AA11AC594123667FA0573DC3C374174F415E689BF080
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/about/4.jpg
Preview:	......JFIF.....d.d...../Ducky.......<.........S.A.M.S.U.N.G. .C.S.C......Adobe.d........................................................................................................................................................................................................................................!1.A.Qa"..q.2....B#..R..b3r.......................!..1AQ............?......` .@!`0X..A..m.@....l&....l.l.I....H.....-....l.I. .....B.j@!a.,...........6...6. .m...I..........A-..@!..%...7......@...aU.6....*.,............l.l.l ."...l.HT....l.[.R.-.....+.[...hk`...,!.........Pm..`Ka....T....+ ..%..H..%<$P+.@.i... Y..l.l&...,.....!`. Ka..T..Ka.....-.B..l.l.l......@ZH.V..m.,!..B@`.....`.`.`.M+.[.[.[.Y.[.[.SJ~.([.[.R@-.-...et......@..'D0X.M)O:..D, .(k ...X......O8.............+ ......H....$P...m..PBB.H.g. .(6.........@J.J.i.[.[.[.[.[.[ ....l.D(........N.p..X.,!... . .!...$.d.l.l.P....a..............!XP.@-.......$..J.H.d.d.d ..B@.@6@.@.@.@.@.@.B..@.@......!HR.....+..,...0...}..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	74381
Entropy (8bit):	7.986798507388441
Encrypted:	false
SSDEEP:	1536:pvldQnLs0Vx9do7GPQGFDSG8oTUtFJo7uCRtAhmg+ou/dFVbcp2b:pvog0T5FOGbCFkudmgFu/dcQ
MD5:	CB604DBACA835DB87345676E273EE4EB
SHA1:	01DDF1A8CC6E9806B2170F8E6FB3F12226236B14
SHA-256:	F4AF74883B80FD401F2BF080F58D0D097D45772A601220445B4BAA7B26286639
SHA-512:	5E81158DCCCD13B5CC582CF81FA457F2AD8C967921B119A29D0377E924F7125FEA82306E13FB5528EEF5869297905BDEC8FCA66B691EC2C23255F27B4C2EA4EC
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/team/2.jpg
Preview:	......JFIF.............C....................................................................C..................................................................................................................................................................dI..<&..b...B.....6.@...E..Ea.........r...f.d..g..7....$;.r..6.X=..$B-5. 4.6.8.&....5.OB.....80O.L.1..Xb.".w.D>.x}"...fE...i4.x3..l....6...3`\|b..&.4.&:..A.F.b\|. ...."..}&.Bu.2&kdL.9...u.V.D.\|.A.w......7Y.H..}&T...f.c..l"...I.Y....m.....)...e..sc...\..X..DA.R%.P.Bd;..Us..K .b..R-.H.M...........$^E.Z2.U..\|...c7RP.....y.3"jf`.BaZE...$.........L..B& D..w.G.!..[.+H.....6V.....H.T......D. B...hUVP..,.a..i.$...C...Z...D.....J......&.r..^..5.....%...S..v.\X....r..6...>!.\..4.Y#......:H.(....l.H.H.bVm..."......]...hN..+..,.DP.2.&#+.g....1....R..f...0.&`T..t.P.......`...... .VLF.r.Bf:)..)][x.......h..I1.SX.)`...i......[.uz.4M....x...ac0...p\|f$P..A.r.3A.......H....&f.I.TQ.K.Y5#..&.K.C7RX..HEnH>Le.NM.ee.:.yW%Y8f

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	883
Entropy (8bit):	5.419561162486177
Encrypted:	false
SSDEEP:	24:3dFOY7a51VWT/ftJc+u/rdFOY7a51V6wy96cGSSf7:tFOEa5qT/FJc+uRFOEa5ON0xD
MD5:	7F42FC45D5D1D0E8779760462E72858E
SHA1:	928916D84D7B3DFA02B17D310FF6E8C06662CA11
SHA-256:	B6AB5B10C956B648936E92CFACC31AB14386D130F325B5A242573EABA887F5DE
SHA-512:	D5FDA0E21E76692CDFA3918BD20152DC7361351A7C0A5BA68E6FD8193D3994DDA4EA827732FD1C01AF97FC555F2AC16D2F63C97CE3EC2829596C3CE46A107F6C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Kaushan+Script&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Kaushan Script';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/kaushanscript/v18/vm8vdRfvXFLG3OLnsO15WYS5DG72wNJHMw.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Kaushan Script';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/kaushanscript/v18/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	7338
Entropy (8bit):	7.940726473396747
Encrypted:	false
SSDEEP:	192:+iRAkXlI90L1uDvzZVtpF65XHrP8SZcTrmZRrSzkIVfz5mo:nV+LJpo57VGTr0WgI5Mo
MD5:	3FCDEDE3B85681F38CD286BDB2AF1B89
SHA1:	2532A0C5EA4F2DAB7F18D52D97C2F6DB5CB65E4E
SHA-256:	109F34460213C7A6F7D3BEC2E8E32E16D0258F8E94A54E0E651023DD744B425F
SHA-512:	21B539802CE12BD8BAF7E92167036583ECC3A1494CFE552948E9421021B304B2067C57398E062485DC57C22FB5CBA3268C134B3B590A92FD7349703E175807A0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!.1..AQ".aq..2..R.#.....B3CS.r.E......s$.b........................1Q..!.A2aq".............?...z..x.f......b.H..+P!.........w^.`E<8.&L....P..{(..E.."8R........V.n;..b.....X.=4:..&..UA)>..J ...W...J.$.Vr....T.dW..".m...G.;..^.C..$.#...p.WQJ...x.S...#%.\|.N.X..k.N..FE.T............dE...n3W!$i]5.X........,kr.`....,O?e^F.X.z]..^..x...W..J;+.V..H...E%..:.y..]..i.W......o}p.u...=.".>i~#..).>..V....Q..4..d..&1j.0...A6....x......&LPmU....bU.j.+.j...(.8.FsXT..s...j".T.\..i..0..>H%N...;........F.<q."..XS^.z.qxV...&[..K...M.m.n.._/.....k.... .A....\].........-~..Q@.O.}..n...!......j..q.$...j...NS....J..4...9N..L..#.....9N..Y..}.O^...1.......S..!..kyO.O...9A.l..?.?..6.NP....?.....<G6

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80372
Entropy (8bit):	5.182560358703975
Encrypted:	false
SSDEEP:	1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kG:b4Fj8GPwRM3CiI9BtX
MD5:	7D3CF48F5BBA5DB5258A2FF0F65EF00F
SHA1:	52ABB563B246CBCE1EDF317417C6FF631059A2D6
SHA-256:	0FF3CADB509482CCB23BB600C5C01EB721877A5CD7187D96C8B0AF2135C29CA7
SHA-512:	92B9279B3066E5787393B19E486F841A95090E1D834C9E9C4087A05CD050D56917BA6E891AB8C57F4D4A3FC988B2457332B8BA802952B9E0B60017C5A9876A86
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/bootstrap/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	dropped
Size (bytes):	1689
Entropy (8bit):	7.439305548183162
Encrypted:	false
SSDEEP:	24:t0EjtTFkfv3Kknt1WaBq90LMEqC4LkJA8L15DJS6tsodUyyXv+shyHgrr6:jI3/nOR0g862DhWoP2+shC
MD5:	B6D135509D34A27ACC21103D52F2991D
SHA1:	31D06BC81CA245AC946F94A2A761AC416233EF29
SHA-256:	9DE07D78114884271A41255DE36E3C16F946519AA392F4AB8A01824FB672A73B
SHA-512:	5886A3175EF9A6BD01AC5A4B44E452A7EBCFDC44616A50AF323C3B63BA6BC7978EC5E59EB7FD7D87C630BEAFC607B6B66F99ED668F03214905D7D624F0C89B13
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............z...................................................................!...1AQ"..aq..2.t.6..R.....B..3.T5...............................?..R..............................=..W.l.Z...: .7...ZN.w....>c.5..... ...U..^.........u.......b6...8A.-./..V......... ....&M....1...{.A........r.t..N+...y..\..;tAi.........k.........'..Pz ..1..s.}...r..C-.zQi.d..G...%8 ..6....W....=..s...?R.5Q...2....6......E.6d..PO.c.{~..._.A.Kj.8..0j.......lls...1q......oW;#.....S..9.^.!..PE ....a....%.i'..*\....L..bcK....(nw.A.{4A.9or.yj...i.:.n2.6...>. .?;f.h....n.B.e.....I..A.\.9^...=...6.......H..i..5...\u.N...k.<.a.WN\..N.Owz....5:..mG....N0.$l.!.... ...(.Q......Vl.....s.{.........2T..a.....sL..F.{.....v...}l...p....k...u........Xs.[.9oPB\.1....C...C..e..m.......c_.. .P....

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	6987
Entropy (8bit):	7.931488476750541
Encrypted:	false
SSDEEP:	192:IA26O4v3i1xvazSr8NFtcXULtHBW6gAKmHkN3:IUV3gbD+m30k5
MD5:	7E4F5EC6D94AA0C08C155426257EAA4A
SHA1:	E7BB54B033B40E313A642650C5066216C08C62B2
SHA-256:	1F933FE896090A71940395CB1E2AEE34FC861D3121CED2904943D575F46D7BDA
SHA-512:	53385467097963D2F750F9AAB845AD0AF9CBCFB538210BAE89993B2FDD505158B3A568064EB58896477F368DAF2B162908617CF6EAF369E36D99AF8B5F39EA22
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!.1AQ.a"..q.2..B#....R.b3....r..cs........................!.1AQ2.q"a...............?..0+.{.(.@.NR....U4.8....O.F4.M..\.....j.IEH7.I......B........Qc/j.S.,MQ.)nUR...~.ZX.9.....5j.a...h$....F.....v..S.;&.....5..j.xF...4.b)........Wl..d...X..j......"...:UJ...1THP....d........o.. .i.v....0.#.y...3.N...:S..,m....Zz...i...:b.<.=..N...3i....2..xZb...jI....bKUD.Z4`\\Uib.mJ..5...m...3m.0@.zS..m...S.{e.W...B_.2..J..:0.a@.U"m...T.SoJ..QU"t..T.jIP5..Qh...\...%.j).$....cV".8+.......j.R..1[J4b8Q.........(..L... ).c........1d.:r..0MU..Ra..D.y...SM.....Y.=....b....?.....}(....U.Xv...&....W..T.54Am........&..N.mQ2....EF.......,.^.X......Z...8..2E...g`.....S.-..d.wk.&_...U...*.u.....q..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	16604
Entropy (8bit):	7.955359900928637
Encrypted:	false
SSDEEP:	384:0w5MhK2pMojxWKHGfbX5s7XF6rblN9lBU94V62NtN4l4Ypo6:t5CKFotWKHG1s71UldbHN4Hu6
MD5:	09C41872BA6C96C6EFDCAB7F202A71A7
SHA1:	11893C68EE89DFBD5BD668B41AF1EF3AC0E3AC7A
SHA-256:	55C78F7452D3B8BCC9693734600004633112FC4EB0016B7E8E793C64DDBA6589
SHA-512:	D9BB4ABAED3223BF67487CEED46B42D6A5BAE6C906D8D7EBAC01E8F8B1D068FF567A7C2ECB72F197C752FBF8AEF53DCF9393E04CEF8664601E41F58E605A2077
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EACABC75D9DC11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:EACABC74D9DC11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="E288BF02714491AF5321FAFA7115F41F" stRef:documentID="E288BF02714491AF5321FAFA7115F41F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	16459
Entropy (8bit):	7.949754029651206
Encrypted:	false
SSDEEP:	384:n/U6iB1qPbaG48g0Rxgs/gzTRUbxhgclTRwSBk7:n/WBMPbaG48pSpiNhgcla7
MD5:	E52270B3AF9B353D02078B01ACD931AE
SHA1:	3543C448DE424AACC5F1008D90E67397695DF428
SHA-256:	48CD4B2A69ECA78B26495D8DDD3E3D019665AB36C8771D613121709A2E6F00F7
SHA-512:	8867093408E9C9CB6A646E276A06914E40A2BEAFE8A0F29E703BF1B436DDE10FDC3B0EA7D8D340348084A4A42F55E481CD7704FC5784725E47EFCFE934360431
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EACABC6DD9DC11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:EACABC6CD9DC11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="BC518EA5446FC251AB268A8781A294A3" stRef:documentID="BC518EA5446FC251AB268A8781A294A3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x563, components 3
Category:	downloaded
Size (bytes):	40736
Entropy (8bit):	7.949161090822048
Encrypted:	false
SSDEEP:	768:5Ti0n0FAkWIntYARsotfWYYhCcDiT2mkx3UwJqWnT+Z3GX7lKFhnfX:Yi0KNY9Rso5W0CbUwXnUFJP
MD5:	83644AE25B3EE9666A389DB453DA1662
SHA1:	88BEE5CA740AEE64763FCB8CC2BBCAFB1D71385E
SHA-256:	CF28F0D6CA7A63F535200B4CA041E0ECFA67AE0CB20CBB52841A4C1B5E1DF526
SHA-512:	7C32FC002089AD0BD37894F190A2C4024D7E3073833F0FE61F749FF003D2016684F873B9403E7C917E78AD2D48B413ADB8F2A03160E3C0705666DCE7227B85AD
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/4-full.jpg
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG......3.................................................................................R.]h..!.... $...B...........%`....e.9y..r..s=.A...j...+.Ri5M...@.0..0..1 X.`@.@.s.....e..B....F........(:...e..XP. .....9q.s..vMz....+D..l....2J....G$...p$....J..J.x..9XMZ....b..#._U.....=......F......b.....e....yc4A.^.R..X..0.9%.. .....c...rF.....Q.,....G."....k;"@.H..CH .ZO...+....Y...A.....+[.........(..X..H.9.I.....3#..JY.@..0.-...H.......@..q.\|`/..y.9.)I.@.iaA.;...$..@QZa...f.h.."$..B.4.Z...t..A%......s.=-......h.A.2..:..9.c...J. ..).9.@..9.[.7..n..@2...DHS...s......Q@.$p......$.cu..y...F......N~u.1\.:).-7.R.........1.H.A..u..dd.kX@%."j.$q.$.\.4.@....`.1`.X9q.......@...i..j..m3....s.^r.g<R...S.s..#.j(<.....)[...el..RI.........1h..T8.@..Ws#...H.. ..A..x.yaYU.d8G`c1a..F3.....Vs.R.K....z.d....W5..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x1250, components 3
Category:	downloaded
Size (bytes):	148216
Entropy (8bit):	7.951279706859046
Encrypted:	false
SSDEEP:	3072:1/vnPe+02CpZqgbcG56uKRq2qXnoFkmj0SlFf4/V8SWoMktPOXperiW:1/vPe+FqZq2cCo2Xoq8lpaVrRvt0pez
MD5:	A157AA4CAEECA73122FE93EF43ED8C56
SHA1:	2E25ADAB6D402B50565F2172DA54218AEE822CBF
SHA-256:	09BFD4BA5F9828E4073D4D244B423659541816F40476F4AD69B6A9F69D08ECA0
SHA-512:	5B9CCE1C54F52BB5997AC757259A5C8DB804F8E9CDB78628A99CCBD79B26A83FCE7C5F0CFACFC9F1FC7D92E875BDA2382188E3F3BDE37DA80B78DAAB34576021
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/header-bg.jpg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........l................................................................................3...$.$B BD$.".DDC.. 1..1..PB..T$.DC..C...1..TDP.Q.S..T...".. ..."#&........"!".2h..@.H...H...........@$.B.$@&D..6. @BDD.h..P$. @@DG2!"!"..."!"". .....V. ".4..LB.5DAQ...D T.h......H@..H........... "."!#@@ &D@@... .DDB.DDDB. D$. DDBd@....D.......""4d....*". ""9............"."...@H....@...! ....J.".".".@.$.h..H.....).@H..D.....D....H.@..@H.....@..AH....". ..".#"B.@$.D.$..D D..D@..................""..."".H......$.&D......(@......................!....@D&HD......H....D.......j..F)"!.."."D..B. @h.H....................&.HH@H..H........U........... 4.&j5........"!.!..!.".. 4.B.$......!.@.DBD .D.$@DD%.D...D j...`.c5.... ...!"."$B@..H....@.........D.......!.D$D0......! .4.DDDD..DD DD..B.@".@ $..$Bd...............4B.DB@ BD..R.. j ........f......U.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	dropped
Size (bytes):	2040
Entropy (8bit):	7.637375451795322
Encrypted:	false
SSDEEP:	48:+UFH3+2miD9yc4xhMsgr2nyYAn5spwzv9:+UBO2dD9ycshqr2nyb5spwz1
MD5:	C42066B3ECD8AF382001744966BE2EB3
SHA1:	0EB68B965A702719235DDFBB68C24CA5238F9EBB
SHA-256:	6C787A84359750D64158623D117A1810EF1DDA2F6769657E3AEABF640355DE87
SHA-512:	D259BFB5D3F7B6CC93B5846C840CD7B68E1D69871E8DE77E3DA66C8A402C681A714BDE27FED330B5B06EC5B3CFB1F9062322B5F7D2F4D41ABF5A5A5B5C7FA119
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............y.....................................................................!.1AQ"a.2.q....R...Bbr..#.3s..$...............................?....@.P(.....@.P(.....@.P(.....@.P(..g..#....h...f.P(.....@.P(9...G.s../.c..n.v........\|.5...NS".Z.y..F.UbR...}..M...@.P(.....!.....#......&.2..U...h$.wqc,.Mw.....G.7.4.l.'i..R.If.,OM..A/........Wn....,.tQ.=O.....G:w......T.f...6..)...A.,..rkKy....m.<a..&}..>.\i..u;...\.........b71..5fr..;4...+..l....Ju..s.S..#M......J.L.G.q>so../Z..yc...2i>....P..t....j.7.[....H".FuPG....4....E....d_C*......B..Y........8......]..b..I+0.C.0F$..}ZtQ.......Z...$F.4Q..M.S.'..J..S.s.2....rG2.!.#$/..o'`G....7..'..de2._I.......(..t....}.lE..9.ii,K,6.<..e....>.Pf.\|.1l..W..%.B.[{...Ye...c.....xkA.v..]....-...$.Y..F.k..5.....c9..#w..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3774
Entropy (8bit):	5.436312225868273
Encrypted:	false
SSDEEP:	96:AOOEa9wOOEa2FZOhOOEatOOEaqJc+udOOEadZNtOOpa9wOOpa2FZOhOOpatOOpaj:Y9oDTPCmde9BDWyCjdw
MD5:	CC5C08E92B60141A3DE5E377265AF95C
SHA1:	F083AB76A6DD11169982595A9801CAA59DA9E380
SHA-256:	9C143B0D49C00D71DE9414D8461E0C25B400FCFF8FA9C7386ECC10D64A69B309
SHA-512:	05C6EBECDD38BFD8764316C4499F908D2056F9B7C0099C2B80D9A00C4654C88583E5708ED97F9E6EFBB4024EABF5ED9055820F1841FDE7315F5641CF90FE4E0D
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:400,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	16459
Entropy (8bit):	7.949754029651206
Encrypted:	false
SSDEEP:	384:n/U6iB1qPbaG48g0Rxgs/gzTRUbxhgclTRwSBk7:n/WBMPbaG48pSpiNhgcla7
MD5:	E52270B3AF9B353D02078B01ACD931AE
SHA1:	3543C448DE424AACC5F1008D90E67397695DF428
SHA-256:	48CD4B2A69ECA78B26495D8DDD3E3D019665AB36C8771D613121709A2E6F00F7
SHA-512:	8867093408E9C9CB6A646E276A06914E40A2BEAFE8A0F29E703BF1B436DDE10FDC3B0EA7D8D340348084A4A42F55E481CD7704FC5784725E47EFCFE934360431
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/2-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EACABC6DD9DC11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:EACABC6CD9DC11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="BC518EA5446FC251AB268A8781A294A3" stRef:documentID="BC518EA5446FC251AB268A8781A294A3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	74381
Entropy (8bit):	7.986798507388441
Encrypted:	false
SSDEEP:	1536:pvldQnLs0Vx9do7GPQGFDSG8oTUtFJo7uCRtAhmg+ou/dFVbcp2b:pvog0T5FOGbCFkudmgFu/dcQ
MD5:	CB604DBACA835DB87345676E273EE4EB
SHA1:	01DDF1A8CC6E9806B2170F8E6FB3F12226236B14
SHA-256:	F4AF74883B80FD401F2BF080F58D0D097D45772A601220445B4BAA7B26286639
SHA-512:	5E81158DCCCD13B5CC582CF81FA457F2AD8C967921B119A29D0377E924F7125FEA82306E13FB5528EEF5869297905BDEC8FCA66B691EC2C23255F27B4C2EA4EC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C..................................................................................................................................................................dI..<&..b...B.....6.@...E..Ea.........r...f.d..g..7....$;.r..6.X=..$B-5. 4.6.8.&....5.OB.....80O.L.1..Xb.".w.D>.x}"...fE...i4.x3..l....6...3`\|b..&.4.&:..A.F.b\|. ...."..}&.Bu.2&kdL.9...u.V.D.\|.A.w......7Y.H..}&T...f.c..l"...I.Y....m.....)...e..sc...\..X..DA.R%.P.Bd;..Us..K .b..R-.H.M...........$^E.Z2.U..\|...c7RP.....y.3"jf`.BaZE...$.........L..B& D..w.G.!..[.+H.....6V.....H.T......D. B...hUVP..,.a..i.$...C...Z...D.....J......&.r..^..5.....%...S..v.\X....r..6...>!.\..4.Y#......:H.(....l.H.H.bVm..."......]...hN..+..,.DP.2.&#+.g....1....R..f...0.&`T..t.P.......`...... .VLF.r.Bf:)..)][x.......h..I1.SX.)`...i......[.uz.4M....x...ac0...p\|f$P..A.r.3A.......H....&f.I.TQ.K.Y5#..&.K.C7RX..HEnH>Le.NM.ee.:.yW%Y8f

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x933, components 3
Category:	dropped
Size (bytes):	49855
Entropy (8bit):	7.973114669534577
Encrypted:	false
SSDEEP:	768:5FGIKXCUZdF9I8cGttJLywU6umZ9jlRXfattpVk5hlXOJjNAoQUEot/MbTSrdG:DGIKvdF908tJWzEZ07pqjehWBEM+G
MD5:	52C28AAF5503CA751649B72062999A54
SHA1:	1768A6E33CF1598C77A7D43BEBF86767E4F7F921
SHA-256:	A37742EF074217A5EE5F832E9DB265F88BDC72BBB6D73017929B225CFC01BC95
SHA-512:	61BA16E87AD36D7D061FAC6EA0C06670A42DAC1043CA2114501CDDB6BFEB3B9E3E04AF8FA03E8B524FE61D880FE42FAF1B3BCCE998FB8ED04D7EFF048EBD676D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG...........".................................................................................F..k.:.I..........i..d......G.n.:~....9.......8.~_....@..&....\f......h.E"..H.s.$../.._h.va..\L.N.........)..zW...g= .M...{...w...S..<n....{A.y..yj..g...y..w.h=.5.......s1..rG ......=;0......G.4...H..O).....A1.H.3.9,...T..e...........E..:....g.^....50[..'F<h.b9.p.o9...#.k.9./S....J..ej.q.x.T..@P)...U1...y..Sb.EO.. ......."@.9:."y'......Wv$N..2..$.i<.jj..Q..n.@.k..5._!..X.e....L.......V<..._.rz....K%..:..^9.\.......@...c...p;..T=z\|&.Tq..G..~L..}....Hh.....^....-&f.=.szyF.l.. ..y.......<.[Hi.3..=..#a.dr.zF?t.o..A...w7.#..2.K.r.B~_V..Q\a.}*c...zm.......OM.n...m.H..p[#..r...:.//4..=.!.sLfKs.F..^.i.....N..D<...h\|K.0...6O{D.f..r.{H...9o=.7..o...x9.H.2.?.<.......y.A4.....n..i...TS.....f.o.....r!&\|....>.v\..>

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	downloaded
Size (bytes):	1689
Entropy (8bit):	7.439305548183162
Encrypted:	false
SSDEEP:	24:t0EjtTFkfv3Kknt1WaBq90LMEqC4LkJA8L15DJS6tsodUyyXv+shyHgrr6:jI3/nOR0g862DhWoP2+shC
MD5:	B6D135509D34A27ACC21103D52F2991D
SHA1:	31D06BC81CA245AC946F94A2A761AC416233EF29
SHA-256:	9DE07D78114884271A41255DE36E3C16F946519AA392F4AB8A01824FB672A73B
SHA-512:	5886A3175EF9A6BD01AC5A4B44E452A7EBCFDC44616A50AF323C3B63BA6BC7978EC5E59EB7FD7D87C630BEAFC607B6B66F99ED668F03214905D7D624F0C89B13
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/clients/themeforest.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............z...................................................................!...1AQ"..aq..2.t.6..R.....B..3.T5...............................?..R..............................=..W.l.Z...: .7...ZN.w....>c.5..... ...U..^.........u.......b6...8A.-./..V......... ....&M....1...{.A........r.t..N+...y..\..;tAi.........k.........'..Pz ..1..s.}...r..C-.zQi.d..G...%8 ..6....W....=..s...?R.5Q...2....6......E.6d..PO.c.{~..._.A.Kj.8..0j.......lls...1q......oW;#.....S..9.^.!..PE ....a....%.i'..*\....L..bcK....(nw.A.{4A.9or.yj...i.:.n2.6...>. .?;f.h....n.B.e.....I..A.\.9^...=...6.......H..i..5...\u.N...k.<.a.WN\..N.Owz....5:..mG....N0.$l.!.... ...(.Q......Vl.....s.{.........2T..a.....sL..F.{.....v...}l...p....k...u........Xs.[.9oPB\.1....C...C..e..m.......c_.. .P....

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	13609
Entropy (8bit):	7.943117813869935
Encrypted:	false
SSDEEP:	192:uDQa9p05yRwo/QcxEOvr7CyUi29vjwOM4nNZpexzv2riwObmz4t9jIw/ZWs:YbwVUEw63i2hjY4NZAFwiwOnvLh
MD5:	20456FFF3658B40A59A73AE9821A273F
SHA1:	235D6EDACCC8622174D9FB1496E90F5F39B28575
SHA-256:	B2456D0CC5DB0FDE6327DF9EDB0CDCF5DD7A4FBD664ABBA33F83C6922B814A7F
SHA-512:	80FB1FFA9881DF2C21D02F628C6D7E56883DE48BC7DCCF24F05F6876D24179AA6E8302190F9E0EBD845F137A117EA2CDA88EF4DB75A03D4512F93F1906F63ACC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FD572558D9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:E80C7A18D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="6561350911E24B8DE2BDADE2D4A1D416" stRef:documentID="6561350911E24B8DE2BDADE2D4A1D416"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	24273
Entropy (8bit):	7.966074845908186
Encrypted:	false
SSDEEP:	384:x/2Kc9cN2pqfv8F/qYYCX6w0gSkz4gRR82J71AxeSGkBVNvi/lRHQVsoCqZBhdth:U9wiqfv85qYB6w7SEvXPAkpkB3vMlRH4
MD5:	68D8D9495F59FA5109F3B337D784CACC
SHA1:	B633224E2A9D6565EBA66A638C899F37AAB7F8B1
SHA-256:	219E1411BF6F0F877612DF839EFF4DD48DEF98AFEE959B495D9300502A2794A4
SHA-512:	5FCAFB8FA746DF7CC4CDDC424BCB6591CC3985133AB150E0AEEF1F2B229A9390E0482710AC2434D58FF080D72791A9683574CF3AB3590F8BB85B44EFA590B843
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/5-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E80C7A11D9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:E80C7A10D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="021E57B1C4B503C519ED14E6B1A969E4" stRef:documentID="021E57B1C4B503C519ED14E6B1A969E4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x467, components 3
Category:	dropped
Size (bytes):	29475
Entropy (8bit):	7.964813406644292
Encrypted:	false
SSDEEP:	768:5NHIgZColW7LFYCXfKW/WWbOmJrVry+Aw7efdctNm1S9Pe:zIgYxLFYgfKW+m92+eGo6e
MD5:	1B9F0621A8B691A69F09D62FE14D18BB
SHA1:	8FD91697C960F9AC138A34D537D9B3A961452CE5
SHA-256:	A5636187A5AEA485BD14728197A8E247AF0CDB9034DDD57B883AD680DC3D54FC
SHA-512:	196CB8313774F2272F35380A832AA32384195E0EC044A7EFBFFBC18ED801FF6E2E7149AA1EA3DAE6E514A45E02C06219E2A538826647C4939454FB32FF0A2287
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."................................................................................+.y.2.L.#4.H..#B.(.D............A!....R."..2.......!..+....3.!.. .i\X.Qb...T...)}l...].e.bZ.$....B@...@......"B.........B..$ ..Q.Q...$ ...$ ..`BB"FaX..+.#R.....j........@H......D..............L..........!.....0(...HA0.!......H.C..."X....Y.y...V$..$.................$...............B.....e.. ..$ ..e".....lR..MM.......D.......................!............D.....(..!....+.. ..$43.....$............................B3..5.......Z....=_.H...........(...H)"$:.4..(..H............................y.+...Y.....:..{\|....~...:............(..!.!..h...T. ...........................a........tu.q.=.].p>....>.>'.p............L......!...G...=..&...Q......7...?..{g..z......."..H,+..eU.`..s..s.7.".........#.Y...O0.zS...p.5...'\.p......s....x..~.....>..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	13609
Entropy (8bit):	7.943117813869935
Encrypted:	false
SSDEEP:	192:uDQa9p05yRwo/QcxEOvr7CyUi29vjwOM4nNZpexzv2riwObmz4t9jIw/ZWs:YbwVUEw63i2hjY4NZAFwiwOnvLh
MD5:	20456FFF3658B40A59A73AE9821A273F
SHA1:	235D6EDACCC8622174D9FB1496E90F5F39B28575
SHA-256:	B2456D0CC5DB0FDE6327DF9EDB0CDCF5DD7A4FBD664ABBA33F83C6922B814A7F
SHA-512:	80FB1FFA9881DF2C21D02F628C6D7E56883DE48BC7DCCF24F05F6876D24179AA6E8302190F9E0EBD845F137A117EA2CDA88EF4DB75A03D4512F93F1906F63ACC
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/6-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FD572558D9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:E80C7A18D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="6561350911E24B8DE2BDADE2D4A1D416" stRef:documentID="6561350911E24B8DE2BDADE2D4A1D416"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	16792
Entropy (8bit):	7.946981246740949
Encrypted:	false
SSDEEP:	192:gT33awxJw+xwrRF+kIzQ1SZVXwsajDWpsIJ0rnnab2kuAxXQEW5xTv/GIn51wXG6:1ExrbfXy/W/JuabRuL5N/Xakzpc/9
MD5:	EDA4598198A00832FB334D5A4E588EAD
SHA1:	3E9A5A1FECC4A5D6E773714ED1770776916DDF4E
SHA-256:	34082520946F6C2DB3E4DEF195C436322E5FCA75DBAF1298E8889A0C52C6CC40
SHA-512:	A16B51C5BDB7C0207FAEC79F69926204270A925D4BBCC0C5368ABA22F59EC495DEAB4D8E09BE43591EF625DACDB24A9C6D1AC6EC9184978EB99100A5C31CFB2D
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/1-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:775C1488D9DA11E6AC7DA0B83C48C5D4" xmpMM:InstanceID="xmp.iid:775C1487D9DA11E6AC7DA0B83C48C5D4" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="E38EB60AEC3B5F86E677D228F18BA596" stRef:documentID="E38EB60AEC3B5F86E677D228F18BA596"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	16561
Entropy (8bit):	7.941205479839526
Encrypted:	false
SSDEEP:	384:RoNwFI776GYguOxDIhKeHU4Walh2usy9SqLySbd6Z:RGwCGdOxDIc4SdRSJ6Z
MD5:	80C8FF5C4A1A0775616A5541086B1D51
SHA1:	C5E1D7AD66CEC4B4981E623EC59727CF9B8B0982
SHA-256:	98385E4728D507CC43FCB0895E30063193A06386A4B03C78427D1AF95ADDA83E
SHA-512:	A7E73B4EA8777F2E9D60BDA8A00416F53F2AE345D387AFA59AFA5A27551CBB0F30EDAAA5D1F7DA818AABB37424C36C1AE5D3DE7E3024E899754E5E96F4BDCA70
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/4-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:B322490AD9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:B3224909D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="F5B275253242AC8F0FE7608D91CFDB45" stRef:documentID="F5B275253242AC8F0FE7608D91CFDB45"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	80372
Entropy (8bit):	5.182560358703975
Encrypted:	false
SSDEEP:	1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kG:b4Fj8GPwRM3CiI9BtX
MD5:	7D3CF48F5BBA5DB5258A2FF0F65EF00F
SHA1:	52ABB563B246CBCE1EDF317417C6FF631059A2D6
SHA-256:	0FF3CADB509482CCB23BB600C5C01EB721877A5CD7187D96C8B0AF2135C29CA7
SHA-512:	92B9279B3066E5787393B19E486F841A95090E1D834C9E9C4087A05CD050D56917BA6E891AB8C57F4D4A3FC988B2457332B8BA802952B9E0B60017C5A9876A86
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x933, components 3
Category:	downloaded
Size (bytes):	52803
Entropy (8bit):	7.974603705569533
Encrypted:	false
SSDEEP:	1536:AuGTlRMnJyEyxe8/SlA5rNNKDf6rRpBC5eIawZ1VDo12U:AuGUndA5A61DrwZS2U
MD5:	8C1228B6CA424BEADE57A0725019E74D
SHA1:	A549C99BAF576DC34B2893CE8E1A301CCF915589
SHA-256:	04EDBE8BFA36FA7EAF25809C84E29BE4CA397A7013D11A0CF7B77A0CB1308D03
SHA-512:	250C173EA68376FC43B99E5E8DD6F9D26AC5369523C7946D4BD496427CD7851BDCCFFB4C87B3F5CEE52F9792C229FAD18FBB52FBA028B89B1C2073980D175E86
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/3-full.jpg
Preview:	......JFIF.............C......................#....*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."................................................................................I..+...^...&....-M\|m........\|..Q......8.G'.].h.~..-..d..z!.....Xb...\|...)."..xZ....6.. ..`N..3.:H.N.).d.$..y.2w.y .k....)kd...Hfv...F.....I..\.k.!X".^..(.f.Q..m.w..mg.q.-W.1......+df'}......X;...A).(q.r..rB.T.c{....^ltX1..u....[..sq..\..G.4>.n8.v..Ev.k..x........T...A.......A.y[........<.....;L.p..I.!.Y0SI.$..R...5.^.Z.....pv.2.L.r2.....1Q.^.....}O?@9.dnQ....t.m.6d..t.9W..+..k...m.,2.t=./...'.O...>.<.C...X..u6.g.}&....m.0e..%..X....kn\|.Cq.HN..A.<..C..."..3x.S.ss.s.... ARh..t..T@......(..:Y.D....J..:.k..RR.N+"....;@..Z....E.sB...e...O...tn..MYt..7.R.9.p.7.o--nkB+...8p..q.p.c....n+`.VOM.....:..Y.R..S........2.{... ....4.....I:hdp..oU.\r...t8.p.:A.O'Z+?3W)..QR.....0.y.j...<{..P.K..Z.....]T..X....IS.Q.:.W.Oh

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	dropped
Size (bytes):	1696
Entropy (8bit):	7.49026962140409
Encrypted:	false
SSDEEP:	24:t0EOiTpOjlHIpnx1BA0P+EjObvA6xz+Rf5s2scH2rm/dFwmNtph8v39Y/FHn5eiB:REMLiEj9Md2scWCsmNtphG9YdHn4LmV
MD5:	4746E67EBD0FAE869FC5106F30CE41B8
SHA1:	4801596ECC316FD10D37F72296A83EB49BBF9C4B
SHA-256:	B707F6D4078674978A5681E2CF126BA96174E233E578EF4D41025F9B9CEAFB75
SHA-512:	BDA30AD6770CD7F923F640484B3E81CEB9E02535E99E761E10760C8FD2F0531E6F9E1FCD7A038C3A98D6D34DD16262865D7D33A9E0699A49340CCEC82212C141
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............u...................................................................!.1.Qq.".Aa.R..B...2r..#3.4t.5..............................?..S@.P(.....@.P(.....@.P(.....@.P(.......rK0..H..\!.'..P(+....dS....A.! 6}..t....@.P(....^.\|..<.u.$l<.....4......@.......\|...Kp...A[..a..s..&D.e.c.....Pdi.#Y..fT.g.&P...X.o..Ia..6\|..f[(.B.[.R9..}....;..s...Yn.(=W.`/.<....G......9..2..!..Xs.(.9?..k._.b..l8`.O?}.#....9.dI.4..A.P.....)bx..6.T].I7f.....z3.E.......e....l.i.Y.bT.....R[....?..]..`.ag.X.u..[.h4c..K..6{.S(`.."...Rm..U..l78..6Kc#....G*lY...h$..2W3e.....u......6.......`.6L...G.U....5.4.M.L;......<Bx......6...A.Ps.8Q....E.P.. .u7....L)...v...$v..n...^......9...D.u......r.O.A&.a.&n~.)..2ZP:.I.ap8.....@.Pg}G...3".K...Ty6 ...g...%..U.U.lC(...{...x...g;.x..ex....\|

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	7.49026962140409
Encrypted:	false
SSDEEP:	24:t0EOiTpOjlHIpnx1BA0P+EjObvA6xz+Rf5s2scH2rm/dFwmNtph8v39Y/FHn5eiB:REMLiEj9Md2scWCsmNtphG9YdHn4LmV
MD5:	4746E67EBD0FAE869FC5106F30CE41B8
SHA1:	4801596ECC316FD10D37F72296A83EB49BBF9C4B
SHA-256:	B707F6D4078674978A5681E2CF126BA96174E233E578EF4D41025F9B9CEAFB75
SHA-512:	BDA30AD6770CD7F923F640484B3E81CEB9E02535E99E761E10760C8FD2F0531E6F9E1FCD7A038C3A98D6D34DD16262865D7D33A9E0699A49340CCEC82212C141
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/clients/designmodo.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............u...................................................................!.1.Qq.".Aa.R..B...2r..#3.4t.5..............................?..S@.P(.....@.P(.....@.P(.....@.P(.......rK0..H..\!.'..P(+....dS....A.! 6}..t....@.P(....^.\|..<.u.$l<.....4......@.......\|...Kp...A[..a..s..&D.e.c.....Pdi.#Y..fT.g.&P...X.o..Ia..6\|..f[(.B.[.R9..}....;..s...Yn.(=W.`/.<....G......9..2..!..Xs.(.9?..k._.b..l8`.O?}.#....9.dI.4..A.P.....)bx..6.T].I7f.....z3.E.......e....l.i.Y.bT.....R[....?..]..`.ag.X.u..[.h4c..K..6{.S(`.."...Rm..U..l78..6Kc#....G*lY...h$..2W3e.....u......6.......`.6L...G.U....5.4.M.L;......<Bx......6...A.Ps.8Q....E.P.. .u7....L)...v...$v..n...^......9...D.u......r.O.A&.a.&n~.)..2ZP:.I.ap8.....@.Pg}G...3".K...Ty6 ...g...%..U.U.lC(...{...x...g;.x..ex....\|

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	24273
Entropy (8bit):	7.966074845908186
Encrypted:	false
SSDEEP:	384:x/2Kc9cN2pqfv8F/qYYCX6w0gSkz4gRR82J71AxeSGkBVNvi/lRHQVsoCqZBhdth:U9wiqfv85qYB6w7SEvXPAkpkB3vMlRH4
MD5:	68D8D9495F59FA5109F3B337D784CACC
SHA1:	B633224E2A9D6565EBA66A638C899F37AAB7F8B1
SHA-256:	219E1411BF6F0F877612DF839EFF4DD48DEF98AFEE959B495D9300502A2794A4
SHA-512:	5FCAFB8FA746DF7CC4CDDC424BCB6591CC3985133AB150E0AEEF1F2B229A9390E0482710AC2434D58FF080D72791A9683574CF3AB3590F8BB85B44EFA590B843
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E80C7A11D9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:E80C7A10D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="021E57B1C4B503C519ED14E6B1A969E4" stRef:documentID="021E57B1C4B503C519ED14E6B1A969E4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	53114
Entropy (8bit):	7.986356155504004
Encrypted:	false
SSDEEP:	1536:MqUsINuT5eLcF/gDHjF26Txefw8+xHSFKGC3Gv2HaIwLQ3Wx5c:IqEcF4LR26Txs/+1SFKn3Gv2HwEyc
MD5:	F7F5FC5CF2ED2196EBFEAD93DCC111F3
SHA1:	F3803DF623F4E7B71E91F42B8BDFEFE96A1AEAA8
SHA-256:	35FE99869C5779A50BD676EA89693F4044660723C5F34B870A742097041801B9
SHA-512:	D083BD533E1BBB111808E264B0D8ACA91C7B767648EF7C53A85E8E07E159142E324F5465F0069B0F7041BCADAF8F6ECAE8A9A1DE56103271F22A242FB9080F3B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""..............................................................................................a..a[i...^N.H.<z...l7W(..l.....Gf.;0mB....b..H..a_.^......&#&...u.-.f[...P..\.t..V.KI3.R.F3.d..OrB5..u..Nn.T6....j.-\.\8[~h..i..&\|.....J..N@.l"....8..r.3.Z....X...(h.iA.z...Ljx8x..........\- .,......J4s4...k.>.c3...4.....!...r..F3.[........0"....+..j...o ..[<.2#+Lq.V.T....h[....~!. ...y..tNV.1..a.{E...O.."Vd......D\|fqU...@..2..2})...-0..Z#.2d.-9O..=...B.S7...r..z...V3.~)..(u....w.~0.{@Iu.F."..u.c.e...)......,.4...x.p(.V..}.".(.[....P.~A....%#...2w..K....\|.....k....WD..I.%Cf..dKye.?..^x@r...h9.j....s..@.~ja.......c...Vc'\|Q..X......Y.x`%J....... .Ko[lY...K.c.cd...8bN f.3.{G......fg.D..7.......D...fGK.S..Y..&..E...qmm^0......>........xk...!..^....y$.l../..lTU..,...\|zM.L..Ay.Z..h\D.f.pK5.... .y....^crLD.4L

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	downloaded
Size (bytes):	1766
Entropy (8bit):	7.554488525869621
Encrypted:	false
SSDEEP:	24:t0EQkC6qOsGkBelxbo1PygRLMt7C8P9VQru6dtglakxdWAJzf/TBfHPmBh:w6V8orU1aYLU7Ci9V96rglaEsqf1GBh
MD5:	CF93E986FB2FEC5F4A4DF4079806CB07
SHA1:	1856902DF3AE293C4DEAAB0ED02C1D5E1765D50B
SHA-256:	003203F6EF93FFF338EF0EC5100D2C398794BF887317A4786BE610D9428B6E11
SHA-512:	D7CA9CD846FCD7745DCAECC1DC6EBF2F8EF5F753DA7882C956A674C904FA91E3AD965C981E5C51FB5B607DBAC312D7F2D4A54B1411CB02487B52C12FB9B6EA49
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/clients/creative-market.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............p..................................................................!..1.Aq".Qa.2.......BbrR3S..............................?....@.P(.....,5.d.7..\|..X..yh_.d.GR..y.M@.P(...f.a.g.~.K..:...A.<.<....C.m..........@.P(.....@.PE...64..}.)s........t. ;..Y#?in...U.....y..x.[&..h.`.o.O._....0r]...v4....B....(:D....i l}.....Z.u..(.f...{>.1>.n...J..'.lw...qo..^'.<.O2.0.h....H..E....(`.#.)e=.V,.n........S...v..{j.ev,.k..k.k......F..,-yD...T..6........%..o]E.Z.Y...l....PE......2K......j.h.....@.P(..._.7~.....[.....g.<..$}.w....e.(.Y..@Y........}...........?.....0.....M.:.k[....p.X.~C..m\....6^..L.23a!..;...l.r...W..v,.. .......o.=\....K~n....f8I.....B..Pa+.=.....O.^KxG.no...8....t.......Ar:}..S.....qJ.&.v.1I......Ak..}.p...B..qsak..A..(.....@.P(..O.s.../..U..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	7.554488525869621
Encrypted:	false
SSDEEP:	24:t0EQkC6qOsGkBelxbo1PygRLMt7C8P9VQru6dtglakxdWAJzf/TBfHPmBh:w6V8orU1aYLU7Ci9V96rglaEsqf1GBh
MD5:	CF93E986FB2FEC5F4A4DF4079806CB07
SHA1:	1856902DF3AE293C4DEAAB0ED02C1D5E1765D50B
SHA-256:	003203F6EF93FFF338EF0EC5100D2C398794BF887317A4786BE610D9428B6E11
SHA-512:	D7CA9CD846FCD7745DCAECC1DC6EBF2F8EF5F753DA7882C956A674C904FA91E3AD965C981E5C51FB5B607DBAC312D7F2D4A54B1411CB02487B52C12FB9B6EA49
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............p..................................................................!..1.Aq".Qa.2.......BbrR3S..............................?....@.P(.....,5.d.7..\|..X..yh_.d.GR..y.M@.P(...f.a.g.~.K..:...A.<.<....C.m..........@.P(.....@.PE...64..}.)s........t. ;..Y#?in...U.....y..x.[&..h.`.o.O._....0r]...v4....B....(:D....i l}.....Z.u..(.f...{>.1>.n...J..'.lw...qo..^'.<.O2.0.h....H..E....(`.#.)e=.V,.n........S...v..{j.ev,.k..k.k......F..,-yD...T..6........%..o]E.Z.Y...l....PE......2K......j.h.....@.P(..._.7~.....[.....g.<..$}.w....e.(.Y..@Y........}...........?.....0.....M.:.k[....p.X.~C..m\....6^..L.23a!..;...l.r...W..v,.. .......o.=\....K~n....f8I.....B..Pa+.=.....O.^KxG.no...8....t.......Ar:}..S.....qJ.&.v.1I......Ak..}.p...B..qsak..A..(.....@.P(..O.s.../..U..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x904, components 3
Category:	dropped
Size (bytes):	36832
Entropy (8bit):	7.965466296680534
Encrypted:	false
SSDEEP:	768:5iw/0XwSvK0XHaY1fX9xopt4IZlTlYGPfwNrTNLTqrWuX62tghwQsCF3:0w/0ASvNJXcpxlTqGPIRNSbK3hf/F3
MD5:	04BF80AED63EBF53F05C487A12258F35
SHA1:	1A5BD2F3C3C6654EF21E1AE9A592A721A8F67882
SHA-256:	347A5C6E28A5469A1FD540FEC5FE4C519B3AC1CDAE5E54D09FBF95EA436A30C4
SHA-512:	E5CA202F1934B6E6E59EB800540CA167268D5825221C9BBDAA2C215241D11437C0E2782F8EE095F4ADE8472C844DD0136E90A0429FA6A5890041F23D27480750
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."...............................................................................7..D..c.c...X+..4.-r.,.d..$...)....).#)...%u..[x...5.j\|......J......!..i"`..&VIel.aTdA.t.p.nFj.JJm.X.u...Y..7.A..L..IP..4.P.3...,.:..Y...U`...MtW.\...M.M...c...BW._n=......e%....E...Hu..P......%.4.`...l..+."Q..Ja.Q...2.>.J.l%.D....0D...K2.5X....E.(....7UX...sGW-.......3S.Mp...y..]L..I2.....a..L...... .0.$...(....C.U..@k.-g.".b...Hs.6,..CJ..+)O5..,.<L.P.D.J.D.L..^.9..gv5 t.=..i...P.e.d.:.nm\|.[!..@,.LL.HD....&...!1 .K.....:..5..M.(.kb.cElt\|.f'5.&...&.Q..).[.,..R..P.@...V+...k,ki.E,..?\R.E.e.b...K...KH1aH."I......V@"t"`.Q.\|.f..b"E&....."Ie!..%..2.7 .D...).....S..f{...!T..W $..H.....&.h...f~..2...l.\|.6...+...D..........(....Wfu3.#(..Wc$..D..H.8. .l...h..A1..H.....2.#M.].5IiT..!.....H...QN..2..chKq\.m@ea.., ..FR. ...`

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x563, components 3
Category:	dropped
Size (bytes):	40736
Entropy (8bit):	7.949161090822048
Encrypted:	false
SSDEEP:	768:5Ti0n0FAkWIntYARsotfWYYhCcDiT2mkx3UwJqWnT+Z3GX7lKFhnfX:Yi0KNY9Rso5W0CbUwXnUFJP
MD5:	83644AE25B3EE9666A389DB453DA1662
SHA1:	88BEE5CA740AEE64763FCB8CC2BBCAFB1D71385E
SHA-256:	CF28F0D6CA7A63F535200B4CA041E0ECFA67AE0CB20CBB52841A4C1B5E1DF526
SHA-512:	7C32FC002089AD0BD37894F190A2C4024D7E3073833F0FE61F749FF003D2016684F873B9403E7C917E78AD2D48B413ADB8F2A03160E3C0705666DCE7227B85AD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG......3.................................................................................R.]h..!.... $...B...........%`....e.9y..r..s=.A...j...+.Ri5M...@.0..0..1 X.`@.@.s.....e..B....F........(:...e..XP. .....9q.s..vMz....+D..l....2J....G$...p$....J..J.x..9XMZ....b..#._U.....=......F......b.....e....yc4A.^.R..X..0.9%.. .....c...rF.....Q.,....G."....k;"@.H..CH .ZO...+....Y...A.....+[.........(..X..H.9.I.....3#..JY.@..0.-...H.......@..q.\|`/..y.9.)I.@.iaA.;...$..@QZa...f.h.."$..B.4.Z...t..A%......s.=-......h.A.2..:..9.c...J. ..).9.@..9.[.7..n..@2...DHS...s......Q@.$p......$.cu..y...F......N~u.1\.:).-7.R.........1.H.A..u..dd.kX@%."j.$q.$.\.4.@....`.1`.X9q.......@...i..j..m3....s.^r.g<R...S.s..#.j(<.....)[...el..RI.........1h..T8.@..Ws#...H.. ..A..x.yaYU.d8G`c1a..F3.....Vs.R.K....z.d....W5..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x467, components 3
Category:	downloaded
Size (bytes):	29475
Entropy (8bit):	7.964813406644292
Encrypted:	false
SSDEEP:	768:5NHIgZColW7LFYCXfKW/WWbOmJrVry+Aw7efdctNm1S9Pe:zIgYxLFYgfKW+m92+eGo6e
MD5:	1B9F0621A8B691A69F09D62FE14D18BB
SHA1:	8FD91697C960F9AC138A34D537D9B3A961452CE5
SHA-256:	A5636187A5AEA485BD14728197A8E247AF0CDB9034DDD57B883AD680DC3D54FC
SHA-512:	196CB8313774F2272F35380A832AA32384195E0EC044A7EFBFFBC18ED801FF6E2E7149AA1EA3DAE6E514A45E02C06219E2A538826647C4939454FB32FF0A2287
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/2-full.jpg
Preview:	......JFIF.............C......................#....*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."................................................................................+.y.2.L.#4.H..#B.(.D............A!....R."..2.......!..+....3.!.. .i\X.Qb...T...)}l...].e.bZ.$....B@...@......"B.........B..$ ..Q.Q...$ ...$ ..`BB"FaX..+.#R.....j........@H......D..............L..........!.....0(...HA0.!......H.C..."X....Y.y...V$..$.................$...............B.....e.. ..$ ..e".....lR..MM.......D.......................!............D.....(..!....+.. ..$43.....$............................B3..5.......Z....=_.H...........(...H)"$:.4..(..H............................y.+...Y.....:..{\|....~...:............(..!.!..h...T. ...........................a........tu.q.=.].p>....>.>'.p............L......!...G...=..&...Q......7...?..{g..z......."..H,+..eU.`..s..s.7.".........#.Y...O0.zS...p.5...'\.p......s....x..~.....>..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x933, components 3
Category:	dropped
Size (bytes):	52803
Entropy (8bit):	7.974603705569533
Encrypted:	false
SSDEEP:	1536:AuGTlRMnJyEyxe8/SlA5rNNKDf6rRpBC5eIawZ1VDo12U:AuGUndA5A61DrwZS2U
MD5:	8C1228B6CA424BEADE57A0725019E74D
SHA1:	A549C99BAF576DC34B2893CE8E1A301CCF915589
SHA-256:	04EDBE8BFA36FA7EAF25809C84E29BE4CA397A7013D11A0CF7B77A0CB1308D03
SHA-512:	250C173EA68376FC43B99E5E8DD6F9D26AC5369523C7946D4BD496427CD7851BDCCFFB4C87B3F5CEE52F9792C229FAD18FBB52FBA028B89B1C2073980D175E86
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..........."................................................................................I..+...^...&....-M\|m........\|..Q......8.G'.].h.~..-..d..z!.....Xb...\|...)."..xZ....6.. ..`N..3.:H.N.).d.$..y.2w.y .k....)kd...Hfv...F.....I..\.k.!X".^..(.f.Q..m.w..mg.q.-W.1......+df'}......X;...A).(q.r..rB.T.c{....^ltX1..u....[..sq..\..G.4>.n8.v..Ev.k..x........T...A.......A.y[........<.....;L.p..I.!.Y0SI.$..R...5.^.Z.....pv.2.L.r2.....1Q.^.....}O?@9.dnQ....t.m.6d..t.9W..+..k...m.,2.t=./...'.O...>.<.C...X..u6.g.}&....m.0e..%..X....kn\|.Cq.HN..A.<..C..."..3x.S.ss.s.... ARh..t..T@......(..:Y.D....J..:.k..RR.N+"....;@..Z....E.sB...e...O...tn..MYt..7.R.9.p.7.o--nkB+...8p..q.p.c....n+`.VOM.....:..Y.R..S........2.{... ....4.....I:hdp..oU.\r...t8.p.:A.O'Z+?3W)..QR.....0.y.j...<{..P.K..Z.....]T..X....IS.Q.:.W.Oh

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	16561
Entropy (8bit):	7.941205479839526
Encrypted:	false
SSDEEP:	384:RoNwFI776GYguOxDIhKeHU4Walh2usy9SqLySbd6Z:RGwCGdOxDIc4SdRSJ6Z
MD5:	80C8FF5C4A1A0775616A5541086B1D51
SHA1:	C5E1D7AD66CEC4B4981E623EC59727CF9B8B0982
SHA-256:	98385E4728D507CC43FCB0895E30063193A06386A4B03C78427D1AF95ADDA83E
SHA-512:	A7E73B4EA8777F2E9D60BDA8A00416F53F2AE345D387AFA59AFA5A27551CBB0F30EDAAA5D1F7DA818AABB37424C36C1AE5D3DE7E3024E899754E5E96F4BDCA70
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:B322490AD9DE11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:B3224909D9DE11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="F5B275253242AC8F0FE7608D91CFDB45" stRef:documentID="F5B275253242AC8F0FE7608D91CFDB45"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4902
Entropy (8bit):	7.83296936442021
Encrypted:	false
SSDEEP:	96:rRaWWwHzr4XH2Pb/sJuIVpYSLjCTpLtmS2TqjPadHbE3FV2IRRKfK:rRavwHzwHaMu82SeLtIqLad7E3FZrKS
MD5:	D39BBBD72226ED7C69D4A766FF10C212
SHA1:	A52DACE1CBF15FD471CABE60FA16F6F9F9898CAD
SHA-256:	BE114343E6BB5DD2BF254FD9F956B6D6B90459AC39E3E175CE9599CC40865FA0
SHA-512:	2ACFB9328DFFB40D6794AF241A44470252E286DA011F070999995DBDFA7BFFB775BF2015AE377CB7E2E7AA11AC594123667FA0573DC3C374174F415E689BF080
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d...../Ducky.......<.........S.A.M.S.U.N.G. .C.S.C......Adobe.d........................................................................................................................................................................................................................................!1.A.Qa"..q.2....B#..R..b3r.......................!..1AQ............?......` .@!`0X..A..m.@....l&....l.l.I....H.....-....l.I. .....B.j@!a.,...........6...6. .m...I..........A-..@!..%...7......@...aU.6....*.,............l.l.l ."...l.HT....l.[.R.-.....+.[...hk`...,!.........Pm..`Ka....T....+ ..%..H..%<$P+.@.i... Y..l.l&...,.....!`. Ka..T..Ka.....-.B..l.l.l......@ZH.V..m.,!..B@`.....`.`.`.M+.[.[.[.Y.[.[.SJ~.([.[.R@-.-...et......@..'D0X.M)O:..D, .(k ...X......O8.............+ ......H....$P...m..PBB.H.g. .(6.........@J.J.i.[.[.[.[.[.[ ....l.D(........N.p..X.,!... . .!...$.d.l.l.P....a..............!XP.@-.......$..J.H.d.d.d ..B@.@6@.@.@.@.@.@.B..@.@......!HR.....+..,...0...}..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x50, components 3
Category:	downloaded
Size (bytes):	2040
Entropy (8bit):	7.637375451795322
Encrypted:	false
SSDEEP:	48:+UFH3+2miD9yc4xhMsgr2nyYAn5spwzv9:+UBO2dD9ycshqr2nyb5spwz1
MD5:	C42066B3ECD8AF382001744966BE2EB3
SHA1:	0EB68B965A702719235DDFBB68C24CA5238F9EBB
SHA-256:	6C787A84359750D64158623D117A1810EF1DDA2F6769657E3AEABF640355DE87
SHA-512:	D259BFB5D3F7B6CC93B5846C840CD7B68E1D69871E8DE77E3DA66C8A402C681A714BDE27FED330B5B06EC5B3CFB1F9062322B5F7D2F4D41ABF5A5A5B5C7FA119
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/clients/envato.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................2...............y.....................................................................!.1AQ"a.2.q....R...Bbr..#.3s..$...............................?....@.P(.....@.P(.....@.P(.....@.P(..g..#....h...f.P(.....@.P(9...G.s../.c..n.v........\|.5...NS".Z.y..F.UbR...}..M...@.P(.....!.....#......&.2..U...h$.wqc,.Mw.....G.7.4.l.'i..R.If.,OM..A/........Wn....,.tQ.=O.....G:w......T.f...6..)...A.,..rkKy....m.<a..&}..>.\i..u;...\.........b71..5fr..;4...+..l....Ju..s.S..#M......J.L.G.q>so../Z..yc...2i>....P..t....j.7.[....H".FuPG....4....E....d_C*......B..Y........8......]..b..I+0.C.0F$..}ZtQ.......Z...$F.4Q..M.S.'..J..S.s.2....rG2.!.#$/..o'`G....7..'..de2._I.......(..t....}.lE..9.ii,K,6.<..e....>.Pf.\|.1l..W..%.B.[{...Ye...c.....xkA.v..]....-...$.Y..F.k..5.....c9..#w..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1609
Entropy (8bit):	4.612922630249759
Encrypted:	false
SSDEEP:	24:2c0K+Ew7YjjWX7oHXuF9NCTYb+T2mRjAVq/TQLr12CJq9/L2cuRcUCW2V:70N1X7cXuj0TA0l46TQV2C02ckcUCt
MD5:	ACF54D2FF1689DDC6EAD1711BE64020A
SHA1:	DA009EDA42A5EA07323FAB9F73EEDDC8A55A6F2B
SHA-256:	79982B2D03CA9CCCFD31E62472DD794436CA1A3106C97F5F01491F2E6D36C094
SHA-512:	2A4805BF9F4EAD49FC68EF89A5320E878ADF8ED85AE0B983D9259994A1B34F3199CAA40C89C18D12509D230A3C09EE20B8214DCA58D11CD3053DD40E71D5730F
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/js/agency.js
Preview:	(function() {. "use strict"; // Start of use strict.. var mainNav = document.querySelector('#mainNav');.. if (mainNav) {.. var navbarCollapse = mainNav.querySelector('.navbar-collapse');. . if (navbarCollapse) {. . var collapse = new bootstrap.Collapse(navbarCollapse, {. toggle: false. });. . var navbarItems = navbarCollapse.querySelectorAll('a');. . // Closes responsive menu when a scroll trigger link is clicked. for (var item of navbarItems) {. item.addEventListener('click', function (event) {. collapse.hide();. });. }. }.. // Collapse Navbar. var collapseNavbar = function() {.. var scrollTop = (window.pageYOffset !== undefined) ? window.pageYOffset : (document.documentElement \|\| document.body.parentNode \|\| document.body).scrollTop;.. if (scrollTop > 100) {. mainNav.classList.add("navbar-shrink");. } else {. mainNav.classList.remove("navbar-shrink");. }.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	16792
Entropy (8bit):	7.946981246740949
Encrypted:	false
SSDEEP:	192:gT33awxJw+xwrRF+kIzQ1SZVXwsajDWpsIJ0rnnab2kuAxXQEW5xTv/GIn51wXG6:1ExrbfXy/W/JuabRuL5N/Xakzpc/9
MD5:	EDA4598198A00832FB334D5A4E588EAD
SHA1:	3E9A5A1FECC4A5D6E773714ED1770776916DDF4E
SHA-256:	34082520946F6C2DB3E4DEF195C436322E5FCA75DBAF1298E8889A0C52C6CC40
SHA-512:	A16B51C5BDB7C0207FAEC79F69926204270A925D4BBCC0C5368ABA22F59EC495DEAB4D8E09BE43591EF625DACDB24A9C6D1AC6EC9184978EB99100A5C31CFB2D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:775C1488D9DA11E6AC7DA0B83C48C5D4" xmpMM:InstanceID="xmp.iid:775C1487D9DA11E6AC7DA0B83C48C5D4" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="E38EB60AEC3B5F86E677D228F18BA596" stRef:documentID="E38EB60AEC3B5F86E677D228F18BA596"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65154)
Category:	downloaded
Size (bytes):	209628
Entropy (8bit):	5.0339121920718055
Encrypted:	false
SSDEEP:	1536:1tQ90fAgON5Bol/p+5ylQ5DCwEOYNCkVTmrjY82oUcyrz5ZdBB:1tQ90fAAwYNCkVTmrjY82oUcyrzd
MD5:	46FEB92613AF999EBBEFE88000B85E61
SHA1:	2735934A8D702723B6D65C8A05F62F95C9B127B6
SHA-256:	0B68D5C2B051C67C62CEA01AEB2D984A8656607A43E8D699DF04B6A845B68087
SHA-512:	1486A335409AA6AF3B6F076E8012935F01C4960E8AEF354F852B42FEC149E98630647D5013246B20D11ABE1D8C9FABD7D43C11B789DD3FD3F2AFB26D224951E6
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/bootstrap/css/bootstrap.min.css
Preview:	@import url(https://fonts.googleapis.com/css?family=Montserrat:400,700&display=swap);.@import url(https://fonts.googleapis.com/css?family=Kaushan+Script&display=swap);./!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue: #0d6efd;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #d63384;--bs-red: #dc3545;--bs-orange: #fd7e14;--bs-yellow: #ffc107;--bs-green: #198754;--bs-teal: #20c997;--bs-cyan: #0dcaf0;--bs-black: #000;--bs-white: #fff;--bs-gray: #868e96;--bs-gray-dark: #343a40;--bs-gray-100: #f8f9fa;--bs-gray-200: #e9ecef;--bs-gray-300: #dee2e6;--bs-gray-400: #ced4da;--bs-gray-500: #adb5bd;--bs-gray-600: #868e96;--bs-gray-700: #495057;--bs-gray-800: #343a40;--bs-gray-900: #212529;--bs-primary: #fed136;--bs-secondary: #868e96;--bs-success: #198754;--bs-info: #0dcaf0;--bs-warning: #ffc107;--bs-danger: #dc3545;

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	57553
Entropy (8bit):	7.988681499744298
Encrypted:	false
SSDEEP:	768:cM9JzehUID7Xbc/HeqTrez1ltDKRkEIa8Gln4P1quZkP624SRugQJ6k4qI8oSy:cM9NepDDbcmQeO39kX8ugQiUVy
MD5:	9278D62BF6F952A832A87190F4484258
SHA1:	97C83AED27B7A7CB8ED80EC30CA9A233A514112E
SHA-256:	A633FE04C578F10B45C2DA6FD48B563119C8EA7999747A5FF2A62D35882C5554
SHA-512:	052D404D251E8FD11553840FA3C6C83961380E1363BF14088EE298EB2DD7F5DCA52661B1AB142696A8F106C8DA24C2CAAD26BE26A19E1DB96200AD504506FD38
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.................................... ("..&...#0$&+-.-."251,5(,-,...C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,.............................................................................................H...Xu..v.Z.8....V..~..\|...]..p.J.(.....(..Q.....@...~....uS..z.[......G.]28..@.&.C.B.P....OM....$.&.H%\|>.....;.C..^...#.v\|?..".h$........DEK...z...3..d ..SD.T.u.n.u .A...I.B,g.q....vXfUYE.....a.q...P5.8d."..@.>.l......._A.HK..R.b\.l?TF..+A....tvC.B.a.cP.\:k3.!..Y.....-i....\...P..(`.m..FoB.R..e..1...."..p.;.A.Ve&.n.].B ..6g..W]...r.B...`.Bd'AP....r....}...)..w....Fn.f.....P...+...g...E._..).#.{=.t.N....L....U`..2.YJ.E.y.......B=j.+.A\|}.....g.A.K2?S.<..c\z.Q).'...gA.L....h.1...4.f..=k&t...J.O,I...q..c]..J..T..\|1.B..^I...M{E..URa.et*.(....._.T..,?S.<...ytB..i5R..q.Yz]...U..+..g...W....dmxR.1...f..\.>.).....O.[.0..hk2.z.v.M.rt/a...M.\|Y4......i/.\]7..q?S.>....g3^-i9.....m~~).+....D..e1..<.GN...u.GZi[.@.t..n]

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	15337
Entropy (8bit):	7.964137910492416
Encrypted:	false
SSDEEP:	384:mXwJTqnBicEF94Kk30p2BU3NiI3eZeDKoVgU/4ogJdhsc:YETqBusBkkB8iIzmoVgUAoa0c
MD5:	A90B0F86F471B7840C8C3B678620CBF3
SHA1:	FD994613711AC2A5488C18B87864092FA171FFB9
SHA-256:	68C9FE6C4B846D6A591117F071D063FCCDE5B40D647EC0642BA2EAA843202443
SHA-512:	D9EB643BBCD621D788869DE7A03750F6ADAEA41573D659ABAE4FE98B839DAC33E99B1D69CA12ECA0DDFD9DDDFD2DFAE3639A2FAE57010CB39933C32EAA5857EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!..1A..Qq".a....2B#..R..br.3C...$....4%..Sc......................!1.AQ.a...".q..R....2.B...br..3$.............?..=.....:jZ..Eq......q..+........W.7...[XTzU.qn?....5.Z..;).....@S.`V..J...[...+.L$.r..aQ.@.....8NF....u....7c.{..k..01;..AL.S.a<l.T$...?..*..../,R./(.....X..'..].{.Z.hi..1; z.."....)..=..Nxp.E6.%8\..@.G..>#....H........!QL..E.....1......,.:...ZGB./,R....2R64P...]Y..0._.P.~x....0.`..b<l..R3H.L....XRFY.0.&.....^...V..smO.^......u......I...qc.S.r..A..:.....(..\|x.... .Hw..U....s.t...>"W........p.h...t..R..`cR.....>(W...H.890.Poml.D..j.Z...k....Hp$"..I.\=I.WF.EY........?......O........rA.p....bx..!.v....y...=B..KI..g.:,&aV`..8~D/.g........<.......N..0.B...[rM..^..s%.Lvg

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	6987
Entropy (8bit):	7.931488476750541
Encrypted:	false
SSDEEP:	192:IA26O4v3i1xvazSr8NFtcXULtHBW6gAKmHkN3:IUV3gbD+m30k5
MD5:	7E4F5EC6D94AA0C08C155426257EAA4A
SHA1:	E7BB54B033B40E313A642650C5066216C08C62B2
SHA-256:	1F933FE896090A71940395CB1E2AEE34FC861D3121CED2904943D575F46D7BDA
SHA-512:	53385467097963D2F750F9AAB845AD0AF9CBCFB538210BAE89993B2FDD505158B3A568064EB58896477F368DAF2B162908617CF6EAF369E36D99AF8B5F39EA22
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/about/1.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!.1AQ.a"..q.2..B#....R.b3....r..cs........................!.1AQ2.q"a...............?..0+.{.(.@.NR....U4.8....O.F4.M..\.....j.IEH7.I......B........Qc/j.S.,MQ.)nUR...~.ZX.9.....5j.a...h$....F.....v..S.;&.....5..j.xF...4.b)........Wl..d...X..j......"...:UJ...1THP....d........o.. .i.v....0.#.y...3.N...:S..,m....Zz...i...:b.<.=..N...3i....2..xZb...jI....bKUD.Z4`\\Uib.mJ..5...m...3m.0@.zS..m...S.{e.W...B_.2..J..:0.a@.U"m...T.SoJ..QU"t..T.jIP5..Qh...\...%.j).$....cV".8+.......j.R..1[J4b8Q.........(..L... ).c........1d.:r..0MU..Ra..D.y...SM.....Y.=....b....?.....}(....U.Xv...&....W..T.54Am........&..N.mQ2....EF.......,.^.X......Z...8..2E...g`.....S.-..d.wk.&_...U...*.u.....q..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x875, components 3
Category:	downloaded
Size (bytes):	95809
Entropy (8bit):	7.986141061147875
Encrypted:	false
SSDEEP:	1536:FlbA7ujOrinCgWK5gwR4l4+GTI4wEgS0mXmXviAtNPb50tGCmm3hIUhzJjFv:Fl/jOriCgxB4l425RXviyd0VJHhzJj5
MD5:	E42F6719D4290BB44977898BFA37709D
SHA1:	589151A92BAFE4D4AD8304902E7C4238EA879106
SHA-256:	51E06A6981A11EBF294676D4B274739B75A5E9491339E33D210D49817D6E86F6
SHA-512:	76FF00CB61FE02DFA8A2BC7571F7F5F16AAEB0BBB8D18C94722E1E18539E037FDB0344BFF9D2A6409EC507F4654D65B8364FE981C9874EA286D96DCB169EFE64
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/5-full.jpg
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG......k...."..................................................................................F.....I....GU.].)$.7.J..D.sc..sGQ..6.......@1.PL...",sDO..3g......V=.x.........eh0.s..+.....gI...J.F.5X.0T1y..'Er.j.g`v....5.+q]....)ZC..{.Q....A......J...5.A..nnh.........(.1...F...4..k.9...R.._...^..JQ...BF#..S...l......if.v...^.B...+..9.p........TA@..F<..0EO/.5.pFH,.i.....Z....0..k.sF=.......d.F9.AY4.RF9.-`.GZ.).:...W.G........9..`...V.....E.&...."...c.g.ftgi..xfi<.\......yb...#.......,>_K...].H.9c..9g@@Q.k....n#C5"..r...$#..W...UD.\|b.RTv.....C..-GR.#..h..Vl.IJ....g.......8...-%..^~.L..=t7.c......`.*..n....W]F.".v..E.....Y51.FWd....\.BtE..5....ss@hX..C..V....".. ...&..../..4.~kDrl.H.d......\,g.s..\|iu^}......fh......t...Ckac.....<....'a...+...#&..eI.\|..A8k2....a..6....]]ru..%.6.9..tE....,6f.k]...4.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	15337
Entropy (8bit):	7.964137910492416
Encrypted:	false
SSDEEP:	384:mXwJTqnBicEF94Kk30p2BU3NiI3eZeDKoVgU/4ogJdhsc:YETqBusBkkB8iIzmoVgUAoa0c
MD5:	A90B0F86F471B7840C8C3B678620CBF3
SHA1:	FD994613711AC2A5488C18B87864092FA171FFB9
SHA-256:	68C9FE6C4B846D6A591117F071D063FCCDE5B40D647EC0642BA2EAA843202443
SHA-512:	D9EB643BBCD621D788869DE7A03750F6ADAEA41573D659ABAE4FE98B839DAC33E99B1D69CA12ECA0DDFD9DDDFD2DFAE3639A2FAE57010CB39933C32EAA5857EF
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/about/2.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!..1A..Qq".a....2B#..R..br.3C...$....4%..Sc......................!1.AQ.a...".q..R....2.B...br..3$.............?..=.....:jZ..Eq......q..+........W.7...[XTzU.qn?....5.Z..;).....@S.`V..J...[...+.L$.r..aQ.@.....8NF....u....7c.{..k..01;..AL.S.a<l.T$...?..*..../,R./(.....X..'..].{.Z.hi..1; z.."....)..=..Nxp.E6.%8\..@.G..>#....H........!QL..E.....1......,.:...ZGB./,R....2R64P...]Y..0._.P.~x....0.`..b<l..R3H.L....XRFY.0.&.....^...V..smO.^......u......I...qc.S.r..A..:.....(..\|x.... .Hw..U....s.t...>"W........p.h...t..R..`cR.....>(W...H.890.Poml.D..j.Z...k....Hp$"..I.\=I.WF.EY........?......O........rA.p....bx..!.v....y...=B..KI..g.:,&aV`..8~D/.g........<.......N..0.B...[rM..^..s%.Lvg

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/fonts/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	16604
Entropy (8bit):	7.955359900928637
Encrypted:	false
SSDEEP:	384:0w5MhK2pMojxWKHGfbX5s7XF6rblN9lBU94V62NtN4l4Ypo6:t5CKFotWKHG1s71UldbHN4Hu6
MD5:	09C41872BA6C96C6EFDCAB7F202A71A7
SHA1:	11893C68EE89DFBD5BD668B41AF1EF3AC0E3AC7A
SHA-256:	55C78F7452D3B8BCC9693734600004633112FC4EB0016B7E8E793C64DDBA6589
SHA-512:	D9BB4ABAED3223BF67487CEED46B42D6A5BAE6C906D8D7EBAC01E8F8B1D068FF567A7C2ECB72F197C752FBF8AEF53DCF9393E04CEF8664601E41F58E605A2077
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/3-thumbnail.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EACABC75D9DC11E6ADC3814EE65EF29A" xmpMM:InstanceID="xmp.iid:EACABC74D9DC11E6ADC3814EE65EF29A" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="E288BF02714491AF5321FAFA7115F41F" stRef:documentID="E288BF02714491AF5321FAFA7115F41F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x875, components 3
Category:	dropped
Size (bytes):	95809
Entropy (8bit):	7.986141061147875
Encrypted:	false
SSDEEP:	1536:FlbA7ujOrinCgWK5gwR4l4+GTI4wEgS0mXmXviAtNPb50tGCmm3hIUhzJjFv:Fl/jOriCgxB4l425RXviyd0VJHhzJj5
MD5:	E42F6719D4290BB44977898BFA37709D
SHA1:	589151A92BAFE4D4AD8304902E7C4238EA879106
SHA-256:	51E06A6981A11EBF294676D4B274739B75A5E9491339E33D210D49817D6E86F6
SHA-512:	76FF00CB61FE02DFA8A2BC7571F7F5F16AAEB0BBB8D18C94722E1E18539E037FDB0344BFF9D2A6409EC507F4654D65B8364FE981C9874EA286D96DCB169EFE64
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG......k...."..................................................................................F.....I....GU.].)$.7.J..D.sc..sGQ..6.......@1.PL...",sDO..3g......V=.x.........eh0.s..+.....gI...J.F.5X.0T1y..'Er.j.g`v....5.+q]....)ZC..{.Q....A......J...5.A..nnh.........(.1...F...4..k.9...R.._...^..JQ...BF#..S...l......if.v...^.B...+..9.p........TA@..F<..0EO/.5.pFH,.i.....Z....0..k.sF=.......d.F9.AY4.RF9.-`.GZ.).:...W.G........9..`...V.....E.&...."...c.g.ftgi..xfi<.\......yb...#.......,>_K...].H.9c..9g@@Q.k....n#C5"..r...$#..W...UD.\|b.RTv.....C..-GR.#..h..Vl.IJ....g.......8...-%..^~.L..=t7.c......`.*..n....W]F.".v..E.....Y51.FWd....\.BtE..5....ss@hX..C..V....".. ...&..../..4.~kDrl.H.d......\,g.s..\|iu^}......fh......t...Ckac.....<....'a...+...#&..eI.\|..A8k2....a..6....]]ru..%.6.9..tE....,6f.k]...4.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x933, components 3
Category:	downloaded
Size (bytes):	49855
Entropy (8bit):	7.973114669534577
Encrypted:	false
SSDEEP:	768:5FGIKXCUZdF9I8cGttJLywU6umZ9jlRXfattpVk5hlXOJjNAoQUEot/MbTSrdG:DGIKvdF908tJWzEZ07pqjehWBEM+G
MD5:	52C28AAF5503CA751649B72062999A54
SHA1:	1768A6E33CF1598C77A7D43BEBF86767E4F7F921
SHA-256:	A37742EF074217A5EE5F832E9DB265F88BDC72BBB6D73017929B225CFC01BC95
SHA-512:	61BA16E87AD36D7D061FAC6EA0C06670A42DAC1043CA2114501CDDB6BFEB3B9E3E04AF8FA03E8B524FE61D880FE42FAF1B3BCCE998FB8ED04D7EFF048EBD676D
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/portfolio/1-full.jpg
Preview:	......JFIF.............C......................#....%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJG...C.......".."G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG...........".................................................................................F..k.:.I..........i..d......G.n.:~....9.......8.~_....@..&....\f......h.E"..H.s.$../.._h.va..\L.N.........)..zW...g= .M...{...w...S..<n....{A.y..yj..g...y..w.h=.5.......s1..rG ......=;0......G.4...H..O).....A1.H.3.9,...T..e...........E..:....g.^....50[..'F<h.b9.p.o9...#.k.9./S....J..ej.q.x.T..@P)...U1...y..Sb.EO.. ......."@.9:."y'......Wv$N..2..$.i<.jj..Q..n.@.k..5._!..X.e....L.......V<..._.rz....K%..:..^9.\.......@...c...p;..T=z\|&.Tq..G..~L..}....Hh.....^....-&f.=.szyF.l.. ..y.......<.[Hi.3..=..#a.dr.zF?t.o..A...w7.#..2.K.r.B~_V..Q\a.}*c...zm.......OM.n...m.H..p[#..r...:.//4..=.!.sLfKs.F..^.i.....N..D<...h\|K.0...6O{D.f..r.{H...9o=.7..o...x9.H.2.?.<.......y.A4.....n..i...TS.....f.o.....r!&\|....>.v\..>

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	7338
Entropy (8bit):	7.940726473396747
Encrypted:	false
SSDEEP:	192:+iRAkXlI90L1uDvzZVtpF65XHrP8SZcTrmZRrSzkIVfz5mo:nV+LJpo57VGTr0WgI5Mo
MD5:	3FCDEDE3B85681F38CD286BDB2AF1B89
SHA1:	2532A0C5EA4F2DAB7F18D52D97C2F6DB5CB65E4E
SHA-256:	109F34460213C7A6F7D3BEC2E8E32E16D0258F8E94A54E0E651023DD744B425F
SHA-512:	21B539802CE12BD8BAF7E92167036583ECC3A1494CFE552948E9421021B304B2067C57398E062485DC57C22FB5CBA3268C134B3B590A92FD7349703E175807A0
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/about/3.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!.1..AQ".aq..2..R.#.....B3CS.r.E......s$.b........................1Q..!.A2aq".............?...z..x.f......b.H..+P!.........w^.`E<8.&L....P..{(..E.."8R........V.n;..b.....X.=4:..&..UA)>..J ...W...J.$.Vr....T.dW..".m...G.;..^.C..$.#...p.WQJ...x.S...#%.\|.N.X..k.N..FE.T............dE...n3W!$i]5.X........,kr.`....,O?e^F.X.z]..^..x...W..J;+.V..H...E%..:.y..]..i.W......o}p.u...=.".>i~#..).>..V....Q..4..d..&1j.0...A6....x......&LPmU....bU.j.+.j...(.8.FsXT..s...j".T.\..i..0..>H%N...;........F.<q."..XS^.z.qxV...&[..K...M.m.n.._/.....k.... .A....\].........-~..Q@.O.}..n...!......j..q.$...j...NS....J..4...9N..L..#.....9N..Y..}.O^...1.......S..!..kyO.O...9A.l..?.?..6.NP....?.....<G6

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	57553
Entropy (8bit):	7.988681499744298
Encrypted:	false
SSDEEP:	768:cM9JzehUID7Xbc/HeqTrez1ltDKRkEIa8Gln4P1quZkP624SRugQJ6k4qI8oSy:cM9NepDDbcmQeO39kX8ugQiUVy
MD5:	9278D62BF6F952A832A87190F4484258
SHA1:	97C83AED27B7A7CB8ED80EC30CA9A233A514112E
SHA-256:	A633FE04C578F10B45C2DA6FD48B563119C8EA7999747A5FF2A62D35882C5554
SHA-512:	052D404D251E8FD11553840FA3C6C83961380E1363BF14088EE298EB2DD7F5DCA52661B1AB142696A8F106C8DA24C2CAAD26BE26A19E1DB96200AD504506FD38
Malicious:	false
Reputation:	low
URL:	https://web.authe.net/assets/img/team/3.jpg
Preview:	......JFIF.............C.................................... ("..&...#0$&+-.-."251,5(,-,...C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,.............................................................................................H...Xu..v.Z.8....V..~..\|...]..p.J.(.....(..Q.....@...~....uS..z.[......G.]28..@.&.C.B.P....OM....$.&.H%\|>.....;.C..^...#.v\|?..".h$........DEK...z...3..d ..SD.T.u.n.u .A...I.B,g.q....vXfUYE.....a.q...P5.8d."..@.>.l......._A.HK..R.b\.l?TF..+A....tvC.B.a.cP.\:k3.!..Y.....-i....\...P..(`.m..FoB.R..e..1...."..p.;.A.Ve&.n.].B ..6g..W]...r.B...`.Bd'AP....r....}...)..w....Fn.f.....P...+...g...E._..).#.{=.t.N....L....U`..2.YJ.E.y.......B=j.+.A\|}.....g.A.K2?S.<..c\z.Q).'...gA.L....h.1...4.f..=k&t...J.O,I...q..c]..J..T..\|1.B..^I...M{E..URa.et*.(....._.T..,?S.<...ytB..i5R..q.Yz]...U..+..g...W....dmxR.1...f..\.>.).....O.[.0..hk2.z.v.M.rt/a...M.\|Y4......i/.\]7..q?S.>....g3^-i9.....m~~).+....D..e1..<.GN...u.GZi[.@.t..n]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.369299699893522
Encrypted:	false
SSDEEP:	3:OgGunSHnPsYepWnYn:O6SHPDyn
MD5:	67A2E1BFB01CA92DF6B8AA290D00856E
SHA1:	64BB8590B1848C5DE0A79675B0B41E12D5B6A542
SHA-256:	E61EF398E708F60197A53C5433B16001E35B44C63B1DB43B852308F3F777B15B
SHA-512:	803E6D24CB80FD09373BA32FA6722F2B22628DC2BFE4818C2991F965A928B855F6267569EF21AAE2240C5063B1EC2D543BCD537EE6E88491F2186EF5A20EF135
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQn9f8DSBDqbrRIFDZRU-s8SBQ2DqFs9EgUNT3z8AhIFDcZosPw=?alt=proto
Preview:	CiQKBw2UVPrPGgAKBw2DqFs9GgAKBw1PfPwCGgAKBw3GaLD8GgA=

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:34:50.143249035 CET	49677	443	192.168.2.9	20.189.173.11
Nov 25, 2024 15:34:51.243334055 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:51.243380070 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:51.243490934 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:51.243827105 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:51.243844032 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:51.330821991 CET	49675	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:34:51.346389055 CET	49676	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:34:51.596467972 CET	49674	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:34:52.549514055 CET	49677	443	192.168.2.9	20.189.173.11
Nov 25, 2024 15:34:53.115853071 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.116148949 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.152755976 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.152786970 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.153240919 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.163839102 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.207349062 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.609152079 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.609184027 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.609199047 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.609327078 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.609349012 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.609447956 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.806600094 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.806629896 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.806756973 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.806777000 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.806900024 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.850125074 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.850146055 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.850219965 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.850244045 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.850279093 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.850296021 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.995033026 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.995062113 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.995167971 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:53.995187998 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:53.995259047 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.027501106 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.027522087 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.027631998 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.027664900 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.031296968 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.047291994 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.047322989 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.047473907 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.047475100 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.047508955 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.047988892 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.065078974 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.065104008 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.065314054 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.065325022 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.066241980 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.200686932 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.200712919 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.200783014 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.200809956 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.200833082 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.200854063 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.215176105 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.215193987 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.215259075 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.215297937 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.215325117 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.219360113 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.232177973 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.232198000 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.232260942 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.232289076 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.232364893 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.248709917 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.248725891 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.248815060 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.248842955 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.248904943 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.265480042 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.265501022 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.265692949 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.265707016 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.268877029 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.281274080 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.281292915 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.281435013 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.281457901 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.284682035 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.285960913 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.286042929 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.286077976 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.287389994 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.301955938 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.301955938 CET	49706	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.301980019 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.301990032 CET	443	49706	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.689220905 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.689266920 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.689349890 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.691109896 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.691144943 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.691226006 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.692442894 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.692477942 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.692635059 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.694212914 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.694228888 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.694842100 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.694855928 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.695084095 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.695106030 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.695902109 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.695919037 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.696077108 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.696288109 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.696300030 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.696918964 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.696954012 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:54.697010040 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.697263956 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:54.697274923 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.432729959 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.487102985 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.495759010 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.549535990 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.556164026 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.556261063 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.556550980 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.596402884 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.596441984 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.596563101 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.649785995 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.649796009 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.650405884 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.650410891 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.650748968 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.650753021 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.651113033 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.651118040 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.652765989 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.652786016 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.653259993 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.653285027 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.653779030 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.653781891 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.653789997 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.653795958 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.654182911 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.654187918 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.654527903 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.654531956 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.973934889 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.973956108 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.974005938 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.974031925 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.974071026 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.978636980 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.978688955 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.978782892 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.985378981 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.985378981 CET	49709	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.985405922 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.985414028 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.985418081 CET	443	49709	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.985441923 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.985496998 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.985522032 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.985558033 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:56.991487026 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.991542101 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:56.991580009 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.013044119 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.013134956 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.013189077 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.013559103 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.013614893 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.013667107 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.016637087 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.016663074 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.016748905 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.016760111 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.017426014 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.017509937 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.029793024 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.029793024 CET	49711	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.029818058 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.029827118 CET	443	49711	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.085113049 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.085150957 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.085163116 CET	49707	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.085174084 CET	443	49707	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.092407942 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.092434883 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.092468977 CET	49708	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.092475891 CET	443	49708	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.093851089 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.093859911 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.093872070 CET	49710	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.093875885 CET	443	49710	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.123220921 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.123264074 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.123375893 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.124249935 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.124283075 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.124393940 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.125128984 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.125143051 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.125200987 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.127077103 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.127105951 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.127252102 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.127439976 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.127456903 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.135793924 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.135811090 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.136080027 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.136097908 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.137368917 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.137382030 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.138811111 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.138837099 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.138904095 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.139153957 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:57.139166117 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:57.393280983 CET	49677	443	192.168.2.9	20.189.173.11
Nov 25, 2024 15:34:58.580749989 CET	49673	443	192.168.2.9	204.79.197.203
Nov 25, 2024 15:34:58.865432024 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:58.920703888 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:58.924508095 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:58.925825119 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:58.927010059 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:58.930036068 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:58.971374989 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:58.971395016 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:58.971401930 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:58.971402884 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.485479116 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.485505104 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.485960960 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.485975981 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.486316919 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.486336946 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.486720085 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.486726046 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.488538980 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.488559961 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.489144087 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.489150047 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.489758015 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.489769936 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.490401030 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.490406990 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.490880013 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.490904093 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.491498947 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.491503954 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.809057951 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.809395075 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.809468985 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.817926884 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.818201065 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.818239927 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.818289995 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.819804907 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.819875002 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.819922924 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.819963932 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.820008039 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.825057983 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.825398922 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.825462103 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.898118019 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.898118019 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.898148060 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.898164034 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.898174047 CET	49713	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.898174047 CET	49715	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.898183107 CET	443	49713	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.898190022 CET	443	49715	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.900302887 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.900330067 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.900337934 CET	49716	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.900343895 CET	443	49716	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.901492119 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.901492119 CET	49714	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.901520967 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.901531935 CET	443	49714	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.902903080 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.902909040 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.902919054 CET	49712	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.902924061 CET	443	49712	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.926940918 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:34:59.926975965 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:34:59.927032948 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.062830925 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.062860966 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.502255917 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.502298117 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.502371073 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.592364073 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.592418909 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.592475891 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.592930079 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.592952013 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.593904972 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.593951941 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.594024897 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.594399929 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.594410896 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.600601912 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.600644112 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.600693941 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.642822027 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.642838955 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.704473019 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:00.704502106 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:00.990092039 CET	49675	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:35:00.990108967 CET	49676	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:35:01.380254984 CET	49674	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:35:01.921133041 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:01.921716928 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:01.921727896 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:01.922238111 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:01.922243118 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.377089024 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.377228022 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.377285004 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.377470970 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.377490044 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.377521038 CET	49717	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.377526045 CET	443	49717	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.380865097 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.380903006 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.380973101 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.381302118 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.381320000 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.533154964 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.533946037 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.533967018 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.534440041 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.534447908 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.594738960 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.595324039 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.595335960 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.595964909 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.595968962 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.648682117 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.649333000 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.649348021 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.649856091 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.649862051 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.692961931 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.693469048 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.693505049 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.693970919 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.693978071 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.981286049 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.981363058 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.981415987 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.981664896 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.981682062 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.981715918 CET	49718	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.981733084 CET	443	49718	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.984828949 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.984862089 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:02.985084057 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.985296011 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:02.985308886 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.040358067 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.040425062 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.040606976 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.042464018 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.042479992 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.042494059 CET	49720	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.042499065 CET	443	49720	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.045770884 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.045814037 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.045938969 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.046200037 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.046210051 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.092561007 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.092627048 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.092672110 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.103847027 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.103857040 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.103871107 CET	49719	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.103876114 CET	443	49719	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.106463909 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.106493950 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.106671095 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.106822014 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.106833935 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.148118973 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.148191929 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.148241043 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.184915066 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.184915066 CET	49721	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.184958935 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.184962988 CET	443	49721	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.203156948 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.203202963 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.203306913 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.204147100 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:03.204164028 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:03.287704945 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.287745953 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:03.287815094 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.288916111 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.288964987 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:03.289019108 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.289285898 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.289295912 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:03.289666891 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:03.289685965 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:03.711894035 CET	443	49704	23.206.229.209	192.168.2.9
Nov 25, 2024 15:35:03.711987972 CET	49704	443	192.168.2.9	23.206.229.209
Nov 25, 2024 15:35:04.165198088 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.166174889 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.166212082 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.166754007 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.166759968 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.635077000 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.635581017 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.635605097 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.635929108 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.635935068 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.637161016 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.637557983 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.637578964 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.637911081 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.637917042 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.660594940 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.660662889 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.660748005 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.661343098 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.661361933 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.661418915 CET	49727	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.661425114 CET	443	49727	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.664721012 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.664761066 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.664896011 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.665035009 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.665049076 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.929547071 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:04.929579020 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:04.929663897 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:04.929920912 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:04.929934978 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:04.961556911 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.962126017 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.962138891 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:04.962548018 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:04.962552071 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.002932072 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.003355026 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.003396034 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.003993988 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.003999949 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.024641037 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.024959087 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.024981022 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.026078939 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.026137114 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.027184963 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.027249098 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.027499914 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.027507067 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.040999889 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.041235924 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.041274071 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.042375088 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.042443037 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.042828083 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.042912960 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.070209980 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.075701952 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.075772047 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.075851917 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.076051950 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.076051950 CET	49729	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.076069117 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.076072931 CET	443	49729	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.078754902 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.078799963 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.078963041 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.079154968 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.079169989 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.079516888 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.079572916 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.079623938 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.079710960 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.079710960 CET	49728	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.079731941 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.079744101 CET	443	49728	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.082148075 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.082171917 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.082312107 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.082451105 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.082468033 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.085536957 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.085546970 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:05.132237911 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:05.417186975 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.417267084 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.417499065 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.419976950 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.420017958 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.420042992 CET	49730	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.420051098 CET	443	49730	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.426054001 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.426105022 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.426287889 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.426549911 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.426559925 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.452663898 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.452721119 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.452794075 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.453145981 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.453145981 CET	49731	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.453170061 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.453182936 CET	443	49731	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.456043959 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.456089020 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:05.456425905 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.456609011 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:05.456614971 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.017914057 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:06.020215988 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:06.020278931 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:06.021164894 CET	49733	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:06.021189928 CET	443	49733	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:06.072314024 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:06.072369099 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:06.072462082 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:06.074297905 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:06.074312925 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:06.195571899 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:06.195633888 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:06.195804119 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:06.196192980 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:06.196216106 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:06.330329895 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.330918074 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.330941916 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.331470013 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.331475019 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.784719944 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.784802914 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.784912109 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.785018921 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.785043001 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.785058975 CET	49736	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.785064936 CET	443	49736	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.789423943 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.789468050 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.789540052 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.789733887 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.789747000 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.793128967 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:06.793409109 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:06.793428898 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:06.794501066 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:06.794612885 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:06.795591116 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:06.795659065 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:06.836746931 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:06.836777925 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:06.882997990 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:06.920614958 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.921077013 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.921097040 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.921876907 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.921885014 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.929689884 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.931339025 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.931354046 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:06.932102919 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:06.932110071 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.006908894 CET	49677	443	192.168.2.9	20.189.173.11
Nov 25, 2024 15:35:07.253611088 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.254064083 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.254089117 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.254725933 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.254731894 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.348249912 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.348879099 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.348900080 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.349410057 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.349414110 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.363369942 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.363436937 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.363626003 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.363656044 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.363681078 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.363692045 CET	49738	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.363698006 CET	443	49738	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.367309093 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.367352962 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.367468119 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.367664099 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.367675066 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.375644922 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.375720024 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.375806093 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.376022100 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.376022100 CET	49739	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.376039028 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.376043081 CET	443	49739	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.378758907 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.378799915 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.378973961 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.379057884 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.379069090 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.506563902 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:07.506633043 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:07.509778023 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:07.509794950 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:07.510102034 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:07.551486969 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:07.599338055 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:07.698241949 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.698319912 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.698504925 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.698558092 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.698574066 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.698582888 CET	49740	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.698589087 CET	443	49740	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.701392889 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.701430082 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.701499939 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.701710939 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.701724052 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.806210995 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.806281090 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.806335926 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.806653976 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.806674957 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.806687117 CET	49741	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.806694031 CET	443	49741	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.809644938 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.809694052 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.809854984 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.810041904 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:07.810056925 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:07.994246960 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:07.994725943 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:07.994743109 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:07.996016026 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:07.996121883 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:07.997162104 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:07.997257948 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:07.997422934 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:07.997430086 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:08.038796902 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:08.086808920 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.086869001 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.087028980 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.087059021 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.087074041 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.087074041 CET	49742	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.087081909 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.087089062 CET	443	49742	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.122426987 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.122463942 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.122531891 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.123095036 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:08.123111010 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:08.611388922 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:08.612111092 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:08.612128019 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:08.612559080 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:08.612571001 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.055649996 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.055736065 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.056325912 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.056909084 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.056909084 CET	49744	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.056931019 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.056941986 CET	443	49744	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.059736967 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.059787035 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.059859037 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.060018063 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.060024977 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.448400974 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.448497057 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.449002981 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.449021101 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.449098110 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.449110031 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.449529886 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.449537039 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.449709892 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.449714899 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.449839115 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:09.449951887 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:09.449997902 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:09.450649977 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:09.450654984 CET	443	49743	172.217.19.195	192.168.2.9
Nov 25, 2024 15:35:09.450666904 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:09.450720072 CET	49743	443	192.168.2.9	172.217.19.195
Nov 25, 2024 15:35:09.524207115 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.525110960 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.525126934 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.525666952 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.525671959 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.546612978 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:09.546686888 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:09.547935963 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:09.547946930 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:09.548207998 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:09.549455881 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:09.595333099 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:09.878969908 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.879477978 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.879511118 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.880141020 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.880146980 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.892745018 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.892805099 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.892868996 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.893013954 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.893034935 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.893048048 CET	49745	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.893054008 CET	443	49745	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.894568920 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.894643068 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.894757032 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.894870043 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.894881964 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.894928932 CET	49746	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.894936085 CET	443	49746	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.896331072 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.896378994 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.896466970 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.896784067 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.896800041 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.897501945 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.897536993 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.897690058 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.897849083 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.897860050 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.971674919 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.971751928 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.971811056 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.972004890 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.972028017 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.972043037 CET	49747	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.972048998 CET	443	49747	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.975246906 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.975297928 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:09.975605011 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.976109028 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:09.976134062 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.070522070 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:10.070600986 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:10.070683002 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:10.071722031 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:10.071746111 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:10.071758032 CET	49749	443	192.168.2.9	23.218.208.109
Nov 25, 2024 15:35:10.071763992 CET	443	49749	23.218.208.109	192.168.2.9
Nov 25, 2024 15:35:10.335582018 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.335654020 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.335839033 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.335923910 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.335943937 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.335956097 CET	49748	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.335961103 CET	443	49748	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.341052055 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.341090918 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.341171026 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.341408014 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:10.341419935 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:10.932219028 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:10.994232893 CET	49756	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:11.052462101 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:11.052567959 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:11.054383039 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:11.114756107 CET	80	49756	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:11.114872932 CET	49756	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:11.414174080 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:11.483813047 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:11.485836983 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.486366987 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.486381054 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.486856937 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.486860991 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.535828114 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:11.537602901 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:11.537651062 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:11.537733078 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:11.541409016 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:11.541429996 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:11.614757061 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.615272999 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.615319014 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.615715027 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.615722895 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.942785025 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.942857981 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.942996025 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.943226099 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.943240881 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.943255901 CET	49750	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.943260908 CET	443	49750	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.946614027 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.946657896 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.946722984 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.946887970 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.946898937 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.997234106 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.997637987 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.997658014 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:11.998327971 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:11.998333931 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.013375044 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.013793945 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.013822079 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.014379978 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.014386892 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.052612066 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.052684069 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.052819967 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.053023100 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.053044081 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.053107977 CET	49751	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.053114891 CET	443	49751	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.056560993 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.056602955 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.056679010 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.056849957 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.056864977 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.139262915 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.140088081 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.140121937 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.140638113 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.140642881 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.324770927 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:12.365693092 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:12.437037945 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.437108994 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.437185049 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.440032005 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.440058947 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.440079927 CET	49753	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.440085888 CET	443	49753	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.445434093 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.445482969 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.445604086 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.445946932 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.445966959 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.470571995 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.470664024 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.470729113 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.470849037 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.470874071 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.470889091 CET	49752	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.470896006 CET	443	49752	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.474030018 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.474065065 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.474186897 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.474877119 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.474884987 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.477303982 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:12.477336884 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:12.477395058 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:12.477655888 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:12.477672100 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:12.606858015 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.606926918 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.606981993 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.607163906 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.607181072 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.607193947 CET	49754	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.607198954 CET	443	49754	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.610374928 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.610414028 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:12.610485077 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.610637903 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:12.610651016 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.413888931 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:13.413980007 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:13.416158915 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:13.416182041 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:13.416511059 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:13.459477901 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:13.524271965 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:13.567342043 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:13.686067104 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.686953068 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:13.686986923 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.687454939 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:13.687473059 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.781232119 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.781763077 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:13.781801939 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.782371998 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:13.782377958 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:13.878825903 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:13.879173040 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:13.879193068 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:13.880248070 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:13.880317926 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:13.881521940 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:13.881608009 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:13.881752968 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:13.881761074 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:13.929676056 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:14.124579906 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.124649048 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.124728918 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.125288963 CET	49758	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.125298023 CET	443	49758	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.128706932 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.128734112 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.128982067 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.129170895 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.129187107 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.152925014 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.152945995 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.152954102 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.152965069 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.152992964 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.153011084 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.153034925 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.153064013 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.153081894 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.173505068 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.173598051 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.173604965 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.173660040 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.173813105 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.173837900 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.173852921 CET	49757	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:14.173861027 CET	443	49757	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:14.216686010 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.216757059 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.216864109 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.217021942 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.217021942 CET	49759	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.217035055 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.217042923 CET	443	49759	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.220501900 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.220524073 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.220585108 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.220767975 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.220778942 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.229814053 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.230432034 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.230459929 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.231146097 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.231152058 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.258193016 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.259371996 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.259382963 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.259901047 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.259907007 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.335400105 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.336002111 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.336013079 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.336745977 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.336750984 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.673804045 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.673877001 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.674067974 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.674128056 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.674144030 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.674165010 CET	49761	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.674170971 CET	443	49761	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.677705050 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.677745104 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.677894115 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.678325891 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.678344011 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.703599930 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.703669071 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.703800917 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.703860998 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.703885078 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.703893900 CET	49762	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.703900099 CET	443	49762	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.706513882 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.706558943 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.706732035 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.706891060 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.706902981 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.772674084 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.772744894 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.772922993 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.774769068 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.774779081 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.774801016 CET	49764	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.774806023 CET	443	49764	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.779566050 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.779612064 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.779716015 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.779865026 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:14.779881001 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:14.993968964 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.993993044 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.994000912 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.994019032 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.994045973 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:14.994060993 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.994070053 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:14.994079113 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:14.994115114 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:14.994137049 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.062304020 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.062350988 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.062413931 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.064516068 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.064552069 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.064630032 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.064790964 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.064805984 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.065099955 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.065125942 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.507496119 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.507509947 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.507555008 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.507589102 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.507591009 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.507668972 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.523034096 CET	49763	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.523058891 CET	443	49763	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.528976917 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.529023886 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:15.529109955 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.530038118 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:15.530054092 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.022697926 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.023468971 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.023511887 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.023993015 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.024010897 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.042439938 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.042865038 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.042907953 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.043308973 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.043330908 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.468835115 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:16.468899012 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:16.468952894 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:16.481725931 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.481801033 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.481859922 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.482043982 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.482064009 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.482075930 CET	49765	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.482083082 CET	443	49765	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.484949112 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.484991074 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.485085964 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.485373020 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.485385895 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.523514032 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.523576975 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.523658991 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.524003983 CET	49766	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.524023056 CET	443	49766	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.527997017 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.528028011 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.528115988 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.528373957 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.528389931 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.548851967 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.549612999 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.549637079 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.550064087 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.550070047 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.559154034 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.559623003 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.559644938 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.560055017 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:16.560059071 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:16.739883900 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.749006033 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.749028921 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.749486923 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.750475883 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.750561953 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.750658989 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.784347057 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.784715891 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.784734011 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.785084963 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.785720110 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.785778999 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.786101103 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.795331001 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.801786900 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:16.831331015 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:16.972598076 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.003628016 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.003699064 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.003797054 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.013751030 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.013844013 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.013915062 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.014349937 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.019959927 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.019985914 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.019999981 CET	49767	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.020005941 CET	443	49767	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.051934004 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.051947117 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.052798986 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.052815914 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.052826881 CET	49768	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.052830935 CET	443	49768	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.053147078 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.053206921 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.055633068 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.055707932 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.055819035 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.059353113 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.059375048 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.059446096 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.059848070 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.059854984 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.060580969 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.060625076 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.060733080 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.060897112 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.060911894 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.061081886 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.063458920 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.063481092 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.063851118 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.063858032 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.099332094 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.103724957 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.103739023 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.149822950 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.359811068 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359832048 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359843016 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359879971 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359886885 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359891891 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359900951 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.359915018 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.359941006 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.359961033 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.425744057 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.425767899 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.425782919 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.425858021 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.425858021 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.425879955 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.425934076 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.496268034 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.496298075 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.496345997 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.496387005 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.496403933 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.496431112 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.509820938 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.509900093 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.510020971 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.510185957 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.510210991 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.510225058 CET	49769	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.510231018 CET	443	49769	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.512980938 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.513027906 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.513262987 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.513428926 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:17.513443947 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:17.540332079 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.540393114 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.540433884 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.540441036 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.540503025 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.541142941 CET	49771	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.541158915 CET	443	49771	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.542144060 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.542175055 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.542215109 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.542233944 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.542253971 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.542269945 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.566790104 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566822052 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566828966 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566854954 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566881895 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566880941 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.566890001 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566910982 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566924095 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.566929102 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.566937923 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.566962004 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.618855953 CET	49737	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:35:17.618895054 CET	443	49737	142.250.181.68	192.168.2.9
Nov 25, 2024 15:35:17.661847115 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.661869049 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.661932945 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.661967993 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.662028074 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.697037935 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.697067976 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.697118044 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.697144985 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.697159052 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.697185993 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.721529961 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.721564054 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.721626043 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.721647024 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.721664906 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.721679926 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.743360996 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.743376970 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.743402004 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.743432999 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.743469954 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.743489981 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.743508101 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.818691015 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.818717957 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.818804979 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.818804979 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.818825960 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.818871021 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.832231998 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.832254887 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.832293987 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.832312107 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.832334042 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.832350016 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.851391077 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.851408958 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.851444006 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.851463079 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.851475000 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.851491928 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.868007898 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.868027925 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.868079901 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.868105888 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.868124008 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.868139982 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.885785103 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.885809898 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.885863066 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.885880947 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.885996103 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.897293091 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.897319078 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.897351027 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.897366047 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.897384882 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.897403002 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.909835100 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.909852982 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.909904003 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.909919024 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.910106897 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.919485092 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.919516087 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.919553995 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.919569016 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.919590950 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.919596910 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.919615030 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.919641972 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.919992924 CET	49770	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.920010090 CET	443	49770	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.927794933 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.927823067 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.927877903 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.927905083 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.927917004 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.928051949 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.956006050 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.956042051 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.956070900 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.956098080 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.956113100 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.956125975 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.956197023 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.956696987 CET	49772	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.956717014 CET	443	49772	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.963145018 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.963217020 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.963346004 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.963596106 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.963644028 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.963711977 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.964379072 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.964390993 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:17.964533091 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:17.964551926 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.047003031 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.047024012 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.047246933 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.047405958 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.047441959 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.047651052 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.047821999 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.047871113 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.047915936 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.048077106 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.048089027 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.048243999 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.048266888 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.048460007 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.048476934 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.119801044 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.119852066 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.119968891 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.120136023 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.120146990 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.189416885 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.189448118 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.189692020 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.189927101 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:18.189940929 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:18.240151882 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.240828037 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.240870953 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.244059086 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.244070053 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.526179075 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.526673079 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.526700974 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.527148008 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.527153015 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.684644938 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.684710979 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.684870958 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.685024977 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.685030937 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.685041904 CET	49775	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.685046911 CET	443	49775	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.687597990 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.687645912 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.687839031 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.688020945 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.688036919 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.796956062 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.797529936 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.797543049 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.798019886 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.798024893 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.919750929 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.920532942 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.920567989 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.921286106 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.921307087 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.982770920 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.982841015 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.983037949 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.983076096 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.983097076 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.983108044 CET	49776	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.983115911 CET	443	49776	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.985974073 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.986011028 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:18.986212015 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.986411095 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:18.986424923 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.235446930 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.235508919 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.235570908 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.235766888 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.235784054 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.235795975 CET	49778	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.235801935 CET	443	49778	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.238224983 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.238265991 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.238404036 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.238586903 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.238605976 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.303390026 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.303823948 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.303863049 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.304550886 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.304565907 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.325068951 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.325326920 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.325349092 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.325704098 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.326522112 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.326591015 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.326746941 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.367328882 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.372677088 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.430675030 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.437879086 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.437900066 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.438610077 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.439232111 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.439321041 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.439486027 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.459703922 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.459728003 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.460041046 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.467109919 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.475965023 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.476120949 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.476250887 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.483330011 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.506082058 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.506242037 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.509007931 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.521725893 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.537255049 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.586833000 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.595608950 CET	49777	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.595658064 CET	443	49777	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.597156048 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.597167969 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.597331047 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.597347021 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.597487926 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.597502947 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.597697020 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.597719908 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.597830057 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.597841024 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598390102 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598398924 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598452091 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.598498106 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598547935 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.598638058 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598701000 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.598824978 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598886013 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.598931074 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.598978043 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.599010944 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.599064112 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.599455118 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.599528074 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.599713087 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.599782944 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.599950075 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600013018 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600204945 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600300074 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600410938 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600419044 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600454092 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600466013 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600533962 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600543022 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600548029 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600555897 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.600578070 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.600583076 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.602772951 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.602807999 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.603149891 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.603502035 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.603518009 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.651619911 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.651623011 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.651640892 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.651640892 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.651644945 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.748708010 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.748779058 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.748982906 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.749023914 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.749046087 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.749064922 CET	49779	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.749072075 CET	443	49779	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.751703978 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.751735926 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.751914978 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.752070904 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:19.752084017 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:19.956029892 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.956073046 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.956098080 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.956135988 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.956147909 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:19.956181049 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:19.956214905 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.012482882 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012500048 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012511015 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012526989 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012551069 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012559891 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.012578011 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012597084 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.012626886 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.012631893 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012665033 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.012707949 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.014321089 CET	49781	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.014339924 CET	443	49781	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.014678955 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.014700890 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.014882088 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.015654087 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.015666962 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.017821074 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.017872095 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.018079996 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.018280029 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.018295050 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063484907 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063508987 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063517094 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063596964 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.063606024 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063621044 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063627958 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063658953 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063668013 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.063677073 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.063699961 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.073169947 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073194981 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073204994 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073219061 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073225975 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073231936 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073251963 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.073267937 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073293924 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.073321104 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.073326111 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073339939 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.073364973 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.073390961 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.074512959 CET	49784	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.074526072 CET	443	49784	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.074897051 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.074930906 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.074968100 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.074985027 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075014114 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.075032949 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.075491905 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075519085 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075526953 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075541973 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075547934 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075553894 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075562954 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.075572014 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.075598955 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.075624943 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.079663992 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.079715014 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.079720974 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.079755068 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.079854012 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.080701113 CET	49782	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.080714941 CET	443	49782	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.083995104 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084023952 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084031105 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084050894 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084060907 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084073067 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084095001 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.084122896 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084136009 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.084142923 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.084163904 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.084182024 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.087235928 CET	49783	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.087249994 CET	443	49783	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.091332912 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.091367006 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.091603041 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.091761112 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.091794014 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.091876030 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.091955900 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.091969967 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.092088938 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.092112064 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.093338966 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.093348026 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.093425035 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.093617916 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.093628883 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.148911953 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.148936033 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.148988962 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.149000883 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.149029016 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.149051905 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.169950962 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.169975996 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.169986010 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.170011997 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.170025110 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.170037031 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.170058012 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.170074940 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.170104027 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.170135021 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.225904942 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.225914955 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.225951910 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.225975990 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.225991011 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.226013899 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.226037979 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.244882107 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.244910002 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.244967937 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.244978905 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.245045900 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.245045900 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.253521919 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.253591061 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.253602028 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.253657103 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.253942966 CET	49787	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.253957033 CET	443	49787	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.259244919 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.259279966 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.259510040 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.259598970 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.259609938 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.275537968 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.275587082 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.275610924 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.275624037 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.275670052 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.275684118 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.295264006 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.295290947 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.295341015 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.295351982 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.295382023 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.295401096 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.305021048 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.305053949 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.305119038 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.305133104 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.305335045 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.316800117 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.316838980 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.316920996 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.316921949 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.316929102 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.316982031 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.402759075 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.402780056 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.402844906 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.402857065 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.402914047 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.405333042 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.405802965 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.405816078 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.406253099 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.406258106 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.429053068 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.429085970 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.429121017 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.429131985 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.429162025 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.429183006 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.440078020 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.440145016 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.440149069 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.440160036 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.440176010 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.440196991 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.440232992 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.440570116 CET	49785	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.440581083 CET	443	49785	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.442925930 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.442945957 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.442990065 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.442998886 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.443032980 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.443053007 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.444838047 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.444911003 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.444988012 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.445147038 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.445152998 CET	443	49780	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.445166111 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.445193052 CET	49780	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.498408079 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.498447895 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.498794079 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.499260902 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.499274015 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.829634905 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.829669952 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.829729080 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.830406904 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.830436945 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.830451012 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.830467939 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.830548048 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.830976963 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:20.830990076 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:20.842236042 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.842302084 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.842346907 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.843003988 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.843024969 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.843036890 CET	49789	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.843041897 CET	443	49789	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.847577095 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.847614050 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.847692966 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.848434925 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.848452091 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.865920067 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.867017984 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.867033958 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.867801905 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.867808104 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.964387894 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.964896917 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.964924097 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:20.965344906 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:20.965351105 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.101567984 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.101609945 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.101733923 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.102044106 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.102098942 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.102288008 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.102941990 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.102953911 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.103002071 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.103261948 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.103272915 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.103426933 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.103441000 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.103801966 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.103812933 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.305556059 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.305648088 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.305713892 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.305984974 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.305994034 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.306000948 CET	49790	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.306006908 CET	443	49790	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.309662104 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.309706926 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.309763908 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.309912920 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.309928894 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.403431892 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.403515100 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.403577089 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.403784037 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.403804064 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.403825045 CET	49791	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.403831959 CET	443	49791	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.406719923 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.406742096 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.406805992 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.406960964 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.406971931 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.443629980 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.444072962 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.444084883 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.446466923 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.446574926 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.447432995 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.447498083 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.447577000 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.447583914 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.455472946 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.455672979 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.455688000 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.456074953 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.456371069 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.456434965 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.456475019 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.457076073 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.457251072 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.457272053 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.457623959 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.458007097 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.458067894 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.458193064 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.492528915 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.493557930 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.493777990 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.493788958 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.494856119 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.494921923 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.495234013 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.495297909 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.495352030 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.499321938 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.499330044 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.507859945 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.528316975 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.528871059 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.528881073 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.529241085 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.529584885 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.529649973 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.529766083 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.533103943 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.533649921 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.533667088 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.534288883 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.534292936 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.539324045 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.539371014 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.539376974 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.571321964 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.577718973 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.578243971 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.578258991 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.578711987 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:21.578716993 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.585396051 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.679769039 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.716583967 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.716597080 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.720513105 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.720607996 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.721477985 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.721689939 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.721884012 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.721901894 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.762825012 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:21.948889971 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:21.984879017 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.984955072 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:21.985084057 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.009665966 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.009684086 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.009769917 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.009799957 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.009843111 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.010149002 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.023144960 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.023204088 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.023308992 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.063508987 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063539028 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063548088 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063565969 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063601017 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063694954 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.063694954 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.063714981 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.063755035 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.066797018 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.066870928 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.066941977 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.082176924 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082201004 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082207918 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082227945 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082242012 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082250118 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082283974 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.082304955 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.082345009 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.085014105 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.085886002 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.085903883 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.085979939 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.089288950 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.089314938 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090529919 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090542078 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090631962 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.090662003 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090688944 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090697050 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090723991 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090734959 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090740919 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.090748072 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090771914 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.090787888 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.090787888 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.090809107 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.090857029 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.092910051 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.092977047 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.098512888 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.098586082 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.098651886 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.110512018 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.110543013 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.113555908 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.113555908 CET	49793	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.113584995 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.113598108 CET	443	49793	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.123821020 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.123821020 CET	49792	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.123843908 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.123855114 CET	443	49792	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.135859013 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.135885954 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.135902882 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.135950089 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.135979891 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.136007071 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.136009932 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.136058092 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.136058092 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.165115118 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.179416895 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.179447889 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.179522038 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.212702036 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.212712049 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.219834089 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.219886065 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.221049070 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.222345114 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.222846985 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.222865105 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.239269018 CET	49794	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.239284992 CET	443	49794	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.254120111 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.263770103 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.266668081 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266699076 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266706944 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266722918 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266732931 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266736031 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266779900 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.266793966 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.266844988 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.266844988 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.304194927 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.408265114 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.408291101 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.409040928 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.409060001 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.409486055 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.409543037 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.409569979 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.419581890 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.419712067 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.422693014 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.422843933 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.423307896 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.423322916 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.424952984 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.425046921 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.425051928 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.426439047 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.426522970 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.437635899 CET	49797	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.437663078 CET	443	49797	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.437977076 CET	49795	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.438009977 CET	443	49795	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.457597017 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.457648993 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.457725048 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.464000940 CET	49796	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.464039087 CET	443	49796	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.467335939 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.468508005 CET	49798	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.468518972 CET	443	49798	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.469907999 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.469953060 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.474989891 CET	49799	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.475017071 CET	443	49799	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.475565910 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.477181911 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.477834940 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.477864027 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.478924990 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.479005098 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.479403973 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.479468107 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.479687929 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.479696035 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.487426043 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.487462997 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.487770081 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.488076925 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.488091946 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.522697926 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.533478022 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.533859015 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.533873081 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.535072088 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.535137892 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.535641909 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.535711050 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.536355972 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.536365032 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.570476055 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.570717096 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.570730925 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.571878910 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.571955919 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.572354078 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.572427988 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.572504044 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.584682941 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.588376045 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588402987 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588412046 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588438988 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588519096 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.588535070 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588545084 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588562965 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588584900 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.588589907 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.588608980 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.616029024 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.616040945 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.631337881 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.662887096 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.753004074 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.753014088 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.753048897 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.753063917 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.753108978 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.753129005 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.753160000 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.753237009 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.829081059 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.829890013 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.829929113 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.830358982 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:22.830363989 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:22.831505060 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.831528902 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.831537008 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.831584930 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.831593990 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.831640959 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.833714008 CET	49801	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.833729029 CET	443	49801	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.837454081 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.837493896 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.837650061 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.837908983 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.837922096 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.838840961 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.838876009 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.838936090 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.839158058 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.839171886 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839555979 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839587927 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839595079 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839612961 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839620113 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839622021 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839648008 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.839673042 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839684963 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839685917 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.839730978 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.839962959 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839971066 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.839999914 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.840010881 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.840023994 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.840033054 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.840059042 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.840076923 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.840357065 CET	49802	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.840367079 CET	443	49802	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.842817068 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.842829943 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.842894077 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.843101025 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.843127012 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.844345093 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.844363928 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.844460011 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.844652891 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.844666958 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.943178892 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.943207026 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.943264008 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.943291903 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.943308115 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.943334103 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.972724915 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.972745895 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.972789049 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.972803116 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.972855091 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.993309975 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.993331909 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.993392944 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:22.993403912 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:22.993448019 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.024172068 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024199963 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024208069 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024225950 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024250984 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024255037 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.024283886 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024297953 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.024302959 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.024343967 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.030386925 CET	49805	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.030421019 CET	443	49805	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.038264036 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.038327932 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.038397074 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.038619995 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.038635015 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.054514885 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.054568052 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.054606915 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.054630041 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.054656029 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.054672956 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.065032959 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.065059900 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.065067053 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.065129042 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.065129995 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.065196037 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.068133116 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.068162918 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.068227053 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.068682909 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.068694115 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.070257902 CET	49806	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.070277929 CET	443	49806	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.072706938 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.072730064 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.072798014 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.072952032 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.072969913 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.074106932 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.074135065 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.074182987 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.074363947 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.074379921 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.101515055 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.101547956 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.101555109 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.101603985 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.101618052 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.101665974 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.103008032 CET	49804	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.103024006 CET	443	49804	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.105887890 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.105916977 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.105976105 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.106142044 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.106152058 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.137427092 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.137454987 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.137500048 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.137526989 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.137551069 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.137572050 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.156131983 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.156152964 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.156187057 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.156203032 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.156222105 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.156277895 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.156280041 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.156326056 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.156847000 CET	49800	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.156864882 CET	443	49800	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.157274008 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.157339096 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.157397032 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.158165932 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.158188105 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.179682970 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.180800915 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.180830956 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.182110071 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.182117939 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.241266012 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.241866112 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.241895914 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.242309093 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.242316008 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.296757936 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.296828032 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.296873093 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.297122002 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.297138929 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.297153950 CET	49803	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.297158957 CET	443	49803	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.300349951 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.300388098 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.300460100 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.300720930 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.300726891 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.635577917 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.635664940 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.635723114 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.635934114 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.635962963 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.635978937 CET	49807	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.635987043 CET	443	49807	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.639154911 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.639190912 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.639251947 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.639429092 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.639450073 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.686738968 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.686806917 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.686855078 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.687103033 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.687108040 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.687117100 CET	49808	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.687122107 CET	443	49808	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.689923048 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.689960957 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.690073013 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.690226078 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:23.690242052 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:23.834099054 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.834983110 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.835009098 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.835395098 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.835808039 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.835870028 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.836041927 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.865343094 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.866261959 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.866290092 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.866645098 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.867238045 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.867290974 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.867415905 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:23.883332014 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:23.915332079 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.002039909 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.002711058 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.002747059 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.003324986 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.003329992 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.069679022 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.070205927 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.070216894 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.070974112 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.070979118 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.229549885 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.229863882 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.229887009 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.230293036 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.230684042 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.230763912 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.230845928 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.233767986 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.234019041 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.234050989 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.234424114 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.234875917 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.234877110 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.234890938 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.234951973 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.235600948 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.235790014 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.235815048 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.237107038 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.237170935 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.237565994 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.237692118 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.237720013 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.275331974 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.275676012 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.275974035 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.276000977 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.276345968 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.276777983 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.276839018 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.276895046 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.279336929 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.286123037 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.286274910 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.286283016 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.317719936 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.317734957 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.332912922 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.343878031 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.343900919 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.343961954 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.343971014 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.344062090 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.344737053 CET	49812	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.344755888 CET	443	49812	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.385413885 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.385893106 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.385901928 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.386979103 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.387047052 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.387517929 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.387586117 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.387669086 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.420267105 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.420533895 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.420545101 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.422008038 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.422070026 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.422523975 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.422591925 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.422696114 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.431344032 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.431889057 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.431895971 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.437738895 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.437803030 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.437948942 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.438045979 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.438065052 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.438079119 CET	49809	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.438085079 CET	443	49809	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.440839052 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.440897942 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.441054106 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.441240072 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.441257000 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.461186886 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.461443901 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.461456060 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.462671995 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.462682962 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.462687969 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.462733030 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.463334084 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.463412046 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.463450909 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.470860958 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.471057892 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.471072912 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.472141981 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.472198963 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.472548962 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.472613096 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.472665071 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.477860928 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.503717899 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.504101038 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.504116058 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.505220890 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.505326033 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.505806923 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.505863905 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.505979061 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.505985975 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.506438971 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.506464005 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.506479025 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.506627083 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.506639004 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.506692886 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.507334948 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.507702112 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.508697033 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.508718014 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.509738922 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.509810925 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.510143042 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.510189056 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.510205030 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.510421991 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.510488033 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.510719061 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.510727882 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.514014959 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.514085054 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.514149904 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.514667988 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.514678955 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.514689922 CET	49810	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.514694929 CET	443	49810	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.515331984 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.520041943 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.520078897 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.520323038 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.520323038 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:24.520358086 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:24.521708012 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.521716118 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.553505898 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.553536892 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.553539991 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.568927050 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.634113073 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.634139061 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.634241104 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.634242058 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.634263992 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.634346008 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.678514004 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.678534985 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.678626060 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.678626060 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.678646088 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.678718090 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.759278059 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.759299994 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.759378910 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.759377956 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.759443045 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.788966894 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789057016 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.789060116 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789190054 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.789864063 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789881945 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789891005 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789916992 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789922953 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789932966 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.789952040 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.789958954 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.790000916 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.790024996 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.791712999 CET	49811	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.791737080 CET	443	49811	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.796293974 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.796334982 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.796420097 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.796760082 CET	49818	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.796768904 CET	443	49818	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.797297955 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.797316074 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.797408104 CET	49820	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.797434092 CET	443	49820	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.804918051 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.804953098 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.805037022 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.805244923 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.805255890 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873698950 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873727083 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873738050 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873756886 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873780966 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.873795986 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873830080 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.873843908 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.873861074 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.873882055 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.877002001 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877023935 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877036095 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877060890 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877065897 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877075911 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877089977 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.877103090 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.877132893 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.877156973 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.893676996 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.893704891 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.893769979 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.893770933 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.893814087 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.894892931 CET	49821	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.894910097 CET	443	49821	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.905775070 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.905826092 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.905905962 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.906161070 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.906177998 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.907464981 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.907510042 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.907584906 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.907749891 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.907764912 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.949110031 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.949131966 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.949183941 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.949196100 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.949238062 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.949888945 CET	49823	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.949903011 CET	443	49823	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.952379942 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.952428102 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.952557087 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.952826977 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.952841997 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.953917980 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.953948975 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:24.954030991 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.954190969 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:24.954201937 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.005954981 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.005991936 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.006042004 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.006071091 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.006082058 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.006131887 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.012959957 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.012988091 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.012995958 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.013019085 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.013045073 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.013076067 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.013096094 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.013096094 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.013135910 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.014168024 CET	49824	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.014183044 CET	443	49824	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.022099972 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.022124052 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.022173882 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.022186995 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.022203922 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.022253036 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.023243904 CET	49826	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.023251057 CET	443	49826	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024045944 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.024583101 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.024612904 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.024624109 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024651051 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024657965 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024677992 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024687052 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024693966 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.024696112 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024717093 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024744987 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.024744987 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.024775028 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.027359962 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.027360916 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.027360916 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.027383089 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.027575970 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.027630091 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.027690887 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.027707100 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.027745962 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.030052900 CET	49825	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.030070066 CET	443	49825	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.038680077 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.038719893 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.038800001 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.039203882 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.039225101 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.043499947 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.043550968 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.043704033 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.043939114 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.043961048 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.053145885 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.053174019 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.053215027 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.053242922 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.053260088 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.053298950 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.080087900 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.080116034 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.080161095 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.080185890 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.080193996 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.080219030 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.135134935 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.135148048 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.135222912 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.135237932 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.135277987 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.182365894 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.182403088 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.182449102 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.182477951 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.182499886 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.182514906 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.195655107 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.195734024 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.195734978 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.195841074 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.196211100 CET	49819	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.196227074 CET	443	49819	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.200169086 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.200191021 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.200251102 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.200689077 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.200726986 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.200854063 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.201082945 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.201102972 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.201379061 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.201391935 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.233339071 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.233421087 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.233436108 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.233449936 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.233490944 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.233906031 CET	49817	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.233915091 CET	443	49817	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.237464905 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.237495899 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.237910986 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.237981081 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.238018036 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.238059044 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.238245964 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.238260984 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.238452911 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.238475084 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.334538937 CET	49822	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:25.334564924 CET	443	49822	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:25.406583071 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.407016039 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.407044888 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.407607079 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.407613039 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.423743963 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.424132109 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.424170017 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.424567938 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.424573898 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.468080997 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.468164921 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.468378067 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.495199919 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.495223999 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.495238066 CET	49827	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.495244980 CET	443	49827	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.498687029 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.498723030 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.498944998 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.499222040 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.499234915 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.844640970 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.844706059 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.844758987 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.844957113 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.844974041 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.844984055 CET	49829	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.844990015 CET	443	49829	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.847824097 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.847867012 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.847949028 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.848129034 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.848145008 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.869628906 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.869729996 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.869813919 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.869930029 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.869946957 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.869956970 CET	49828	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.869962931 CET	443	49828	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.872618914 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.872653008 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:25.872746944 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.872993946 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:25.873004913 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.220299006 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.220638037 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.220671892 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.221178055 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.221498966 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.221595049 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.221632957 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.257513046 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.257774115 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.257795095 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.258390903 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.258843899 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.258919001 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.259052038 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.263334036 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.271204948 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.299335003 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.305656910 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.306135893 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.306169033 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.306596994 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.306602955 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.322129965 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.322395086 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.322411060 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.322762012 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.323103905 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.323183060 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.323227882 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.329926014 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.330144882 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.330172062 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.330738068 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.331079006 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.331182957 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.331188917 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.331208944 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.363332033 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.365343094 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.368525028 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.369041920 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.369091034 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.369602919 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.369609118 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.380992889 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.413975000 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.414252043 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.414266109 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.415303946 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.415385008 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.415875912 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.415920019 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.415925026 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.415940046 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.417604923 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.417788982 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.417818069 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.418917894 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.418989897 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.419302940 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.419393063 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.419469118 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.459108114 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.459127903 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.459167004 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.459201097 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.464477062 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.464694023 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.464724064 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.465796947 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.465873003 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.466207981 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.466281891 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.466351032 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.466361046 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.499612093 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.499766111 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.505299091 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.508431911 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.524540901 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.524559021 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.525715113 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.525774002 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.528836966 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.528897047 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.529308081 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.529315948 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.583673954 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.625368118 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.625684023 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.625699043 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.626734018 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.626796007 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.627254009 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.627322912 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.627414942 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.640064001 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.640290976 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.640305042 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.641318083 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.641372919 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.641747952 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.641807079 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.641904116 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.645292997 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.645559072 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.645586014 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.646850109 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.646913052 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.647351980 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.647485018 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.647490978 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.656160116 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.656579971 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.656598091 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.657680035 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.657741070 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.658075094 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.658152103 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.658189058 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.671344042 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.678973913 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.679003000 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.683329105 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.694335938 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.694350004 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.694374084 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.694406986 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.703330994 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.709470034 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.709486961 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.724961996 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.740087986 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.740437984 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.743383884 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.743401051 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.743459940 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.743482113 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.743493080 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.743527889 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.744801044 CET	49832	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.744817972 CET	443	49832	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.747247934 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.747298956 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.747351885 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.747607946 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.747622967 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.755256891 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.761292934 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.761360884 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.761481047 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.761627913 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.761643887 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.761658907 CET	49830	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.761663914 CET	443	49830	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.764528990 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.764560938 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.764652014 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.764796972 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.764806986 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.813527107 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.813640118 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.813797951 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.813915968 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.813942909 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.813987970 CET	49831	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.813994884 CET	443	49831	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.816570044 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.816622972 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.816693068 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.816824913 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:26.816845894 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:26.844269037 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.844301939 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.844372988 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.844398022 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.844413996 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.844464064 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.866420984 CET	49835	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.866442919 CET	443	49835	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.866811037 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.866852045 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.866913080 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.867645025 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.867659092 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.905853987 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.905881882 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.905903101 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.905949116 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.905982971 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.905998945 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.906030893 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.941251993 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.941282988 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.941349983 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.941366911 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.941401958 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.942245007 CET	49837	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.942265987 CET	443	49837	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972184896 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972206116 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972215891 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972251892 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972291946 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.972316027 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972323895 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.972335100 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.972371101 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.985363007 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.985389948 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.985450983 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.985474110 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.985490084 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:26.985536098 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.986080885 CET	49841	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:26.986097097 CET	443	49841	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.034499884 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.034531116 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.034594059 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.034636021 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.034656048 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.034885883 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.052166939 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052205086 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052213907 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052228928 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052251101 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052257061 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052258968 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.052273989 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.052305937 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.052325010 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.071681976 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.071712017 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.071751118 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.071772099 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.071787119 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.071871042 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.095928907 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.095938921 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.096009016 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.096026897 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.096074104 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.170865059 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170876980 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170892000 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170931101 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170938015 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170942068 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.170960903 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.170984030 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.170994997 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.171000957 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.171001911 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.171029091 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.171052933 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.171101093 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.172441959 CET	49836	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.172455072 CET	443	49836	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172894001 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172924042 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172933102 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172956944 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172980070 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.172981024 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.172997952 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.173007011 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.173010111 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.173059940 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.174156904 CET	49834	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.174170017 CET	443	49834	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.197192907 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.197233915 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.197292089 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.198995113 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.199012995 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.200051069 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.200090885 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.200191021 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.200743914 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.200754881 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.205027103 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205027103 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205058098 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.205070019 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.205127001 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205162048 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205308914 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205321074 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.205512047 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.205518961 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.207281113 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.207346916 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.207359076 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.207374096 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.207405090 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.207415104 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.207730055 CET	49833	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.207746983 CET	443	49833	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231307030 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231344938 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231353998 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231390953 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231398106 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.231411934 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231420040 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231441975 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231452942 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.231461048 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.231461048 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.231482983 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.279011011 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279036999 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279045105 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279062033 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279072046 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279081106 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279099941 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.279118061 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279125929 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.279175997 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.296091080 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296119928 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296133041 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296160936 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296186924 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296191931 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.296195984 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296217918 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296227932 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.296237946 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.296237946 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.297027111 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.300839901 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.301430941 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.301451921 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.302206993 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.302212000 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.307207108 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307235956 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307241917 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307265043 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307275057 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307286024 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307288885 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.307307959 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307320118 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.307344913 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.307367086 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.318320036 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.318350077 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.318408012 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.318416119 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.318486929 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.354393005 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.354423046 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.354500055 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.354511976 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.354578972 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.386693954 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.386708975 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.386729002 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.386769056 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.386781931 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.386838913 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.397609949 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.397650003 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.397727966 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.397737026 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.397787094 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.405999899 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.406110048 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.406112909 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.406157970 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.406641960 CET	49840	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.406660080 CET	443	49840	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.411156893 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.411190033 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.411303043 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.412967920 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.412977934 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416603088 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416619062 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416656017 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416670084 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416682959 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.416711092 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.416744947 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.416764021 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.433326006 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.433356047 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.433398962 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.433412075 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.433438063 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.433451891 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.442003965 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.442019939 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.442074060 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.442082882 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.442116976 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.442168951 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.442800999 CET	49844	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.442811966 CET	443	49844	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.443569899 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.443583965 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.443615913 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.443651915 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.443684101 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.443703890 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.443747044 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.520716906 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.520745993 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.520843983 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.520873070 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.520915031 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.529274940 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.529305935 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.529484987 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.529500961 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.529846907 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.567356110 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.567384005 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.567451954 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.567466974 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.567512035 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.572252035 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.572335958 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.572345972 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.572359085 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.572411060 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.572855949 CET	49845	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.572873116 CET	443	49845	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.573223114 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.573263884 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.573328018 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.573848963 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.573909998 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.582011938 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.582086086 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.582096100 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.582146883 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.582400084 CET	49843	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.582412958 CET	443	49843	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.626816034 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.626847982 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.626899958 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.626919031 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.626950979 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.626981020 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.656696081 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.656718969 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.656775951 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.656790018 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.656821012 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.656829119 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.675442934 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.675491095 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.675527096 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.675533056 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.675574064 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.676042080 CET	49842	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.676055908 CET	443	49842	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.680210114 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.680252075 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.680349112 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.680573940 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:27.680584908 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:27.683140039 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.683634996 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.683649063 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.684072971 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.684077978 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.708086014 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.708878040 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.708913088 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.709300995 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.709306002 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.751318932 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.751404047 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.751468897 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.751703024 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.751723051 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.751734972 CET	49846	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.751740932 CET	443	49846	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.754581928 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.754636049 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:27.754820108 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.755031109 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:27.755047083 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.139636040 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.139698982 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.139771938 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.139983892 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.140002966 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.140053988 CET	49848	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.140062094 CET	443	49848	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.143182039 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.143207073 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.143492937 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.143492937 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.143524885 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.185283899 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.185775995 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.185807943 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.186172962 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.186647892 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.186717033 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.186943054 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.213912010 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.218578100 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.218605042 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.219047070 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.219631910 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.219712019 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.219775915 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.231323957 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.256431103 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.256510019 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.256640911 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.256719112 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.256736994 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.256750107 CET	49847	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.256755114 CET	443	49847	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.259675026 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.259716034 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.259780884 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.260024071 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.260036945 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.267328024 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.546221972 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.553498030 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.560559034 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.560595989 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.561553955 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.561561108 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.562274933 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.562314034 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.562848091 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.562853098 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.610696077 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.611005068 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.611035109 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.611411095 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.611785889 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.611855984 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.611918926 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.612363100 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.612535954 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.612546921 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.613627911 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.613708019 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.614036083 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.614088058 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.614130020 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.615499973 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.615734100 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.615752935 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.616810083 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.616877079 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.617194891 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.617257118 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.617292881 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.652168036 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.652446985 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.652470112 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.652848959 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.653239965 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.653326035 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.653445959 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.659332991 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.659339905 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.662895918 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.663330078 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.663367987 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.663374901 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.663373947 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.663402081 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.699335098 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.710570097 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.710592985 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.727802038 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.727822065 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.727902889 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.727920055 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.727955103 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.728059053 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.729806900 CET	49852	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.729839087 CET	443	49852	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.810316086 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.810657978 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.810682058 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.811758995 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.811829090 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.812179089 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.812242985 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.812351942 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.812362909 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.841722012 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.841749907 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.841764927 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.841808081 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.841854095 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.841869116 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.841900110 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.854480982 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.964639902 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.964662075 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.964734077 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.964772940 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.964998960 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.979238987 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.979298115 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.979326010 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.979604959 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.979695082 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.979717016 CET	443	49849	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.979728937 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.979883909 CET	49849	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.983258009 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.983297110 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.983468056 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.983748913 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:28.983766079 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:28.991368055 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.991456032 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.991755009 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.991790056 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.991810083 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.991826057 CET	49851	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.991832018 CET	443	49851	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.994874954 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.994916916 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.995096922 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.995248079 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.995260954 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.996030092 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.996093035 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.996231079 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.996268034 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.996268034 CET	49850	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.996289015 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.996303082 CET	443	49850	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.998560905 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.998615026 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:28.998807907 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.998955011 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:28.998971939 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.022494078 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.022804022 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.022821903 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.023897886 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.023952007 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.024480104 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.024543047 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.024656057 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.024662971 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.069427967 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.133728981 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.134049892 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.134076118 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.135173082 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.135235071 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.135833979 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.135910988 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.136013031 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.136030912 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.177138090 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.202311039 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202346087 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202353954 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202368975 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202404022 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.202409029 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202438116 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.202451944 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.202488899 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.252701044 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252732038 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252749920 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252768040 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252775908 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252784014 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252798080 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.252821922 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252827883 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.252837896 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.252857924 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.275289059 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275340080 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275352001 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275369883 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275379896 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275389910 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275403023 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.275437117 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.275450945 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.275491953 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.313888073 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.313915014 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.313935041 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.313982010 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.314029932 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.314054966 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.314079046 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.373917103 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.373944998 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.374002934 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.374027014 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.374308109 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.379931927 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.379956007 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.379976034 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.379997969 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.380023956 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.380048990 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.380072117 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.380081892 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.380187035 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.380681992 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.381627083 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.381652117 CET	443	49855	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.381675959 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.381695986 CET	49855	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.389888048 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.389915943 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.390002012 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.390017986 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.390163898 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.400660992 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400688887 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400696993 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400710106 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400738001 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400748014 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.400759935 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.400784016 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.400805950 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.436839104 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.436865091 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.437057972 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.437074900 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.437125921 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.445975065 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.446007967 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.446099043 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.446099043 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.446119070 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.446738958 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.456476927 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.456501961 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.456571102 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.456582069 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.457040071 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.484313011 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.484847069 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.484860897 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.485471010 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.485475063 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.523493052 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.523519039 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.523555994 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.523575068 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.523602009 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.523619890 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.523658037 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.523730040 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.523766041 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.524130106 CET	49856	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.524143934 CET	443	49856	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.555871010 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.555897951 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.555965900 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.555973053 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.556013107 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.556139946 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.568825960 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.568854094 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.568914890 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.568932056 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.569031000 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.573663950 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.573692083 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.573726892 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.573735952 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.573764086 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.573779106 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.585568905 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.585592031 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.585627079 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.585632086 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.585679054 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.585777044 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.589692116 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.589739084 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.589754105 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.589765072 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.589787006 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.589791059 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.589828014 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.590146065 CET	49854	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.590157986 CET	443	49854	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.604536057 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.604557037 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.604624987 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.604633093 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.604664087 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.607032061 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.607086897 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.607145071 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.607338905 CET	49853	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.607348919 CET	443	49853	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.623328924 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.623364925 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.623428106 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.623682022 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.623699903 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.656569958 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.656591892 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.656630993 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.656641006 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.656670094 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.656696081 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.681549072 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681577921 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681585073 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681596994 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681617975 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.681619883 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681637049 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.681668997 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.681684017 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.734658957 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.734714985 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.734739065 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.734760046 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.734798908 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.735003948 CET	49857	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.735016108 CET	443	49857	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798276901 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798307896 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798315048 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798329115 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798351049 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798377037 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.798388958 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.798418999 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.798455954 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.807432890 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.807456017 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.807511091 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.807523012 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.807552099 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.835613012 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.835695028 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.835714102 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.835748911 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.836246967 CET	49858	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.836258888 CET	443	49858	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.920269966 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.920342922 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.920516968 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.920594931 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.920612097 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.920635939 CET	49860	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.920640945 CET	443	49860	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.923487902 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.923527956 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.923680067 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.923863888 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:29.923873901 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:29.926682949 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.926706076 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.926784039 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.926804066 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.927052975 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.976994991 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.977026939 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.977076054 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.977092981 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:29.977137089 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:29.977155924 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.000735044 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.001236916 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.001254082 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.001702070 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.001707077 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.109769106 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.110313892 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.110344887 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.111012936 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.111018896 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.118767977 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.118801117 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.118877888 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.118895054 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.118949890 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.118949890 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.150146008 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.150177956 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.150233984 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.150244951 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.150290966 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.172780991 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.172835112 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.172879934 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.172879934 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.172928095 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.173351049 CET	49859	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.173367023 CET	443	49859	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.456368923 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.456445932 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.456552982 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.456779003 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.456795931 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.456809998 CET	49861	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.456815958 CET	443	49861	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.464361906 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.464380026 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.464539051 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.464837074 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.464848042 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.573647022 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.573745966 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.573796988 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.577397108 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.577420950 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.577433109 CET	49862	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.577438116 CET	443	49862	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.581506014 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.581563950 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.581650972 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.581938028 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.581954002 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.634320974 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.634910107 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.634938955 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.635425091 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.635757923 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.635833979 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.636042118 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:30.683331966 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:30.711977959 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.712431908 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.712465048 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.712884903 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.712892056 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.795001030 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.795437098 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.795473099 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:30.796116114 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:30.796124935 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.029721022 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.077750921 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.077771902 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.078911066 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.079372883 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.079458952 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.079555988 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.123342991 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.146768093 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.146842003 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.146974087 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.150388956 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.150419950 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.150435925 CET	49864	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.150444031 CET	443	49864	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.167706013 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.167754889 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.167882919 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.168175936 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.168191910 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.262084961 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.262176037 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.262319088 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.262547970 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.262567997 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.262579918 CET	49865	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.262586117 CET	443	49865	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.271955013 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.271991014 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.272094011 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.272217035 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.272226095 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.294079065 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.294110060 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.294128895 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.294182062 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.294214964 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.294229984 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.294250011 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.424813986 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.424838066 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.424891949 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.424917936 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.424937010 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.424954891 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.437341928 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.437402010 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.437413931 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.437433004 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.437449932 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.437479019 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.437587976 CET	49863	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.437602997 CET	443	49863	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.558588982 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.558686018 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.558826923 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.559335947 CET	49866	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.559355974 CET	443	49866	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.563505888 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.563566923 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.563654900 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.563956022 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:31.563968897 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:31.769879103 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.770411015 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.770442963 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:31.770975113 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:31.770982027 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.186167002 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.186836004 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.186867952 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.187300920 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.187309980 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.237735033 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.237780094 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.237826109 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.237833023 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.237864017 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.238092899 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.238112926 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.238135099 CET	49867	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.238142014 CET	443	49867	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.241080999 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.241127968 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.241221905 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.241425991 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.241439104 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.326338053 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.326867104 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.326898098 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.327327013 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.327332973 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.621768951 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.621845961 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.622093916 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.623555899 CET	49868	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.623578072 CET	443	49868	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.627003908 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.627048969 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.627201080 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.627327919 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.627341032 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.762770891 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.762845993 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.762973070 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.763185978 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.763200998 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.763216019 CET	49869	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.763221025 CET	443	49869	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.766551971 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.766602039 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.766752958 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.766937971 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.766951084 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.952229977 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.952914000 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.952929974 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.953531981 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:32.953537941 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:32.962470055 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:32.962907076 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:32.962940931 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:32.963413954 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:32.964123011 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:32.964189053 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:32.964448929 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:33.011343956 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:33.263813019 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.264416933 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.264435053 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.264895916 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.264904022 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.596529007 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.596560955 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.596689939 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.596731901 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.598665953 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.599148035 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.641613960 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.641645908 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.641668081 CET	49870	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.641674995 CET	443	49870	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.676156998 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:33.676249981 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:33.676394939 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:33.692792892 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.692827940 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.692931890 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.698889971 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.698909998 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.699810982 CET	49872	443	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:33.699822903 CET	443	49872	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:33.716357946 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.716388941 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.716460943 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.716469049 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.716510057 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.717763901 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.717767954 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.717781067 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.717928886 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.717958927 CET	443	49871	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.719053030 CET	49871	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.743100882 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.743160009 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:33.743256092 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.747061014 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:33.747087002 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.023066998 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.023551941 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.023581028 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.023993015 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.023998022 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.487323999 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.487339020 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.487394094 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.487411022 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.487457991 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.487588882 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.487608910 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.487620115 CET	49873	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.487626076 CET	443	49873	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.488327026 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.488876104 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.488908052 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.489377022 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.489382029 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.491132021 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.491173983 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.491240978 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.491436958 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.491450071 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.739617109 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.740515947 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.740540981 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:34.741390944 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:34.741396904 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.242332935 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.242413044 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.242679119 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.242774010 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.242790937 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.242804050 CET	49874	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.242810011 CET	443	49874	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.243530989 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.243619919 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.243812084 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.243959904 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.243984938 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.243999004 CET	49875	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.244004965 CET	443	49875	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.246280909 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.246339083 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.246725082 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.246769905 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.246889114 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.246963978 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.247013092 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.247026920 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.247056007 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.247076035 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.486196041 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.486767054 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.486804008 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.487209082 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.487222910 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.532418013 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.533000946 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.533020020 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.533416033 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.533425093 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.937505007 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.937585115 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.937654972 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.937824965 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.937849045 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.937860966 CET	49876	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.937866926 CET	443	49876	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.940713882 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.940762043 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.940825939 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.941023111 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.941040039 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.981365919 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.984564066 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.984628916 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.984704971 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.984704971 CET	49877	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.984723091 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.984733105 CET	443	49877	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.987437963 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.987483025 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:35.987847090 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.987907887 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:35.987916946 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.508672953 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.509201050 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.509232044 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.509726048 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.509737015 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.963517904 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.966437101 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.966717958 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.966795921 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.966928959 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.966943026 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.967036963 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.967058897 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.967072010 CET	49878	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.967077971 CET	443	49878	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.967572927 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.967578888 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.970254898 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.970299959 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:36.970523119 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.970523119 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:36.970555067 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.097289085 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.097831011 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.097862005 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.098402977 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.098416090 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.409125090 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.411473989 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.411534071 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.411631107 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.411648035 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.411658049 CET	49879	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.411664009 CET	443	49879	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.417184114 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.417227030 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.417396069 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.417705059 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.417714119 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.555216074 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.558387995 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.558458090 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.558525085 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.558525085 CET	49880	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.558547974 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.558553934 CET	443	49880	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.561434031 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.561480045 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.561655998 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.561842918 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.561857939 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.773710012 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.774226904 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.774250031 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.775022030 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.775028944 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.793082952 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.794358015 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.794389963 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:37.795200109 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:37.795206070 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.220752954 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.223953962 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.224039078 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.224200964 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.224200964 CET	49882	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.224225044 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.224236965 CET	443	49882	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.227104902 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.227144957 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.227230072 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.227405071 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.227415085 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.248614073 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.251802921 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.251874924 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.251918077 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.251950026 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.251966000 CET	49881	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.251972914 CET	443	49881	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.254621983 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.254669905 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.254745007 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.254899979 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.254913092 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.756231070 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.756743908 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.756773949 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:38.757328987 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:38.757335901 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.132791996 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.133712053 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.133740902 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.134341002 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.134347916 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.227370977 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.227447987 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.227524996 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.227812052 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.227833986 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.227844954 CET	49883	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.227850914 CET	443	49883	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.231106997 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.231161118 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.231350899 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.231564999 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.231578112 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.414331913 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.414983988 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.415003061 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.415431976 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.415436029 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.569256067 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.572093010 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.572170973 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.572169065 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.572248936 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.572343111 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.572366953 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.572386980 CET	49884	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.572392941 CET	443	49884	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.575637102 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.575680017 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.575778961 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.576020956 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.576034069 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.868279934 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.871243954 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.871320009 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.871377945 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.871398926 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.871409893 CET	49885	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.871416092 CET	443	49885	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.874636889 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.874691963 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:39.874845982 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.875070095 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:39.875083923 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.011938095 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.012434006 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.012470007 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.013027906 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.013034105 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.102412939 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.102971077 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.103002071 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.103466034 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.103478909 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.458830118 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.458884954 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.458950043 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.458966017 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.458993912 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.459189892 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.459208965 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.459224939 CET	49886	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.459230900 CET	443	49886	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.462241888 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.462272882 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.462337017 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.462512970 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.462527037 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.562948942 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.565937042 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.565994024 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.566061020 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.566078901 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.566092014 CET	49887	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.566097021 CET	443	49887	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.569998026 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.570044041 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:40.570116043 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.570372105 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:40.570383072 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.089509964 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.090050936 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.090065956 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.090533972 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.090539932 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.359211922 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.359868050 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.359889984 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.360331059 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.360340118 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.537017107 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.540569067 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.540636063 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.540919065 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.540945053 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.540956974 CET	49888	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.540962934 CET	443	49888	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.543936968 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.543977976 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.544084072 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.544286966 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.544302940 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.808459997 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.811292887 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.811348915 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.811403990 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.811420918 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.811438084 CET	49889	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.811443090 CET	443	49889	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.814126968 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.814161062 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:41.814234972 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.814424992 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:41.814431906 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.009066105 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.009605885 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.009637117 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.010114908 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.010121107 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.425918102 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.426515102 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.426549911 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.427129030 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.427144051 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.454677105 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.454710960 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.454776049 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.454793930 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.454874992 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.455029011 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.455060005 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.455070019 CET	49890	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.455075979 CET	443	49890	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.456587076 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.457238913 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.457279921 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.457844019 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.457849026 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.458508968 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.458549023 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.458647013 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.458841085 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.458848953 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.879206896 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.882723093 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.882775068 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.882827997 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.882847071 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.882857084 CET	49891	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.882862091 CET	443	49891	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.885962009 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.886003017 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.886065960 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.886229992 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.886244059 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.902812958 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.909454107 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.909636974 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.909708977 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.909728050 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.909740925 CET	49892	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.909746885 CET	443	49892	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.912650108 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.912694931 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:42.912774086 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.912915945 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:42.912933111 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.341857910 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.342372894 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.342392921 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.342926025 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.342931032 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.636234999 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.636801004 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.636837959 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.637303114 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.637317896 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.796127081 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.799457073 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.799515009 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.799571037 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.799571037 CET	49893	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.799590111 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.799607992 CET	443	49893	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.802807093 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.802839994 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:43.802898884 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.803067923 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:43.803081989 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.081197977 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.083580017 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.083635092 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.083657026 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.083698988 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.083738089 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.083790064 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.083802938 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.083811045 CET	49894	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.083817005 CET	443	49894	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.086751938 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.086802959 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.086915016 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.087090015 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.087106943 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.218600035 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.219252110 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.219261885 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.219799042 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.219805002 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.664362907 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.666949987 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.667023897 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.667079926 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.667099953 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.667119026 CET	49895	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.667124987 CET	443	49895	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.669826984 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.669874907 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.670159101 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.670355082 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.670367956 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.691327095 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.691941023 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.691971064 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.692718983 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.692728043 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.864989042 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.865672112 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.865710974 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:44.866187096 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:44.866195917 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.142182112 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.145392895 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.145447016 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.145454884 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.145565033 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.145657063 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.145678997 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.145689011 CET	49896	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.145694971 CET	443	49896	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.148639917 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.148685932 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.148886919 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.149194002 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.149208069 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.432678938 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.435749054 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.435797930 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.435858965 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.435866117 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.435875893 CET	49897	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.435880899 CET	443	49897	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.438626051 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.438668966 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.438967943 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.439168930 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.439179897 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.548634052 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.549146891 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.549179077 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.549597979 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.549602985 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.885402918 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.886113882 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.886147022 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.886544943 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.886553049 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.986200094 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.988938093 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.989032030 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.989068031 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.989068031 CET	49898	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.989089012 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.989098072 CET	443	49898	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.992428064 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.992474079 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:45.992610931 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.994199038 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:45.994214058 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.330801964 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.331034899 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.331091881 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.331221104 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.331242085 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.331254005 CET	49899	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.331259966 CET	443	49899	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.334109068 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.334137917 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.334275961 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.334455013 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.334470987 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.403429031 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.404030085 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.404066086 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.404469013 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.404475927 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.851833105 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.854850054 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.854902983 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.854995966 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.887743950 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.887787104 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.887803078 CET	49900	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.887810946 CET	443	49900	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.890908003 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.890965939 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:46.891238928 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.891387939 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:46.891405106 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.122797012 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.124459982 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.124501944 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.124927044 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.124934912 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.182394981 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.182873011 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.182895899 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.183414936 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.183423042 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.569562912 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.572359085 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.572457075 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.572494984 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.572511911 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.572523117 CET	49901	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.572529078 CET	443	49901	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.575740099 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.575764894 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.575822115 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.575972080 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.575987101 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.619888067 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.622116089 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.622179031 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.622248888 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.622272968 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.622288942 CET	49902	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.622294903 CET	443	49902	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.624900103 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.624943018 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.625102997 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.625261068 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.625273943 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.810743093 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.811233044 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.811258078 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:47.811765909 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:47.811770916 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.128987074 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.129492998 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.129522085 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.129965067 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.129970074 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.575491905 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.578761101 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.578835964 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.578869104 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.578916073 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.578988075 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.579013109 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.579029083 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.579050064 CET	49904	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.579055071 CET	443	49904	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.582082987 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.582123995 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.582340002 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.582539082 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.582554102 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.676686049 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.677175045 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.677201986 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:48.677885056 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:48.677890062 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.005479097 CET	49705	80	192.168.2.9	93.184.221.240
Nov 25, 2024 15:35:49.125864983 CET	80	49705	93.184.221.240	192.168.2.9
Nov 25, 2024 15:35:49.125932932 CET	49705	80	192.168.2.9	93.184.221.240
Nov 25, 2024 15:35:49.131409883 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.134603977 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.134743929 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.134743929 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.134783983 CET	49905	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.134802103 CET	443	49905	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.137305021 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.137373924 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.137445927 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.137717009 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.137736082 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.408982038 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.409457922 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.409482002 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.409905910 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.409910917 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.593444109 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.593923092 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.593971014 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.594387054 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.594393015 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.709089041 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.709348917 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.709398985 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.709439039 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.709455967 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.709469080 CET	49903	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.709475040 CET	443	49903	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.712186098 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.712208986 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.712275028 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.712505102 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.712517023 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.857356071 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.860112906 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.860240936 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.860311031 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.860332012 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.860344887 CET	49907	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.860349894 CET	443	49907	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.862987995 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.863040924 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:49.863121033 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.863332987 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:49.863346100 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.099127054 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:35:50.099145889 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:35:50.491095066 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.491157055 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.491249084 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.491457939 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.491478920 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.491494894 CET	49906	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.491503954 CET	443	49906	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.493547916 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.493895054 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.493937016 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.494221926 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.494250059 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.494303942 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.494626999 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.494645119 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.494997025 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:50.495002031 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:50.612682104 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:50.612730980 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:50.612801075 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:50.613158941 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:50.613172054 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:51.112484932 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.112519026 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.112569094 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.112585068 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.112620115 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.112893105 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.112911940 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.112922907 CET	49908	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.112927914 CET	443	49908	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.114500999 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.114901066 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.114917994 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.115356922 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.115362883 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.116170883 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.116214037 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.116269112 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.116394997 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.116410017 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.568670988 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.571489096 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.571544886 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.571597099 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.571614027 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.571624994 CET	49909	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.571631908 CET	443	49909	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.581731081 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.581763029 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:51.581815958 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.581995964 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:51.582010031 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.038399935 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.039036036 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.039069891 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.039506912 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.039515018 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.214319944 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.214796066 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.214827061 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.215332031 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.215337992 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.224148035 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.224500895 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.224529982 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.224914074 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.224919081 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.442773104 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:52.442903042 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:52.444288969 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:52.444299936 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:52.444586992 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:52.446280003 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:52.487361908 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:52.490276098 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.498501062 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.498614073 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.498708963 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.498708963 CET	49910	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.498732090 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.498739958 CET	443	49910	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.501460075 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.501501083 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.501624107 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.501775026 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.501792908 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.652607918 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.654175997 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.654233932 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.654251099 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.654283047 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.654331923 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.654357910 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.654372931 CET	49912	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.654378891 CET	443	49912	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.657258987 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.657289028 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.657368898 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.657541990 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.657582045 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.678622961 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.681648970 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.681710958 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.681741953 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.681759119 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.681770086 CET	49911	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.681775093 CET	443	49911	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.684318066 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.684350014 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.684484005 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.684590101 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.684612036 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.900335073 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.900805950 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.900835991 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:52.901273966 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:52.901282072 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.166976929 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.167010069 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.167026043 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.167087078 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.167118073 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.167171001 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208082914 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.208138943 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.208201885 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.208214045 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208233118 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208254099 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208400965 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208419085 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.208431005 CET	49913	443	192.168.2.9	4.175.87.197
Nov 25, 2024 15:35:53.208436966 CET	443	49913	4.175.87.197	192.168.2.9
Nov 25, 2024 15:35:53.306320906 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.316313982 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.316349030 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.316785097 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.316791058 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.354940891 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.357336044 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.357395887 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.357491970 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.357521057 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.357542038 CET	49914	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.357547998 CET	443	49914	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.360552073 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.360626936 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.360694885 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.360939026 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.360955954 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.742774963 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.745752096 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.745803118 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.745827913 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.745863914 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.745925903 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.745945930 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.745961905 CET	49915	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.745968103 CET	443	49915	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.748864889 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.748898983 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:53.748977900 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.749126911 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:53.749141932 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.227879047 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.228391886 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.228409052 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.229043007 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.229049921 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.440970898 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.441566944 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.441581964 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.442020893 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.442025900 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.533783913 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.534249067 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.534265041 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.534734964 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.534740925 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.685923100 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.689030886 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.689140081 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.689140081 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.689167976 CET	49916	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.689188004 CET	443	49916	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.693649054 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.693691969 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.693839073 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.693989992 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.694001913 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.885814905 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.885966063 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.886006117 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.886017084 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.886046886 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.886090040 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.886207104 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.886218071 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.886230946 CET	49917	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.886236906 CET	443	49917	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.889359951 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.889393091 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.889458895 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.889590979 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.889605045 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.988101959 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.991233110 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.991295099 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.991414070 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.991434097 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.991445065 CET	49918	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.991451979 CET	443	49918	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.994621038 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.994652987 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:54.994847059 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.995024920 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:54.995038033 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.143635988 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.144140005 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.144170046 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.144598007 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.144604921 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.590672016 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.593832970 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.593878984 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.593894958 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.593943119 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.594002962 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.594026089 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.594041109 CET	49919	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.594048023 CET	443	49919	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.596887112 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.596920013 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.597012043 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.597189903 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.597203016 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.604469061 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.604835033 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.604860067 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:55.605288982 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:55.605294943 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.065152884 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.068448067 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.068505049 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.068605900 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.068624020 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.068671942 CET	49920	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.068676949 CET	443	49920	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.071140051 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.071183920 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.071257114 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.071414948 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.071428061 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.114753008 CET	49756	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:56.235080957 CET	80	49756	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:56.420001030 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.420475960 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.420501947 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.421025038 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.421030998 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.712611914 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.713572025 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.713609934 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.714010954 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.714018106 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.748907089 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.749522924 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.749567032 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.749890089 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.749897003 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.856012106 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.859282970 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.859335899 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.859343052 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.859395981 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.859467030 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.859488010 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.859499931 CET	49921	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.859505892 CET	443	49921	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.862648964 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.862696886 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:56.862755060 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.862910032 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:56.862931013 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.147862911 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.151583910 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.151648045 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.151741982 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.151762009 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.151772976 CET	49923	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.151778936 CET	443	49923	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.154719114 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.154759884 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.154850006 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.155035019 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.155047894 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.202445030 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.205987930 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.206063986 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.206124067 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.206146002 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.206167936 CET	49922	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.206175089 CET	443	49922	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.209578037 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.209624052 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.209765911 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.210009098 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.210021019 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.316420078 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.316920042 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.316942930 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.317625046 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.317630053 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.333178997 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:35:57.453922987 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:35:57.752037048 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.755141973 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.755211115 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.758014917 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.758034945 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.758068085 CET	49924	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.758074045 CET	443	49924	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.760795116 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.760849953 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.760950089 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.761096954 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.761112928 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.812761068 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.813303947 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.813318014 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:57.813781977 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:57.813787937 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.250401974 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.250446081 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.250499010 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.250519991 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.250559092 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.250791073 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.250806093 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.250823975 CET	49925	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.250829935 CET	443	49925	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.253966093 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.253998041 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.254055977 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.254221916 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.254235029 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.591085911 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.591613054 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.591644049 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.592075109 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.592081070 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.945883036 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.946444988 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.946465015 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.946923971 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.946928978 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.995028973 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.997476101 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.997502089 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:58.997919083 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:58.997924089 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.039002895 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.041763067 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.041831017 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.041871071 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.041892052 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.041902065 CET	49926	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.041908979 CET	443	49926	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.044599056 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.044650078 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.044713974 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.044882059 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.044898033 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.416692019 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.417927980 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.418004990 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.418009996 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.418056011 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.418111086 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.418132067 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.418143034 CET	49927	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.418148994 CET	443	49927	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.421049118 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.421103001 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.421190977 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.421394110 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.421415091 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.458760977 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.458858013 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.459058046 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.459098101 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.459117889 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.459130049 CET	49928	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.459136009 CET	443	49928	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.461824894 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.461858988 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.461924076 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.462078094 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.462085962 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.595113039 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.595884085 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.595916986 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:35:59.596231937 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:35:59.596237898 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.044069052 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.047418118 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.047493935 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.047574997 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.047574997 CET	49929	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.047604084 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.047615051 CET	443	49929	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.050592899 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.050622940 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.050740957 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.050894022 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.050911903 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.072933912 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.073426962 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.073466063 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.073877096 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.073883057 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.620512009 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.620650053 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.620702982 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.620836020 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.620858908 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.620872021 CET	49930	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.620877981 CET	443	49930	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.623995066 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.624053955 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.624171019 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.624355078 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.624372959 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.833580971 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.834182024 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.834213018 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:00.834640026 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:00.834645987 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.156697989 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.157674074 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.157675028 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.157717943 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.157732010 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.253532887 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.255089045 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.255089045 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.255109072 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.255122900 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.289232969 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.289284945 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.289349079 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.289583921 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.289583921 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.292443037 CET	49931	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.292445898 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.292480946 CET	443	49931	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.292510033 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.292752028 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.292752028 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.292789936 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.592708111 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.595735073 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.595900059 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.595900059 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.597076893 CET	49932	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.597110987 CET	443	49932	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.599199057 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.599255085 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.599492073 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.599492073 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.599539042 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.697941065 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.702995062 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.703075886 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.703092098 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.703198910 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.703198910 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.703324080 CET	49933	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.703337908 CET	443	49933	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.706190109 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.706254959 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.706454039 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.706454039 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.706491947 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.961766005 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.962275028 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.962307930 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:01.962789059 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:01.962799072 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.406647921 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.410052061 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.410054922 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.410120964 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.410286903 CET	49934	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.410303116 CET	443	49934	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.410552025 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.410577059 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.411034107 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.411040068 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.413683891 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.413726091 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.413796902 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.413974047 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.413988113 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.847430944 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.850605965 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.850722075 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.850763083 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.850763083 CET	49936	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.850786924 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.850797892 CET	443	49936	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.853329897 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.853370905 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:02.853460073 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.853688955 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:02.853699923 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.016726017 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.017263889 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.017282963 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.017803907 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.017808914 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.455863953 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.455941916 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.456007957 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.456279039 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.456298113 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.456310034 CET	49937	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.456315994 CET	443	49937	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.459295034 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.459348917 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.459436893 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.459610939 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.459623098 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.465289116 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.465703011 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.465719938 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.466128111 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.466133118 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.504441977 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.504817963 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.504832983 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.505347967 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.505353928 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.932014942 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.935127974 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.935199022 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.935292959 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.935292959 CET	49938	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.935309887 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.935324907 CET	443	49938	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.937957048 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.937988997 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.938081026 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.938245058 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.938260078 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.958122969 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.958220959 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.958319902 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.958456993 CET	49939	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.958467960 CET	443	49939	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.967000961 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.967027903 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:03.967107058 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.967535019 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:03.967545986 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.262089014 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.262609959 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.262625933 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.263083935 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.263088942 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.642576933 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.643100977 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.643110037 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.643687010 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.643702984 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.726811886 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.729793072 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.729852915 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.729926109 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.729950905 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.729965925 CET	49940	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.729974985 CET	443	49940	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.732825041 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.732867002 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.732923985 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.733109951 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:04.733120918 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:04.850317001 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:04.850347042 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:04.850440025 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:04.850684881 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:04.850693941 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:05.097754002 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.102844954 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.102921009 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.103084087 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.103084087 CET	49941	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.103111029 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.103118896 CET	443	49941	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.105777025 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.105804920 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.105868101 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.106013060 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.106024981 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.273794889 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.274425983 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.274458885 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.274815083 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.274823904 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.617317915 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:36:05.617487907 CET	443	49732	172.217.17.67	192.168.2.9
Nov 25, 2024 15:36:05.617566109 CET	49732	443	192.168.2.9	172.217.17.67
Nov 25, 2024 15:36:05.719384909 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.721631050 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722121000 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.722135067 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722162008 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722208977 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722282887 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.722343922 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.722343922 CET	49942	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.722369909 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722384930 CET	443	49942	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.722635031 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.722640991 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.725240946 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.725291967 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.725353956 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.725498915 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.725518942 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.758291006 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.758759022 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.758797884 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:05.759066105 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:05.759072065 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.167696953 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.171159983 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.171221018 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.171344995 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.171367884 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.171380997 CET	49943	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.171386957 CET	443	49943	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.174015999 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.174053907 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.174117088 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.174278975 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.174290895 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.204813957 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.208689928 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.208746910 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.209489107 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.209505081 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.209522963 CET	49944	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.209528923 CET	443	49944	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.212214947 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.212260962 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.212318897 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.212482929 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.212495089 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.543876886 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:06.544138908 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:06.544152975 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:06.544864893 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:06.545341969 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:06.545437098 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:06.585238934 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:06.608836889 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.609298944 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.609318972 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.609750986 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.609755039 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.830622911 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.831160069 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.831196070 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:06.831614971 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:06.831619978 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.068450928 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.071439981 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.071634054 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.071670055 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.071670055 CET	49945	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.071687937 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.071697950 CET	443	49945	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.074451923 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.074493885 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.074558020 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.074690104 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.074697018 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.269875050 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.269907951 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.270016909 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.270036936 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.270313025 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.270320892 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.270333052 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.270478010 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.270507097 CET	443	49947	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.270562887 CET	49947	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.273261070 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.273292065 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.273386955 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.273593903 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.273603916 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.578330994 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.579039097 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.579065084 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:07.579504967 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:07.579509974 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.262741089 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263037920 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263047934 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263096094 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263108969 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263153076 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263305902 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263328075 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263344049 CET	49948	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263350010 CET	443	49948	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263477087 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263494968 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.263937950 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.263943911 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.266135931 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.266165018 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.266237974 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.266427040 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.266437054 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.273504019 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.273945093 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.273957968 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.274374962 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.274379015 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.698064089 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.701976061 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.702024937 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.702032089 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.702084064 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.702169895 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.702194929 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.702208996 CET	49949	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.702214003 CET	443	49949	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.705108881 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.705151081 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.705218077 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.705400944 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.705420971 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.718158007 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.721096992 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.721220016 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.721292019 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.721309900 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.721354961 CET	49950	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.721362114 CET	443	49950	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.724175930 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.724217892 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.724284887 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.724411964 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.724426985 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.801820993 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.802292109 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.802328110 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:08.802966118 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:08.802972078 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.121767044 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.122289896 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.122311115 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.122739077 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.122750998 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.244528055 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.247674942 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.247723103 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.247725964 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.247769117 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.247837067 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.247859001 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.247869015 CET	49951	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.247874022 CET	443	49951	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.251060009 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.251102924 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.251332998 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.251519918 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.251538038 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.575598001 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.578739882 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.578850031 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.578880072 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.578880072 CET	49952	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.578895092 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.578907967 CET	443	49952	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.582076073 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.582113981 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:09.582237959 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.582343102 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:09.582349062 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.118159056 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.118743896 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.118760109 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.119349003 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.119358063 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.440676928 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.441565990 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.441581011 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.442121983 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.442126989 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.572499037 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.572526932 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.572587013 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.572619915 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.572808981 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.572808981 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.572822094 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.573016882 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.573049068 CET	443	49953	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.573087931 CET	49953	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.576890945 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.576920033 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.576982021 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.577135086 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.577145100 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.593079090 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.593667984 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.593707085 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.594394922 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.594400883 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.879924059 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.884368896 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.884426117 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.884443045 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.884522915 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.884555101 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.884555101 CET	49954	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.884573936 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.884587049 CET	443	49954	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.887573957 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.887620926 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:10.887686014 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.888051987 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:10.888076067 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.049520016 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.052264929 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.052320004 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.052337885 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.052375078 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.052474022 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.052474022 CET	49955	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.052499056 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.052511930 CET	443	49955	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.055078983 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.055128098 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.055285931 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.055454969 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.055470943 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.105052948 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.105869055 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.105887890 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.106416941 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.106424093 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.443145990 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.443743944 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.443768024 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.444282055 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.444295883 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.562567949 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.566169977 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.566235065 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.566272974 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.566287041 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.566298008 CET	49956	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.566303968 CET	443	49956	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.569616079 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.569669008 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.569742918 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.569900036 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.569915056 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.616590023 CET	49756	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:36:11.877526999 CET	80	49756	24.199.99.22	192.168.2.9
Nov 25, 2024 15:36:11.879709005 CET	49756	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:36:11.904658079 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.904917002 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.904984951 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.905050993 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.905071020 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.905083895 CET	49957	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.905090094 CET	443	49957	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.907923937 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.907959938 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:11.908046961 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.908220053 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:11.908232927 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.429541111 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.430103064 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.430133104 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.430655956 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.430661917 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.618933916 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.619462013 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.619491100 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.620028019 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.620034933 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.791569948 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.792068005 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.792083979 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.792526007 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.792531013 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.907388926 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.910418034 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.910479069 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.910598040 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.910619020 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.910634041 CET	49958	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.910640001 CET	443	49958	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.921228886 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.921284914 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:12.921338081 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.921499014 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:12.921515942 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.074995995 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.078649044 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.078711033 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.078852892 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.078852892 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.079077005 CET	49959	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.079096079 CET	443	49959	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.081753969 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.081799030 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.081965923 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.082119942 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.082139969 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.249036074 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.253243923 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.253375053 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.253375053 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.254910946 CET	49960	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.254935980 CET	443	49960	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.257088900 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.257143021 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.261359930 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.261359930 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.261419058 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.426326990 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.427475929 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.427475929 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:13.427504063 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:13.427512884 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.073147058 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.073662043 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.073678970 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.074116945 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.074121952 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.281615019 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.286384106 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.286436081 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.286451101 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.286465883 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.286535025 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.286858082 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.286874056 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.286886930 CET	49961	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.286891937 CET	443	49961	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.291249990 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.291296005 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.291358948 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.291699886 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.291713953 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.553256989 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.557287931 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.557343006 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.557390928 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.557413101 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.557425976 CET	49962	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.557432890 CET	443	49962	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.560385942 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.560399055 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.560465097 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.560617924 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.560627937 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.742458105 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.743076086 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.743108034 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.743562937 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.743576050 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.829826117 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.830280066 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.830288887 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:14.830734968 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:14.830739975 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.013225079 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.013950109 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.013992071 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.014427900 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.014436007 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.208724976 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.212177038 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.212225914 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.212292910 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.212367058 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.212389946 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.212403059 CET	49963	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.212410927 CET	443	49963	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.215543032 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.215579987 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.215709925 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.215893984 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.215909004 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.289098978 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.292401075 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.292500973 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.292593956 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.292610884 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.292625904 CET	49964	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.292632103 CET	443	49964	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.295737982 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.295792103 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.295850992 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.296019077 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.296037912 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.617767096 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.620331049 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.620502949 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.620546103 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.620569944 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.620582104 CET	49965	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.620588064 CET	443	49965	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.623436928 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.623486042 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:15.623572111 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.623713970 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:15.623730898 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.106429100 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.106937885 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.106982946 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.107414007 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.107423067 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.237951040 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:16.238029957 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:16.238157988 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:16.522759914 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.523297071 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.523310900 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.523792028 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.523796082 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.628104925 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.631803989 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.631865978 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.631917000 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.631934881 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.631946087 CET	49966	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.631952047 CET	443	49966	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.634946108 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.634989977 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.635052919 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.635222912 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:16.635234118 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:16.997809887 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.001113892 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.004821062 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.005100965 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.005110979 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.005141020 CET	49967	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.005146027 CET	443	49967	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.007868052 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.007884979 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.007952929 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.008120060 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.008131027 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.173703909 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.174371958 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.174396038 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.174830914 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.174844980 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.177329063 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.177623987 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.177653074 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.177972078 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.177980900 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.327413082 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:36:17.327567101 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:36:17.444169998 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.445607901 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.445627928 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.446093082 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.446106911 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.615906954 CET	49755	80	192.168.2.9	24.199.99.22
Nov 25, 2024 15:36:17.615952015 CET	49946	443	192.168.2.9	142.250.181.68
Nov 25, 2024 15:36:17.615983009 CET	443	49946	142.250.181.68	192.168.2.9
Nov 25, 2024 15:36:17.648689985 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.651873112 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.651972055 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.652007103 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.652024031 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.652038097 CET	49968	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.652045012 CET	443	49968	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.654958010 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.654998064 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.655062914 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.655214071 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.655227900 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.669585943 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673444033 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673497915 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.673513889 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673600912 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673605919 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.673626900 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673641920 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.673641920 CET	49969	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.673651934 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.673659086 CET	443	49969	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.676229000 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.676270962 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.676337004 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.676445961 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.676457882 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.745774031 CET	80	49755	24.199.99.22	192.168.2.9
Nov 25, 2024 15:36:17.925111055 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.928472042 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.928572893 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.928622007 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.928622007 CET	49970	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.928642988 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.928653002 CET	443	49970	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.931890965 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.931943893 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:17.932029009 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.932219028 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:17.932235003 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.544878960 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.546437025 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:18.546466112 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.547116995 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:18.547122002 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.863027096 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.863800049 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:18.863826036 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:18.864645004 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:18.864653111 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.035506010 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.039047003 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.039113045 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.039146900 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.039252043 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.039334059 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.039334059 CET	49971	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.039356947 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.039369106 CET	443	49971	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.044287920 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.044342995 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.044478893 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.044583082 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.044594049 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.343041897 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.346368074 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.349214077 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.349214077 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.350784063 CET	49972	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.350805998 CET	443	49972	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.352370977 CET	49977	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.352420092 CET	443	49977	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.352677107 CET	49977	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.352776051 CET	49977	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.352792025 CET	443	49977	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.456008911 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.456763029 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.456792116 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.457098007 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.457103968 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.530596972 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.533478975 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.533479929 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.533500910 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.533516884 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.912545919 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.915807962 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.915930986 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.915930986 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.915998936 CET	49974	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.916021109 CET	443	49974	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.919198036 CET	49978	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.919243097 CET	443	49978	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.919399023 CET	49978	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.919481993 CET	49978	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.919492960 CET	443	49978	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.964521885 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.965110064 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.965141058 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:19.965468884 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:19.965476990 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.036773920 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.040103912 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.040168047 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.040196896 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.040232897 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.040397882 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.040397882 CET	49973	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.040415049 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.040426970 CET	443	49973	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.044656992 CET	49979	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.044698000 CET	443	49979	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.045136929 CET	49979	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.045136929 CET	49979	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.045170069 CET	443	49979	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.459291935 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.459331989 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.459376097 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.459391117 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.459429026 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.459640026 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.459661961 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.459676027 CET	49975	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.459682941 CET	443	49975	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.462955952 CET	49980	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.463002920 CET	443	49980	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.463646889 CET	49980	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.463646889 CET	49980	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.463682890 CET	443	49980	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.803705931 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.804193974 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.804214954 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:20.804750919 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:20.804755926 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.236865044 CET	443	49977	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.237349033 CET	49977	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.237370014 CET	443	49977	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.237865925 CET	49977	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.237876892 CET	443	49977	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.254803896 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.259073973 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.259128094 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.259174109 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.259185076 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.259193897 CET	49976	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.259198904 CET	443	49976	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.261876106 CET	49981	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.261919975 CET	443	49981	13.107.246.63	192.168.2.9
Nov 25, 2024 15:36:21.261981964 CET	49981	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.262136936 CET	49981	443	192.168.2.9	13.107.246.63
Nov 25, 2024 15:36:21.262166977 CET	443	49981	13.107.246.63	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:35:01.123359919 CET	53	64001	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:01.142888069 CET	53	50597	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:02.917531967 CET	63273	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:02.917839050 CET	58865	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:03.285187960 CET	53	58865	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:03.286036968 CET	53	63273	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:03.939487934 CET	53	60314	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:04.789108992 CET	56321	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:04.789285898 CET	54441	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:04.928253889 CET	53	56321	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:04.928642035 CET	53	54441	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:06.024251938 CET	54776	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:06.024405003 CET	61853	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:06.161937952 CET	53	54776	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:06.260850906 CET	53	61853	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:09.453042030 CET	62007	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:09.453329086 CET	62821	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:10.467164040 CET	60745	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:10.467561960 CET	62091	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:10.930908918 CET	53	60745	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:10.930933952 CET	53	62007	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:10.931679010 CET	53	62091	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:10.931895971 CET	53	62821	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:12.328083038 CET	55586	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:12.328566074 CET	56347	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:12.473521948 CET	53	56347	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:12.476629972 CET	53	55586	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:15.528768063 CET	53	64945	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:17.963996887 CET	58792	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:17.964143991 CET	54834	53	192.168.2.9	1.1.1.1
Nov 25, 2024 15:35:18.118417025 CET	53	54834	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:18.119178057 CET	53	58792	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:20.867248058 CET	53	53496	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:22.589551926 CET	53	50474	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:39.831099987 CET	53	53687	1.1.1.1	192.168.2.9
Nov 25, 2024 15:35:47.458142042 CET	138	138	192.168.2.9	192.168.2.255
Nov 25, 2024 15:36:00.599098921 CET	53	57457	1.1.1.1	192.168.2.9
Nov 25, 2024 15:36:02.345120907 CET	53	58851	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 15:35:06.260932922 CET	192.168.2.9	1.1.1.1	c224	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 15:35:02.917531967 CET	192.168.2.9	1.1.1.1	0x16aa	Standard query (0)	google.pt	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:02.917839050 CET	192.168.2.9	1.1.1.1	0x1bab	Standard query (0)	google.pt	65	IN (0x0001)	false
Nov 25, 2024 15:35:04.789108992 CET	192.168.2.9	1.1.1.1	0x4042	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:04.789285898 CET	192.168.2.9	1.1.1.1	0xa805	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 15:35:06.024251938 CET	192.168.2.9	1.1.1.1	0x94f2	Standard query (0)	www.google.pt	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:06.024405003 CET	192.168.2.9	1.1.1.1	0xe53f	Standard query (0)	www.google.pt	65	IN (0x0001)	false
Nov 25, 2024 15:35:09.453042030 CET	192.168.2.9	1.1.1.1	0x1088	Standard query (0)	web.authe.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:09.453329086 CET	192.168.2.9	1.1.1.1	0x6738	Standard query (0)	web.authe.net	65	IN (0x0001)	false
Nov 25, 2024 15:35:10.467164040 CET	192.168.2.9	1.1.1.1	0x6fee	Standard query (0)	web.authe.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:10.467561960 CET	192.168.2.9	1.1.1.1	0x6a19	Standard query (0)	web.authe.net	65	IN (0x0001)	false
Nov 25, 2024 15:35:12.328083038 CET	192.168.2.9	1.1.1.1	0x8011	Standard query (0)	web.authe.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:12.328566074 CET	192.168.2.9	1.1.1.1	0xb5f1	Standard query (0)	web.authe.net	65	IN (0x0001)	false
Nov 25, 2024 15:35:17.963996887 CET	192.168.2.9	1.1.1.1	0x37f5	Standard query (0)	web.authe.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:17.964143991 CET	192.168.2.9	1.1.1.1	0x209b	Standard query (0)	web.authe.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 15:34:51.242357016 CET	1.1.1.1	192.168.2.9	0x331c	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:34:51.242357016 CET	1.1.1.1	192.168.2.9	0x331c	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:03.286036968 CET	1.1.1.1	192.168.2.9	0x16aa	No error (0)	google.pt		172.217.17.67	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:04.928253889 CET	1.1.1.1	192.168.2.9	0x4042	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:04.928642035 CET	1.1.1.1	192.168.2.9	0xa805	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 15:35:06.161937952 CET	1.1.1.1	192.168.2.9	0x94f2	No error (0)	www.google.pt		172.217.19.195	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:10.930908918 CET	1.1.1.1	192.168.2.9	0x6fee	No error (0)	web.authe.net		24.199.99.22	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:10.930933952 CET	1.1.1.1	192.168.2.9	0x1088	No error (0)	web.authe.net		24.199.99.22	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:12.476629972 CET	1.1.1.1	192.168.2.9	0x8011	No error (0)	web.authe.net		24.199.99.22	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:35:18.119178057 CET	1.1.1.1	192.168.2.9	0x37f5	No error (0)	web.authe.net		24.199.99.22	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

google.pt

www.google.pt

fs.microsoft.com

slscr.update.microsoft.com

web.authe.net

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49755	24.199.99.22	80	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:35:11.054383039 CET	428	OUT	GET / HTTP/1.1 Host: web.authe.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:35:11.414174080 CET	428	OUT	GET / HTTP/1.1 Host: web.authe.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:35:12.324770927 CET	352	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 25 Nov 2024 14:35:12 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://web.authe.net/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Nov 25, 2024 15:35:57.333178997 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49756	24.199.99.22	80	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:35:56.114753008 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:53 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:53 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:53 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: c3062018-b01e-003e-79df-3d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143453Z-178bfbc474bmqmgjhC1NYCy16c00000007mg00000000g91a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:53 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 14:34:53 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 14:34:53 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 14:34:53 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 14:34:54 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143456Z-178bfbc474bwlrhlhC1NYCy3kg00000007qg000000000zpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: eed78853-a01e-0070-6be3-3e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143456Z-15b8b599d88hr8sfhC1TEBbca400000006000000000077sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: eb308b45-001e-0046-7bfc-3dda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143456Z-178bfbc474bfw4gbhC1NYCunf400000007fg00000000p6xu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:56 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:56 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d4aa3518-701e-0098-625d-3c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143456Z-15b8b599d885ffrhhC1TEBtuv0000000063000000000g10b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:56 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 12c25404-a01e-0070-5667-3d573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143456Z-15b8b599d88phfhnhC1TEBr51n000000063000000000mcmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:59 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:59 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ae573645-101e-008d-516d-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143459Z-174c587ffdfb74xqhC1TEBhabc00000005z000000000rbvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:59 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:59 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 73bf7d7c-c01e-000b-6bd1-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143459Z-15b8b599d882zv28hC1TEBdchn00000005x000000000funy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:59 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:59 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: dbeb181e-a01e-0050-28df-3ddb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143459Z-15b8b599d88tr2flhC1TEB5gk4000000066000000000c0rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:59 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:59 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8592a006-f01e-0085-6b6a-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143459Z-174c587ffdfb5q56hC1TEB04kg00000005y000000000ke35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:59 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143459Z-178bfbc474bwh9gmhC1NYCy3rs00000007s0000000003ysh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143502Z-15b8b599d882zv28hC1TEBdchn00000005z000000000ayv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: eb93f719-b01e-0098-406c-3dcead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143502Z-15b8b599d88z9sc7hC1TEBkr4w000000067g000000007r0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143502Z-178bfbc474b9fdhphC1NYCac0n00000007d000000000mdvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143502Z-174c587ffdfp4vpjhC1TEBybqw000000061g00000000fywn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: b101f067-f01e-0020-26b7-3e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143502Z-178bfbc474brk967hC1NYCfu6000000007eg0000000062r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:04 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:04 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 154b25de-a01e-006f-2503-3e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143504Z-178bfbc474bfw4gbhC1NYCunf400000007h000000000ky3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:04 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:04 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143504Z-178bfbc474bp8mkvhC1NYCzqnn00000007cg00000000fh74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:04 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:05 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143504Z-174c587ffdfcj798hC1TEB9bq4000000068g000000008qhv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:04 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:05 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 3257ccc0-201e-005d-19b5-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143505Z-178bfbc474btrnf9hC1NYCb80g00000007n000000000qrqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:05 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:05 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:05 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143505Z-178bfbc474bmqmgjhC1NYCy16c00000007hg00000000nfrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49733	172.217.17.67	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:05 UTC	802	OUT	GET /amp/web.authe.net HTTP/1.1 Host: google.pt Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:35:06 UTC	853	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.pt/amp/web.authe.net Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ORax7bXyNpGWyThmtG93_Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 25 Nov 2024 14:35:05 GMT Expires: Wed, 25 Dec 2024 14:35:05 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 236 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:35:06 UTC	236	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 70 74 2f 61 6d 70 2f 77 65 62 2e 61 75 74 68 65 2e 6e 65 74 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.pt/amp/web.authe.net">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:06 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143506Z-15b8b599d88g5tp8hC1TEByx6w000000064g000000001sgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:06 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 7a05741d-701e-0021-0754-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143507Z-15b8b599d882hxlwhC1TEBfa5w00000005xg00000000ggx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:06 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b12c7864-501e-007b-43bf-3e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143507Z-178bfbc474bscnbchC1NYCe7eg00000007v0000000001p4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:07 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6ea5360a-801e-002a-4904-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143507Z-178bfbc474bq2pr7hC1NYCkfgg00000007pg00000000gvyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:07 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:07 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c569ec8c-a01e-003d-0e22-3d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143507Z-178bfbc474bmqmgjhC1NYCy16c00000007k000000000maa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:07 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49742	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:35:08 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=68304 Date: Mon, 25 Nov 2024 14:35:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49743	172.217.19.195	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:07 UTC	806	OUT	GET /amp/web.authe.net HTTP/1.1 Host: www.google.pt Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:35:09 UTC	1177	IN	HTTP/1.1 302 Found Location: http://web.authe.net Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pQawM-tOIl2_T9OyuJkjOw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 25 Nov 2024 14:35:08 GMT Server: gws Content-Length: 217 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=519=f2cNXOFK0VSyhFBInLwEYsDWTKBuqNf7-TjaCz9tm9fdJ3g0qwNvhDZD8LJgalntRF_akTmTOr2LHjwuS5gBXAeW29uRrZN1ZjN2RTssHALCb_rpW2Nvl_6TMoof5G_9DAsDJ7-bm7YBOKZWsu9NSrUHYqfpOydo_t5RMKOsy8-nHFlEHgLh0RtwDea7Z8lGxaPEWA; expires=Tue, 27-May-2025 14:35:08 GMT; path=/; domain=.google.pt; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:35:09 UTC	213	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 65 62 2e 61 75 74 68 65 2e 6e 65 74 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="http://web.authe.net">here</A>.</BODY></HTM
2024-11-25 14:35:09 UTC	4	IN	Data Raw: 4c 3e 0d 0a Data Ascii: L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:08 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:08 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 3eb19cd4-801e-00ac-194b-3cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143508Z-15b8b599d88f9wfchC1TEBm2kc000000068000000000651d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:09 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 29297304-901e-0083-6776-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143509Z-174c587ffdf9xbcchC1TEBxkz400000005y000000000bvt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:09 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 47ff93a4-401e-0083-0f5d-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143509Z-174c587ffdfldtt2hC1TEBwv9c00000005xg00000000b4k1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:09 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143509Z-174c587ffdfl22mzhC1TEBk40c000000063g00000000sfap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49749	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:35:10 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=68280 Date: Mon, 25 Nov 2024 14:35:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 14:35:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:09 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 375df28d-601e-00ab-5b0b-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143510Z-178bfbc474b9xljthC1NYCtw9400000007fg00000000e04f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:11 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:11 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143511Z-178bfbc474bbbqrhhC1NYCvw7400000007s000000000caay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:11 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:11 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 413a5bf0-401e-0035-1ab5-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143511Z-178bfbc474brk967hC1NYCfu6000000007dg000000009gxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:11 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143512Z-178bfbc474bwlrhlhC1NYCy3kg00000007pg000000004up1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143512Z-174c587ffdfb74xqhC1TEBhabc00000006500000000029nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:12 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:12 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143512Z-178bfbc474brk967hC1NYCfu6000000007e00000000085eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:12 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49757	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=g4AMVdXEZm6Noem&MD=wwDXwtMO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 14:35:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e588ae27-bed4-4dbf-9b6f-b0d33254c868 MS-RequestId: dc1f4a3c-14ab-4218-8865-a2bea3cca13e MS-CV: fkigJlHQc06TNOx8.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 14:35:13 GMT Connection: close Content-Length: 24490
2024-11-25 14:35:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 14:35:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.9	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143513Z-178bfbc474bscnbchC1NYCe7eg00000007pg00000000hpgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 33a5509c-101e-00a2-2819-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143514Z-178bfbc474bbcwv4hC1NYCypys00000007hg000000001yex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49763	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:13 UTC	656	OUT	GET / HTTP/1.1 Host: web.authe.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:35:14 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28465 Connection: close X-Powered-By: PHP/8.3.13 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd; path=/ Vary: Accept-Encoding X-Powered-By: PleskLin
2024-11-25 14:35:14 UTC	15990	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 20 2d 20 42 72 61 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"> <title>Home - Brand</title> <link rel="stylesheet" href="assets/bootstrap/css/bootstra
2024-11-25 14:35:15 UTC	12475	IN	Data Raw: 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 31 32 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 20 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 20 73 65 63 74 69 6f 6e 2d 73 75 62 68 65 61 64 69 6e 67 22 3e 4c 6f 72 65 6d 20 69 70 73 75 6d 20 64 6f 6c 6f 72 20 73 69 74 20 61 6d 65 74 Data Ascii: ner"> <div class="row"> <div class="col-lg-12 text-center"> <h2 class="text-uppercase section-heading">Contact Us</h2> <h3 class="text-muted section-subheading">Lorem ipsum dolor sit amet

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: c30ad238-e01e-0051-4a01-3f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143514Z-15b8b599d88m7pn7hC1TEB4axw0000000660000000004m3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a4295f9d-401e-008c-2e0a-3f86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143514Z-15b8b599d88hr8sfhC1TEBbca400000005x000000000fu22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c24f93c3-601e-00ab-62a8-3e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143514Z-178bfbc474bw8bwphC1NYC38b400000007gg000000002s14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:16 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143516Z-174c587ffdfcj798hC1TEB9bq4000000064g00000000rnea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:16 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.9	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 075488ae-001e-0065-2f1a-3e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143516Z-15b8b599d88l2dpthC1TEBmzr000000006200000000089y2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:16 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2822332a-801e-002a-6c23-3d31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143516Z-178bfbc474b7cbwqhC1NYC8z4n00000007c000000000pn2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.9	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:16 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 89d933d2-101e-0028-046e-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143516Z-174c587ffdf9xbcchC1TEBxkz400000005ug00000000qe1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49770	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	609	OUT	GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:17 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:17 GMT Content-Type: text/css Content-Length: 209628 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-332dc" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	16130	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4b 61 75 73 68 61 6e 2b 53 63 72 69 70 74 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 32 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Montserrat:400,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Kaushan+Script&display=swap);/! Bootstrap v5.2.3 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstr
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 2d 6c 67 2d 34 2c 2e 67 78 2d 6c 67 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 20 31 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 34 2c 2e 67 79 2d 6c 67 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 20 31 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 35 2c 2e 67 78 2d 6c 67 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 20 33 72 65 6d 7d 2e 67 2d 6c 67 2d 35 2c 2e 67 79 2d 6c 67 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 20 33 72 65 6d 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 63 6f 6c 2d 78 6c 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 6c 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 6c 2d Data Ascii: -lg-4,.gx-lg-4{--bs-gutter-x: 1.5rem}.g-lg-4,.gy-lg-4{--bs-gutter-y: 1.5rem}.g-lg-5,.gx-lg-5{--bs-gutter-x: 3rem}.g-lg-5,.gy-lg-5{--bs-gutter-y: 3rem}}@media(min-width: 1200px){.col-xl{flex:1 0 0%}.row-cols-xl-auto>*{flex:0 0 auto;width:auto}.row-cols-xl-
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 2d 34 20 2d 34 20 38 20 38 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 72 3d 27 33 27 20 66 69 6c 6c 3d 27 72 67 62 61 25 32 38 30 2c 20 30 2c 20 30 2c 20 30 2e 32 35 25 32 39 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 6c 65 66 74 20 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 20 2e 31 35 73 20 65 61 Data Ascii: ackground-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='rgba%280, 0, 0, 0.25%29'/%3e%3c/svg%3e");background-position:left center;border-radius:2em;transition:background-position .15s ea
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2b 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2c 3a 6e 6f 74 28 Data Ascii: border-color:var(--bs-btn-hover-border-color);outline:0;box-shadow:var(--bs-btn-focus-box-shadow)}.btn-check:focus-visible+.btn{border-color:var(--bs-btn-hover-border-color);outline:0;box-shadow:var(--bs-btn-focus-box-shadow)}.btn-check:checked+.btn,:not(
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 3a 6d 69 64 64 6c 65 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 Data Ascii: :middle}.btn-group>.btn,.btn-group-vertical>.btn{position:relative;flex:1 1 auto}.btn-group>.btn-check:checked+.btn,.btn-group>.btn-check:focus+.btn,.btn-group>.btn:hover,.btn-group>.btn:focus,.btn-group>.btn:active,.btn-group>.btn.active,.btn-group-verti
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 73 2d 63 61 72 64 2d 63 61 70 2d 62 67 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 73 2d 63 61 72 64 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 63 61 72 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 2e 63 61 72 64 2d 68 65 61 64 65 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 63 61 72 64 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 20 76 61 72 28 2d 2d 62 73 2d 63 61 72 64 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 20 30 20 30 7d 2e 63 61 72 64 2d 66 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 73 2d 63 61 72 64 2d 63 61 70 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 Data Ascii: s-card-cap-bg);border-bottom:var(--bs-card-border-width) solid var(--bs-card-border-color)}.card-header:first-child{border-radius:var(--bs-card-inner-border-radius) var(--bs-card-inner-border-radius) 0 0}.card-footer{padding:var(--bs-card-cap-padding-y) v
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 61 62 6c 65 64 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 64 69 73 61 62 6c 65 64 2d 62 67 29 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 7b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d Data Ascii: abled,.list-group-item:disabled{color:var(--bs-list-group-disabled-color);pointer-events:none;background-color:var(--bs-list-group-disabled-bg)}.list-group-item.active{z-index:2;color:var(--bs-list-group-active-color);background-color:var(--bs-list-group-
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 2d 6d 61 72 67 69 6e 3a 20 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 67 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2d 77 69 64 74 68 3a 20 30 2e 38 72 65 6d 3b 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2d 68 65 69 67 68 74 3a 20 30 2e 34 72 65 6d 3b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 7a 69 6e 64 65 78 29 3b 64 69 73 Data Ascii: -margin: ;--bs-tooltip-font-size:0.875rem;--bs-tooltip-color: #fff;--bs-tooltip-bg: #000;--bs-tooltip-border-radius: 0.375rem;--bs-tooltip-opacity: 0.9;--bs-tooltip-arrow-width: 0.8rem;--bs-tooltip-arrow-height: 0.4rem;z-index:var(--bs-tooltip-zindex);dis
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 76 61 73 2d 6d 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 7a 69 6e 64 65 78 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 63 6f 6c 6f 72 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: vas-md{position:fixed;bottom:0;z-index:var(--bs-offcanvas-zindex);display:flex;flex-direction:column;max-width:100%;color:var(--bs-offcanvas-color);visibility:hidden;background-color:var(--bs-offcanvas-bg);background-clip:padding-box;outline:0;transition:
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 70 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 29 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 72 64 65 72 2d 74 6f 70 2d 30 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 72 64 65 72 2d 65 6e 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 29 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 72 64 65 72 2d 65 6e 64 2d 30 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 20 21 Data Ascii: p:var(--bs-border-width) var(--bs-border-style) var(--bs-border-color) !important}.border-top-0{border-top:0 !important}.border-end{border-right:var(--bs-border-width) var(--bs-border-style) var(--bs-border-color) !important}.border-end-0{border-right:0 !

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49771	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:16 UTC	604	OUT	GET /assets/fonts/font-awesome.min.css HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:17 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:17 GMT Content-Type: text/css Content-Length: 31000 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-7918" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	16132	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-11-25 14:35:17 UTC	14868	IN	Data Raw: 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 Data Ascii: a-youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{content:"\f16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49772	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:17 UTC	593	OUT	GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:17 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:17 GMT Content-Type: text/javascript Content-Length: 80372 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-139f4" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	16124	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 32 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.2.3 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 2c 63 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6e 74 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6e 74 2c 63 2c 6c 29 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 72 28 65 74 29 7d 29 2c 69 2c 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 65 64 28 29 29 2c 61 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 7d 5f 69 73 41 6e 69 6d 61 74 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 6c 69 64 65 22 29 7d 5f 67 65 74 41 63 74 69 76 65 28 29 7b 72 65 74 75 72 6e 20 51 2e 66 69 6e 64 4f 6e 65 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 7d 5f 67 65 74 49 74 65 Data Ascii: ,c),s.classList.add(nt),i.classList.remove(nt,c,l),this._isSliding=!1,r(et)}),i,this._isAnimated()),a&&this.cycle()}_isAnimated(){return this._element.classList.contains("slide")}_getActive(){return Q.findOne(".active.carousel-item",this._element)}_getIte
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 28 74 29 3d 3d 3d 68 7d 29 29 3a 79 74 2c 75 3d 64 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 26 26 28 75 3d 64 29 3b 76 61 72 20 66 3d 75 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 5b 69 5d 3d 4c 65 28 74 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 69 2c 62 6f 75 6e 64 61 72 79 3a 73 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 6f 2c 70 61 64 64 69 6e 67 3a 72 7d 29 5b 56 74 28 69 29 5d 2c 65 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 66 29 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: unction(t){return de(t)===h})):yt,u=d.filter((function(t){return c.indexOf(t)>=0}));0===u.length&&(u=d);var f=u.reduce((function(e,i){return e[i]=Le(t,{placement:i,boundary:s,rootBoundary:o,padding:r})[Vt(i)],e}),{});return Object.keys(f).sort((function(t
2024-11-25 14:35:17 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 62 69 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 76 69 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 72 65 74 75 72 6e 22 62 61 63 6b 64 72 6f 70 22 7d 73 68 6f 77 28 74 29 7b 69 66 28 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 56 69 73 69 62 6c 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6d 28 74 29 3b 74 68 69 73 2e 5f 61 70 70 65 6e 64 28 29 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 28 29 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 41 6e 69 6d 61 74 65 64 26 26 64 28 65 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6d 69 29 2c 74 68 69 73 2e 5f 65 6d 75 6c 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 28 28 29 3d 3e 7b Data Ascii: ){return bi}static get DefaultType(){return vi}static get NAME(){return"backdrop"}show(t){if(!this._config.isVisible)return void m(t);this._append();const e=this._getElement();this._config.isAnimated&&d(e),e.classList.add(mi),this._emulateAnimation((()=>{
2024-11-25 14:35:17 UTC	15096	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 67 65 74 54 65 6d 70 6c 61 74 65 46 61 63 74 6f 72 79 28 74 29 2e 74 6f 48 74 6d 6c 28 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 5a 69 2c 74 6e 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 60 62 73 2d 24 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4e 41 4d 45 7d 2d 61 75 74 6f 60 29 3b 63 6f 6e 73 74 20 69 3d 28 74 3d 3e 7b 64 6f 7b 74 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 29 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4e 41 4d Data Ascii: const e=this._getTemplateFactory(t).toHtml();if(!e)return null;e.classList.remove(Zi,tn),e.classList.add(`bs-${this.constructor.NAME}-auto`);const i=(t=>{do{t+=Math.floor(1e6*Math.random())}while(document.getElementById(t));return t})(this.constructor.NAM

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:17 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a6b1c0e3-801e-002a-1ea2-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143517Z-178bfbc474bpnd5vhC1NYC4vr400000007h000000000gss3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:18 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143518Z-174c587ffdftv9hphC1TEBm29w00000005xg00000000pf34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.9	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:18 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143518Z-174c587ffdf9xbcchC1TEBxkz400000005z0000000007qfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:18 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143519Z-178bfbc474bscnbchC1NYCe7eg00000007sg000000009s9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:18 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 732016c8-001e-000b-7fb8-3e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143519Z-178bfbc474b9fdhphC1NYCac0n00000007gg00000000cp52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.9	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143519Z-174c587ffdfp4vpjhC1TEBybqw00000006500000000028an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49780	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	641	OUT	GET /assets/img/header-bg.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:19 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 148216 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-242f8" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:19 UTC	16128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 04 e2 07 6c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 33 b0 8a d4 94 24 02 24 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222l3$$
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 04 78 b5 3e 5e da 8d 11 19 10 2a c0 90 91 08 98 4c 2f 42 3a 46 40 d9 19 0a 04 f6 65 f4 33 7a c6 94 11 21 21 88 4c 99 b3 27 0d 4f 8f a9 c6 d8 a2 2a 48 8a 23 34 8c 54 43 54 15 0c 7a 0f a9 97 a3 37 6b a8 88 29 8c d3 1a 02 33 5a 03 29 e3 d4 f8 9b 64 c2 22 b2 7d ee 3b f6 1b 21 31 4c 54 c2 15 40 54 10 10 19 4e 55 ca cf 2d 71 af a5 8b a3 27 9b 53 c7 5c 42 b0 75 cd ed 9b e5 e9 9f a1 97 be 11 84 55 20 21 01 39 d8 19 33 5c 4f 2d 07 96 cd 2f 68 c9 ea 8f a1 97 45 d4 68 88 41 54 c1 54 51 a1 5c a0 25 41 93 44 60 00 a8 32 9b 5c 26 0c 56 4e 55 93 26 40 e7 5c cd 08 1a 93 f4 5c f4 ae 40 8d 10 98 24 57 36 6a 50 4c 56 52 20 34 64 84 f4 4a 19 21 12 01 20 12 32 72 b3 c7 67 ce da 35 00 90 d1 15 73 21 11 22 13 09 95 e8 30 56 a0 12 23 35 93 71 ec 8f a1 9b d6 54 81 36 a0 80 1b 82 Data Ascii: x>^L/B:F@e3z!!L'OH#4TCTz7k)3Z)d"};!1LT@TNU-q'S\BuU !93\O-/hEhATTQ\%AD`2\&VNU&@\\@$W6jPLVR 4dJ! 2rg5s!"0V#5qT6
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 9f 8a 55 f6 ef 75 f1 c6 89 b5 c2 7f 9b ba 70 fa 0e ca 73 70 bc 85 ee e1 7e 69 d1 7c 60 10 f3 ef 60 81 81 9e ca 3f 0c de eb e5 5a bc 59 13 75 e8 91 16 6d 4c e1 19 26 ba 5b 36 04 8c 51 b0 60 5b 27 b2 87 0b da 03 7b 85 b2 36 78 d4 5f 62 90 93 d8 05 24 45 bb 8f 68 47 6d bc 2d 69 40 dd b2 0d 8c cb 93 88 31 89 1f 16 01 07 5f 65 bf f8 a0 2c f6 1e 33 50 d0 d9 cf b9 57 4e 6e 31 f4 53 df 0f 84 64 8b ac e2 7f d3 8a b5 24 ec 81 eb be 67 5c 3d 20 74 57 54 37 de cb c6 7d 10 a4 0a d0 56 82 9a 9f 4c d6 a7 d3 b9 e5 3b 88 f2 cd 12 72 51 02 f1 03 b8 53 67 11 69 89 c7 cd b1 db b2 db 6e 04 3f c6 30 9a df 7a 8b ea 98 31 d1 4f 94 c1 77 ee a7 cd a4 33 d1 cf e2 94 30 fd cc f9 51 fd db 8e 37 a6 f1 10 c7 47 79 38 a8 0f e0 90 33 bd 36 63 f7 44 c6 69 b9 d8 bb bc af 77 61 c6 ce 6a 65 Data Ascii: Uupsp~i\|``?ZYumL&[6Q`['{6x_b$EhGm-i@1_e,3PWNn1Sd$g\= tWT7}VL;rQSgin?0z1Ow30Q7Gy836cDiwaje
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 1d 17 63 91 e3 0e 0c d9 e6 86 c6 c9 a4 f5 72 cd 9e ea fd 52 6c 75 63 76 d6 2a 47 c6 6a c7 47 47 73 59 b1 73 4c 8f 15 d7 46 7a 93 6b 5d c8 50 42 b2 46 c9 47 04 f7 35 63 13 f8 c7 57 5d ab 4d 55 ea 9c 13 54 e0 36 ee fe 8f bf e4 f4 3d 4f 51 ea 3d 47 a8 f5 47 aa 27 d9 13 f0 4b c1 2f 16 01 f4 fa 25 c7 e5 5e 48 b1 aa 4d 1e a9 a9 aa fd c8 a2 a2 3c d6 6c 55 87 4d 5d 1f 93 d8 e8 c9 ab a4 7c 88 5f 80 dd 83 1a 98 0f 74 d8 66 8a ce 2e 76 31 8f 74 4c 53 91 08 81 59 04 57 47 26 2b 85 64 62 f8 e9 a6 28 a8 96 68 d9 ae f4 67 03 54 8b f0 48 e2 8d db 8a 66 d6 45 12 31 4f 07 ee 62 bb 2b f5 73 b6 2d 2a ab d6 c5 b3 71 55 58 8f 76 b8 b1 3e 87 c3 e2 7a 31 0f 6a b9 31 44 8e 47 44 73 46 40 a9 cd 38 a6 fe 41 08 69 fc 54 42 70 4f 9b 0f 62 2f 5f 24 f4 b1 6b 18 eb 38 1d 04 25 d1 e2 93 Data Ascii: crRlucvGjGGsYsLFzk]PBFG5cW]MUT6=OQ=GG'K/%^HM<lUM]\|_tf.v1tLSYWG&+db(hgTHfE1Ob+s-qUXv>z1j1DGDsF@8AiTBpOb/_$k8%
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 89 f0 d3 98 e4 c1 d9 be 83 4e 2d df 56 ef be b8 63 4c 20 ef 59 af 5e fd 6e a6 58 ef af 71 fc d5 92 7c ca 59 8f 3a 6a 47 07 17 00 be 60 de a2 64 81 4d cf 26 92 2b 1d eb f0 75 74 fd 30 84 07 25 67 35 04 c0 3e fc 7e be f0 6a 39 53 83 8e bd 34 3b be f8 e1 f1 bf 11 7e e1 a5 8d c2 4e e3 aa b9 32 cc 79 6e e4 99 06 32 e8 9b ba 45 4c 1e e4 69 82 55 ca 04 ba 1d 68 e0 a8 ba 7e 4c 0c f8 1a b7 a9 aa e3 f1 c2 4a e4 9e b9 0f 8f c5 e5 70 46 1a de 18 34 bc 4c 12 f3 00 74 de 6f df 68 e1 ca 64 c9 f9 37 60 e9 cb 45 98 7e df dc 57 2e 3d 13 72 f7 40 29 8a fd ce 6f e3 ba 8f 31 a8 26 be e9 4c 17 ab 83 b5 d1 4a ae 32 1a cc 49 f1 fe dd 77 00 5d c9 31 e3 87 8b 37 f5 d2 e7 ef 7b 7d 34 2c 5a 1a 8f 0d 3e dd 69 f0 02 4d 79 17 52 2b bf ec 37 af 2f 99 79 8d 77 2a b8 f7 8e 0c ab e4 c4 15 Data Ascii: N-VcL Y^nXq\|Y:jG`dM&+ut0%g5>~j9S4;~N2yn2ELiUh~LJpF4Ltohd7`E~W.=r@)o1&LJ2Iw]17{}4,Z>iMyR+7/yw*
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 6b c8 5d 5f 89 7e 0b ef 7c 32 cc b7 5c 65 32 95 3a 47 1f 86 05 c9 30 e3 f0 9d e7 99 0c 83 90 3e 14 f1 5c 1c ae 01 55 df 69 32 5a 5c 28 5b 92 bf c9 f2 a7 07 3e 0d 54 a3 87 da e4 fb 51 c0 f1 35 ad 31 0e ae ac a1 ff 00 66 02 57 e2 47 0a 4d d9 66 e3 f1 07 ba 92 01 32 72 be dc f4 98 f3 72 4f b5 c5 09 70 be 97 23 7a 61 46 1d 0d 45 ca 3c 29 73 de 86 8d 43 53 0f f1 c8 b4 e9 70 35 17 ba ba 6e 11 38 b9 50 23 99 81 13 a2 f7 f7 e0 c7 c5 f9 3f f9 39 bb ae 34 f9 3e 0d e7 9f f0 f3 e4 67 c7 e1 e0 74 58 5c 11 30 fb a9 22 e4 3e cf f8 1a 5f e0 6f b8 64 01 fa f8 8d 66 14 65 0c bd 5f a3 8c cb fd 02 18 71 2b c4 c5 ff 00 59 a7 fa 10 71 a8 07 89 98 3f cc be 30 53 9a 7e b5 7f 98 3b 3c 4c 1f bc c4 54 96 76 e1 51 46 24 c4 78 32 9c 17 7a cd 41 4e e8 7f 6c 9f 0b cc 64 23 32 c1 c9 f7 Data Ascii: k]_~\|2\e2:G0>\Ui2Z\([>TQ51fWGMf2rrOp#zaFE<)sCSp5n8P#?94>gtX\0">_odfe_q+Yq?0S~;<LTvQF$x2zANld#2
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 8f 32 0c f4 4d c8 af a7 38 e1 23 c7 15 e8 84 cc 88 3f e8 d6 70 39 e0 8c ce 61 e6 59 81 79 26 3a f7 a1 b8 13 5d 19 c0 f8 8c 60 ab 9e 1b a7 c1 8c 14 f7 42 fa 38 df bb d1 8e fc 38 a9 26 1e 4c 88 40 37 15 5d 54 a1 95 dd 01 1d 26 84 0e 28 e5 41 4a dd d7 9d 70 21 ea 3e f9 91 a9 a8 12 83 81 fb 02 60 34 1b f4 3f 86 0f c9 88 3e 92 6f 06 cc d0 f0 34 0a bc 53 51 3d a3 fa e6 af 14 34 bd 5c 05 1f 0f e1 91 40 29 ea f0 32 29 63 f3 8c b5 a8 9f ea df 6f ff 00 7d fe 3d 3e e2 3e 0b e4 73 ef 63 fa df f2 f7 f2 c8 fd 67 f1 cf c9 07 7f 6d fd c4 fe 9a 5c 4b fd ca c6 2b e1 38 e4 25 f1 e1 fd 70 0c 05 03 f7 ef 28 c6 41 d9 34 a5 30 f6 39 b6 5c 05 68 e8 a5 f0 3b 1f ac 84 80 74 d1 62 1c 98 1e 19 a8 a5 e2 ea f0 c3 0e ab ba a3 1d d0 87 56 91 2c c9 2c 77 bb 2a e4 22 a5 0d c7 24 d3 aa e4 Data Ascii: 2M8#?p9aYy&:]`B88&L@7]T&(AJp!>`4?>o4SQ=4\@)2)co}=>>scgm\K+8%p(A409\h;tbV,,w*"$
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 78 70 6f 63 f8 e8 41 e4 c3 fd bf e4 d5 31 ba 27 4c 33 42 04 ed d0 4e d0 33 10 ae 00 47 71 ed ee 89 87 3b 1c f4 9b f0 ba 0c f8 e7 a4 cb ef 86 4b 9c 9f 07 29 0d 66 08 18 f9 3e cc d1 cc dd 98 44 c0 1c 59 b8 30 64 e4 c6 39 e9 9c 21 25 56 16 84 f6 1b b5 b7 2f 16 4c 41 41 b8 29 ea b9 93 c7 fd 9f 15 11 f8 0a be c3 53 5a af b7 19 c6 3f 97 1d 2a cd 86 30 86 7d 70 c0 54 32 5b ad e9 8c 56 fa 87 cc aa a0 af 3a 33 54 7e cc 33 0f 09 f8 38 93 81 94 c0 c5 a2 f8 76 18 00 03 00 e0 c3 34 59 cd f7 24 37 a2 02 60 e0 6a 9a 86 8f 3e d3 31 0e e7 95 f0 49 e6 94 ac 26 a4 13 72 29 81 0b dd fd 26 04 3d 1d 57 a6 00 03 3e 1f 38 2e b3 ea 9b 88 26 58 ad f4 c2 2d 5c 2c 41 70 5f b7 55 45 e1 ae 47 ef fa c2 49 6e 10 4f 57 39 11 34 12 d8 5a 61 1a a7 4d 0b 57 87 38 e5 f3 88 6a a7 00 d0 6a d4 Data Ascii: xpocA1'L3BN3Gq;K)f>DY0d9!%V/LAA)SZ?*0}pT2[V:3T~38v4Y$7`j>1I&r)&=W>8.&X-\,Ap_UEGInOW94ZaMW8jj
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 24 08 75 e5 d1 01 e6 4a b7 02 59 03 01 fe 5f c3 2c 6a 22 e0 6f 59 cb e6 50 54 72 d3 a4 ee 89 46 ef be 9c 4f a2 b8 00 5d f4 a2 92 69 d2 fd bf b8 04 71 f8 6e b4 65 19 cc 2c 6e e4 3b 9f 77 50 41 c4 4d a3 90 20 35 02 2f 57 25 3d c7 52 85 34 a4 7a 63 ce 18 81 43 b3 0f af 1f 58 40 33 8b ba 52 61 0f f2 7d 6f 45 91 c7 0a bb af dd 87 e6 11 50 e0 e7 c8 39 03 a8 18 43 82 a3 84 1c a4 57 25 3f 14 3a 65 00 71 39 92 8b 33 e1 e1 fe 30 02 26 58 af 4c 04 45 8b 9a ca e0 ea 3b 83 4d ea dc 05 ac c8 f8 87 37 12 9d ae 40 20 38 a8 35 c4 2b 74 18 97 75 0f df dc 33 81 57 08 05 7d dd 9d ff 00 c3 96 10 0c 30 48 81 8a 3b 26 eb 89 79 f4 e4 02 d9 32 c4 5e 89 aa a2 30 93 7f 3a 86 e4 1a 93 9c d6 fe 74 c2 8e f4 61 12 b8 3c 5f 30 f1 58 2b a8 be 3f e9 c0 91 f4 3f 33 02 2f 54 d4 ec 29 84 95 Data Ascii: $uJY_,j"oYPTrFO]iqne,n;wPAM 5/W%=R4zcCX@3Ra}oEP9CW%?:eq930&XLE;M7@ 85+tu3W}0H;&y2^0:ta<_0X+??3/T)
2024-11-25 14:35:20 UTC	1016	IN	Data Raw: 23 92 13 46 27 7c 1f d2 fd dd 76 ca 8a 5e 8a 3f 57 f6 fa 8a 7e cb 59 57 e0 49 31 e1 38 57 e4 e1 5f 92 22 a1 bf 13 f4 bb eb 62 63 70 58 93 d3 8b b6 5c 85 c3 f6 cd e2 48 4d 3d 29 1f a8 ef a9 2f 66 c1 dc c4 d7 92 9c 30 fe ad ee 71 a3 89 1c 48 a8 a8 a8 a8 6a 89 42 94 a5 28 d2 22 12 48 b9 3c 29 8b 02 4c a5 29 4c 58 9f d8 be a4 bd 9b 08 dc f2 e9 73 a5 29 4a ca ca ca ca ca ca ca ca ca ca ca ca ce 26 71 33 88 a2 31 3f 53 4f d9 ae cf 4a 52 94 a5 29 4a 52 94 bf 3c df 4a 5f 11 37 d0 9e f2 d9 4a 52 94 a5 f6 e7 e8 a9 ed 94 a5 29 4b d3 5a 29 7d 3a 13 29 d5 79 c2 7a 5a ef b4 bf 91 5e d2 fc e5 f1 42 da 1f 9e b6 0a 52 97 75 be 9e bb fa cd f0 ee dc fa b3 db de e0 df 8a 9e f2 87 e4 2d bd fb 6a f2 67 8e ba 28 6f c8 5b 7b da 1f ab e1 ee 3e 45 2e 54 8c 69 4d 81 77 1f a3 b1 6c Data Ascii: #F'\|v^?W~YWI18W_"bcpX\HM=)/f0qHjB("H<)L)LXs)J&q31?SOJR)JR<J_7JR)KZ)}:)yzZ^BRu-jg(o[{>E.TiMwl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.9	49781	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	653	OUT	GET /assets/img/portfolio/1-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 16792 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-4198" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:20 UTC	662	IN	Data Raw: db e5 03 f5 47 1f 7a 86 4b aa 65 82 ab 27 9d 5f 8b d8 aa 49 e7 7f ac d3 f7 46 88 ae b5 c5 3e eb 7d 53 2d 3e e8 e6 4a 81 d7 27 9f b1 54 7f 9a a3 76 ba 62 a1 a9 ae 8b 0f f7 22 c3 ee 39 95 0b a7 38 d3 0f bd 42 6b c5 02 89 6a 6b a5 70 75 bc fc 87 6b 77 04 69 27 b4 a7 37 47 1f b5 3c d6 86 99 24 6a a7 0f e8 8f f9 08 a3 01 dd 5c 45 12 53 4b a8 38 e2 3f 14 f6 67 8f b5 24 99 76 fc 3c eb c1 32 5d 46 f1 a1 41 1a 81 1c d1 cb 9d 31 a2 51 96 08 02 ee d7 bf dd 6d 67 a4 97 37 8c 7c 1c ad 5f 7a db 78 b9 05 96 da 2c 98 70 d4 c1 ae 53 fd 6e c0 7b 02 c3 9a 98 73 51 2a 97 09 71 fc 8b 5f 28 53 fc c7 49 24 92 ca 66 99 ee 96 57 78 a4 91 c5 ef 3f d4 ea 94 a2 89 89 45 54 c8 b1 fa 07 34 85 ae 09 cd 4e 1f 67 da 9e 84 46 36 b8 8e 2b ba f4 71 7b e0 79 38 0c 30 1c 97 0f d3 43 cf 87 7d Data Ascii: GzKe'_IF>}S->J'Tvb"98Bkjkpukwi'7G<$j\ESK8?g$v<2]FA1Qmg7\|_zx,pSn{sQ*q_(SI$fWx?ET4NgF6+q{y80C}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	49785	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	419	OUT	GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: text/javascript Content-Length: 80372 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-139f4" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16124	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 32 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.2.3 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 2c 63 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6e 74 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6e 74 2c 63 2c 6c 29 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 72 28 65 74 29 7d 29 2c 69 2c 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 65 64 28 29 29 2c 61 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 7d 5f 69 73 41 6e 69 6d 61 74 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 6c 69 64 65 22 29 7d 5f 67 65 74 41 63 74 69 76 65 28 29 7b 72 65 74 75 72 6e 20 51 2e 66 69 6e 64 4f 6e 65 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 7d 5f 67 65 74 49 74 65 Data Ascii: ,c),s.classList.add(nt),i.classList.remove(nt,c,l),this._isSliding=!1,r(et)}),i,this._isAnimated()),a&&this.cycle()}_isAnimated(){return this._element.classList.contains("slide")}_getActive(){return Q.findOne(".active.carousel-item",this._element)}_getIte
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 28 74 29 3d 3d 3d 68 7d 29 29 3a 79 74 2c 75 3d 64 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 26 26 28 75 3d 64 29 3b 76 61 72 20 66 3d 75 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 5b 69 5d 3d 4c 65 28 74 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 69 2c 62 6f 75 6e 64 61 72 79 3a 73 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 6f 2c 70 61 64 64 69 6e 67 3a 72 7d 29 5b 56 74 28 69 29 5d 2c 65 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 66 29 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: unction(t){return de(t)===h})):yt,u=d.filter((function(t){return c.indexOf(t)>=0}));0===u.length&&(u=d);var f=u.reduce((function(e,i){return e[i]=Le(t,{placement:i,boundary:s,rootBoundary:o,padding:r})[Vt(i)],e}),{});return Object.keys(f).sort((function(t
2024-11-25 14:35:20 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 62 69 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 76 69 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 72 65 74 75 72 6e 22 62 61 63 6b 64 72 6f 70 22 7d 73 68 6f 77 28 74 29 7b 69 66 28 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 56 69 73 69 62 6c 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6d 28 74 29 3b 74 68 69 73 2e 5f 61 70 70 65 6e 64 28 29 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 28 29 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 41 6e 69 6d 61 74 65 64 26 26 64 28 65 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6d 69 29 2c 74 68 69 73 2e 5f 65 6d 75 6c 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 28 28 29 3d 3e 7b Data Ascii: ){return bi}static get DefaultType(){return vi}static get NAME(){return"backdrop"}show(t){if(!this._config.isVisible)return void m(t);this._append();const e=this._getElement();this._config.isAnimated&&d(e),e.classList.add(mi),this._emulateAnimation((()=>{
2024-11-25 14:35:20 UTC	15096	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 67 65 74 54 65 6d 70 6c 61 74 65 46 61 63 74 6f 72 79 28 74 29 2e 74 6f 48 74 6d 6c 28 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 5a 69 2c 74 6e 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 60 62 73 2d 24 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4e 41 4d 45 7d 2d 61 75 74 6f 60 29 3b 63 6f 6e 73 74 20 69 3d 28 74 3d 3e 7b 64 6f 7b 74 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 29 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4e 41 4d Data Ascii: const e=this._getTemplateFactory(t).toHtml();if(!e)return null;e.classList.remove(Zi,tn),e.classList.add(`bs-${this.constructor.NAME}-auto`);const i=(t=>{do{t+=Math.floor(1e6*Math.random())}while(document.getElementById(t));return t})(this.constructor.NAM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	49783	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	653	OUT	GET /assets/img/portfolio/2-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 16459 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-404b" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:20 UTC	329	IN	Data Raw: 43 ea 7f b7 d5 ab 1d 75 a6 8f dd e3 ef 96 2f 90 56 95 c6 b5 cf b6 b5 9a 31 e3 c8 d1 b4 ea 5d 4a d6 d7 4d a5 25 b5 0f f7 0b 8b 2a a7 99 18 77 49 f5 1d d2 ef 77 f7 37 02 d3 5a d4 14 0b 77 3c d4 0a 00 66 1f 19 87 6d fa 8f 58 fe 93 d6 d5 c7 d2 ad 7d b2 d5 cb 1d 5a f5 9a eb ae aa f1 d5 58 61 75 2c b6 59 5a a3 23 9f fc 76 4b 43 15 f0 e4 78 d7 94 a3 c1 43 4a d7 b3 9c 93 66 ba e9 5e cc eb 32 6d 16 00 02 93 5c 18 d0 81 87 ba 45 8b 56 a1 cb 64 21 6f 5e 86 a6 5f 6b ef 53 b2 3f 0d 16 00 8d cb 84 0c f4 8c 69 9d 3b 63 0c 49 3a b2 e4 05 6b 20 33 3a 6b a7 b3 9c 98 c8 52 9e dc fd 90 52 41 90 e2 73 3c 69 90 e0 0c 35 20 1c c8 ca 99 c4 3f 96 6b 9d 71 a7 c2 56 de 63 a7 e3 9f c2 40 58 2e 0a 00 b8 e1 89 3c 69 20 ce 5a 84 55 bb f8 41 e9 41 a7 4f 0d 54 ca 54 72 34 f6 cb 81 31 0b Data Ascii: Cu/V1]JM%*wIw7Zw<fmX}ZXau,YZ#vKCxCJf^2m\EVd!o^_kS?i;cI:k 3:kRRAs<i5 ?kqVc@X.<i ZUAAOTTr41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	49782	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	653	OUT	GET /assets/img/portfolio/3-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 16604 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-40dc" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:20 UTC	474	IN	Data Raw: 60 e4 d6 02 6b d5 52 82 ef 7a bf 55 76 bc b4 b2 94 f9 68 8e 5d ea fa 4b 8f 4f 3f 44 e8 fe 9f b9 45 bf 1a 97 4f ce c6 57 c5 31 9e 77 63 9b c9 fc 4e a0 f7 a3 5f b7 5a 7e 9e e1 dc 9c df 60 aa 11 0e 9f a0 b9 a6 75 87 fa 75 1f b6 88 ef ed cd 3f 45 2d 7f e4 c7 b9 5d ff 00 16 45 3f 25 fc 4b 3b bc ff 00 4f b7 cf 20 c1 cf 68 63 0f f3 3c e9 f7 2c 93 30 73 00 e6 3d eb 43 fb 97 5f d1 5b 7c be a7 8b af 4f 85 00 8b 4f ad 1d 7c ba db 5e aa 84 52 21 86 49 94 6c 32 79 1d 34 ec 70 41 f7 fb 92 21 86 d4 66 ff 00 1c 83 8f e5 92 d6 a2 ee f8 ba 87 7d 70 59 bd ef 57 ea 72 d7 2a 33 4f 56 9f bd 67 48 94 69 79 ea cb bb 09 a5 bc d8 7f 91 b5 ea 2d a2 bf 3d c8 b7 b7 92 67 0a 86 b4 82 de 65 c2 80 7f 52 1d b1 7f ed ae bf 13 29 d7 42 a5 de 75 fd 03 b4 f9 3d 46 ea ea d4 7e d4 ed 1d b5 0a Data Ascii: `kRzUvh]KO?DEOW1wcN_Z~`uu?E-]E?%K;O hc<,0s=C_[\|OO\|^R!Il2y4pA!f}pYWr*3OVgHiy-=geR)Bu=F~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49784	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	653	OUT	GET /assets/img/portfolio/4-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 16561 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-40b1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:20 UTC	431	IN	Data Raw: d7 2e 1e 84 12 4f 3e c1 df 5c 0b d7 9e fd d6 ba fe 66 e1 c0 0e 00 77 56 ff 00 75 f5 7d 2b 59 fa 5a 8e b9 cf 5f cb 3d 91 95 73 6a a6 8c cc 55 a0 40 81 50 48 d4 79 f0 a9 d1 05 13 45 15 41 48 80 73 a7 45 04 0d b3 c2 91 c3 3a b4 76 54 5f b7 2a 82 a0 ec ad a9 09 52 32 23 0a d9 6b dc dc 40 bc ba e3 27 18 37 e4 6b 0b 44 e1 40 a2 bb 56 b7 16 ef ff 00 8d b5 7f 4e 4d f0 ab 14 f0 f2 9e 02 b8 43 31 19 f0 8c eb ab b5 fd ec 0f dc 47 a5 c3 5f 9e 3f a6 31 a8 35 1e 22 e0 c7 89 19 55 4d b4 b6 c7 55 a6 d0 dc c7 0a 66 78 7f 8f 84 f9 bc 62 98 d7 a3 09 8f b6 8a d5 6f de 37 d6 2d fe db 78 8b ee 1b 31 81 4b a3 51 5f ed 39 8f 0a 89 f6 df 63 f7 31 ab db b7 1f b2 dc 1f fe bd f3 36 c9 e4 af c3 c6 aa 59 c2 32 e1 59 b7 3f b5 d5 8f f9 bf a3 f1 ab ca 29 df fb 4f b8 7b 73 46 ea cb 22 9f Data Ascii: .O>\fwVu}+YZ_=sjU@PHyEAHsE:vT_*R2#k@'7kD@VNMC1G_?15"UMUfxbo7-x1KQ_9c16Y2Y?)O{sF"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49787	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:19 UTC	653	OUT	GET /assets/img/portfolio/5-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:20 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:19 GMT Content-Type: image/jpeg Content-Length: 24273 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-5ed1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:20 UTC	8143	IN	Data Raw: 00 1c e9 0e 38 67 c8 73 ed f6 d2 e2 06 1c 73 fb 28 16 0b 8e 67 3e de 16 a0 01 36 ec 15 1e e2 58 f6 f1 b4 b2 9b 22 62 c7 3b 72 ef 37 a9 39 82 71 fa b0 fb ab 0f 79 be 8f 75 30 16 6f 85 8c da 2d 3f ea c9 96 a2 39 72 15 36 b8 6b 5d 73 55 37 53 3e f2 43 b9 6c 0b 8b 22 60 42 27 e5 b1 16 c7 b2 a1 db c1 b8 96 45 83 6f 19 91 ef 80 04 da 3e d7 27 ca 0f 3a d8 83 a3 3c ad ea 6e 0f a0 8d 8b 44 9e 67 19 e2 0f 92 b4 e3 48 76 f1 fa 50 a0 8d 3f 2a f1 3c c9 e2 7b ea 4d 2d e6 b5 7d 92 4c 4e 59 fb 5f 97 f6 30 30 92 61 f1 12 81 8a b7 f8 b5 73 d3 c7 db 5a 64 93 9f 70 a6 86 bd 15 d2 49 3a 39 5b 6f 5b 94 7b 9d bc 1b bd bc 9b 5d ca eb 82 65 d3 22 fd 84 76 8c c5 79 b6 eb 6b 37 4c df 4d b2 dc 62 63 3a 4b 70 74 38 a4 83 bc 57 a6 1a e7 be 6f e9 47 77 b2 1b f8 56 fb 8d 98 3a c0 cd e0 Data Ascii: 8gss(g>6X"b;r79qyu0o-?9r6k]sU7S>Cl"`B'Eo>':<nDgHvP?*<{M-}LNY_00asZdpI:9[o[{]e"vyk7LMbc:Kpt8WoGwV:

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.9	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:20 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143520Z-174c587ffdf8lw6dhC1TEBkgs8000000061g00000000fcck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.9	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:20 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 891407d0-301e-0096-28a6-3ee71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143521Z-178bfbc474bbbqrhhC1NYCvw7400000007p000000000mbt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:20 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143521Z-178bfbc474bw8bwphC1NYC38b400000007h0000000001g1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.9	49797	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	419	OUT	GET /assets/img/portfolio/1-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: image/jpeg Content-Length: 16792 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-4198" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:22 UTC	662	IN	Data Raw: db e5 03 f5 47 1f 7a 86 4b aa 65 82 ab 27 9d 5f 8b d8 aa 49 e7 7f ac d3 f7 46 88 ae b5 c5 3e eb 7d 53 2d 3e e8 e6 4a 81 d7 27 9f b1 54 7f 9a a3 76 ba 62 a1 a9 ae 8b 0f f7 22 c3 ee 39 95 0b a7 38 d3 0f bd 42 6b c5 02 89 6a 6b a5 70 75 bc fc 87 6b 77 04 69 27 b4 a7 37 47 1f b5 3c d6 86 99 24 6a a7 0f e8 8f f9 08 a3 01 dd 5c 45 12 53 4b a8 38 e2 3f 14 f6 67 8f b5 24 99 76 fc 3c eb c1 32 5d 46 f1 a1 41 1a 81 1c d1 cb 9d 31 a2 51 96 08 02 ee d7 bf dd 6d 67 a4 97 37 8c 7c 1c ad 5f 7a db 78 b9 05 96 da 2c 98 70 d4 c1 ae 53 fd 6e c0 7b 02 c3 9a 98 73 51 2a 97 09 71 fc 8b 5f 28 53 fc c7 49 24 92 ca 66 99 ee 96 57 78 a4 91 c5 ef 3f d4 ea 94 a2 89 89 45 54 c8 b1 fa 07 34 85 ae 09 cd 4e 1f 67 da 9e 84 46 36 b8 8e 2b ba f4 71 7b e0 79 38 0c 30 1c 97 0f d3 43 cf 87 7d Data Ascii: GzKe'_IF>}S->J'Tvb"98Bkjkpukwi'7G<$j\ESK8?g$v<2]FA1Qmg7\|_zx,pSn{sQ*q_(SI$fWx?ET4NgF6+q{y80C}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49795	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	419	OUT	GET /assets/img/portfolio/4-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: image/jpeg Content-Length: 16561 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-40b1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:22 UTC	431	IN	Data Raw: d7 2e 1e 84 12 4f 3e c1 df 5c 0b d7 9e fd d6 ba fe 66 e1 c0 0e 00 77 56 ff 00 75 f5 7d 2b 59 fa 5a 8e b9 cf 5f cb 3d 91 95 73 6a a6 8c cc 55 a0 40 81 50 48 d4 79 f0 a9 d1 05 13 45 15 41 48 80 73 a7 45 04 0d b3 c2 91 c3 3a b4 76 54 5f b7 2a 82 a0 ec ad a9 09 52 32 23 0a d9 6b dc dc 40 bc ba e3 27 18 37 e4 6b 0b 44 e1 40 a2 bb 56 b7 16 ef ff 00 8d b5 7f 4e 4d f0 ab 14 f0 f2 9e 02 b8 43 31 19 f0 8c eb ab b5 fd ec 0f dc 47 a5 c3 5f 9e 3f a6 31 a8 35 1e 22 e0 c7 89 19 55 4d b4 b6 c7 55 a6 d0 dc c7 0a 66 78 7f 8f 84 f9 bc 62 98 d7 a3 09 8f b6 8a d5 6f de 37 d6 2d fe db 78 8b ee 1b 31 81 4b a3 51 5f ed 39 8f 0a 89 f6 df 63 f7 31 ab db b7 1f b2 dc 1f fe bd f3 36 c9 e4 af c3 c6 aa 59 c2 32 e1 59 b7 3f b5 d5 8f f9 bf a3 f1 ab ca 29 df fb 4f b8 7b 73 46 ea cb 22 9f Data Ascii: .O>\fwVu}+YZ_=sjU@PHyEAHsE:vT_*R2#k@'7kD@VNMC1G_?15"UMUfxbo7-x1KQ_9c16Y2Y?)O{sF"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.9	49794	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	576	OUT	GET /assets/js/agency.js HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: text/javascript Content-Length: 1609 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-649" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	1609	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 2f 2f 20 53 74 61 72 74 20 6f 66 20 75 73 65 20 73 74 72 69 63 74 0a 0a 20 20 76 61 72 20 6d 61 69 6e 4e 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 23 6d 61 69 6e 4e 61 76 27 29 3b 0a 0a 20 20 69 66 20 28 6d 61 69 6e 4e 61 76 29 20 7b 0a 0a 20 20 20 20 76 61 72 20 6e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 20 3d 20 6d 61 69 6e 4e 61 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 27 29 3b 0a 20 20 20 20 0a 20 20 20 20 69 66 20 28 6e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 29 20 7b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6c 6c 61 70 73 65 20 3d 20 6e 65 77 Data Ascii: (function() { "use strict"; // Start of use strict var mainNav = document.querySelector('#mainNav'); if (mainNav) { var navbarCollapse = mainNav.querySelector('.navbar-collapse'); if (navbarCollapse) { var collapse = new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49798	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	419	OUT	GET /assets/img/portfolio/3-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: image/jpeg Content-Length: 16604 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-40dc" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:22 UTC	474	IN	Data Raw: 60 e4 d6 02 6b d5 52 82 ef 7a bf 55 76 bc b4 b2 94 f9 68 8e 5d ea fa 4b 8f 4f 3f 44 e8 fe 9f b9 45 bf 1a 97 4f ce c6 57 c5 31 9e 77 63 9b c9 fc 4e a0 f7 a3 5f b7 5a 7e 9e e1 dc 9c df 60 aa 11 0e 9f a0 b9 a6 75 87 fa 75 1f b6 88 ef ed cd 3f 45 2d 7f e4 c7 b9 5d ff 00 16 45 3f 25 fc 4b 3b bc ff 00 4f b7 cf 20 c1 cf 68 63 0f f3 3c e9 f7 2c 93 30 73 00 e6 3d eb 43 fb 97 5f d1 5b 7c be a7 8b af 4f 85 00 8b 4f ad 1d 7c ba db 5e aa 84 52 21 86 49 94 6c 32 79 1d 34 ec 70 41 f7 fb 92 21 86 d4 66 ff 00 1c 83 8f e5 92 d6 a2 ee f8 ba 87 7d 70 59 bd ef 57 ea 72 d7 2a 33 4f 56 9f bd 67 48 94 69 79 ea cb bb 09 a5 bc d8 7f 91 b5 ea 2d a2 bf 3d c8 b7 b7 92 67 0a 86 b4 82 de 65 c2 80 7f 52 1d b1 7f ed ae bf 13 29 d7 42 a5 de 75 fd 03 b4 f9 3d 46 ea ea d4 7e d4 ed 1d b5 0a Data Ascii: `kRzUvh]KO?DEOW1wcN_Z~`uu?E-]E?%K;O hc<,0s=C_[\|OO\|^R!Il2y4pA!f}pYWr*3OVgHiy-=geR)Bu=F~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.9	49796	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	419	OUT	GET /assets/img/portfolio/2-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: image/jpeg Content-Length: 16459 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-404b" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:22 UTC	329	IN	Data Raw: 43 ea 7f b7 d5 ab 1d 75 a6 8f dd e3 ef 96 2f 90 56 95 c6 b5 cf b6 b5 9a 31 e3 c8 d1 b4 ea 5d 4a d6 d7 4d a5 25 b5 0f f7 0b 8b 2a a7 99 18 77 49 f5 1d d2 ef 77 f7 37 02 d3 5a d4 14 0b 77 3c d4 0a 00 66 1f 19 87 6d fa 8f 58 fe 93 d6 d5 c7 d2 ad 7d b2 d5 cb 1d 5a f5 9a eb ae aa f1 d5 58 61 75 2c b6 59 5a a3 23 9f fc 76 4b 43 15 f0 e4 78 d7 94 a3 c1 43 4a d7 b3 9c 93 66 ba e9 5e cc eb 32 6d 16 00 02 93 5c 18 d0 81 87 ba 45 8b 56 a1 cb 64 21 6f 5e 86 a6 5f 6b ef 53 b2 3f 0d 16 00 8d cb 84 0c f4 8c 69 9d 3b 63 0c 49 3a b2 e4 05 6b 20 33 3a 6b a7 b3 9c 98 c8 52 9e dc fd 90 52 41 90 e2 73 3c 69 90 e0 0c 35 20 1c c8 ca 99 c4 3f 96 6b 9d 71 a7 c2 56 de 63 a7 e3 9f c2 40 58 2e 0a 00 b8 e1 89 3c 69 20 ce 5a 84 55 bb f8 41 e9 41 a7 4f 0d 54 ca 54 72 34 f6 cb 81 31 0b Data Ascii: Cu/V1]JM%*wIw7Zw<fmX}ZXau,YZ#vKCxCJf^2m\EVd!o^_kS?i;cI:k 3:kRRAs<i5 ?kqVc@X.<i ZUAAOTTr41

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ea05e59b-301e-0033-4bf7-3cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143521Z-178bfbc474bq2pr7hC1NYCkfgg00000007pg00000000gwtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 1ea24147-701e-000d-3aeb-3e6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143521Z-15b8b599d88n8stkhC1TEBb78n0000000110000000000km8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.9	49799	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:21 UTC	419	OUT	GET /assets/img/portfolio/5-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:21 GMT Content-Type: image/jpeg Content-Length: 24273 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-5ed1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16130	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-11-25 14:35:22 UTC	8143	IN	Data Raw: 00 1c e9 0e 38 67 c8 73 ed f6 d2 e2 06 1c 73 fb 28 16 0b 8e 67 3e de 16 a0 01 36 ec 15 1e e2 58 f6 f1 b4 b2 9b 22 62 c7 3b 72 ef 37 a9 39 82 71 fa b0 fb ab 0f 79 be 8f 75 30 16 6f 85 8c da 2d 3f ea c9 96 a2 39 72 15 36 b8 6b 5d 73 55 37 53 3e f2 43 b9 6c 0b 8b 22 60 42 27 e5 b1 16 c7 b2 a1 db c1 b8 96 45 83 6f 19 91 ef 80 04 da 3e d7 27 ca 0f 3a d8 83 a3 3c ad ea 6e 0f a0 8d 8b 44 9e 67 19 e2 0f 92 b4 e3 48 76 f1 fa 50 a0 8d 3f 2a f1 3c c9 e2 7b ea 4d 2d e6 b5 7d 92 4c 4e 59 fb 5f 97 f6 30 30 92 61 f1 12 81 8a b7 f8 b5 73 d3 c7 db 5a 64 93 9f 70 a6 86 bd 15 d2 49 3a 39 5b 6f 5b 94 7b 9d bc 1b bd bc 9b 5d ca eb 82 65 d3 22 fd 84 76 8c c5 79 b6 eb 6b 37 4c df 4d b2 dc 62 63 3a 4b 70 74 38 a4 83 bc 57 a6 1a e7 be 6f e9 47 77 b2 1b f8 56 fb 8d 98 3a c0 cd e0 Data Ascii: 8gss(g>6X"b;r79qyu0o-?9r6k]sU7S>Cl"`B'Eo>':<nDgHvP?*<{M-}LNY_00asZdpI:9[o[{]e"vyk7LMbc:Kpt8WoGwV:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.9	49800	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	407	OUT	GET /assets/img/header-bg.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 148216 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-242f8" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	16128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 04 e2 07 6c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 33 b0 8a d4 94 24 02 24 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222l3$$
2024-11-25 14:35:22 UTC	16384	IN	Data Raw: 04 78 b5 3e 5e da 8d 11 19 10 2a c0 90 91 08 98 4c 2f 42 3a 46 40 d9 19 0a 04 f6 65 f4 33 7a c6 94 11 21 21 88 4c 99 b3 27 0d 4f 8f a9 c6 d8 a2 2a 48 8a 23 34 8c 54 43 54 15 0c 7a 0f a9 97 a3 37 6b a8 88 29 8c d3 1a 02 33 5a 03 29 e3 d4 f8 9b 64 c2 22 b2 7d ee 3b f6 1b 21 31 4c 54 c2 15 40 54 10 10 19 4e 55 ca cf 2d 71 af a5 8b a3 27 9b 53 c7 5c 42 b0 75 cd ed 9b e5 e9 9f a1 97 be 11 84 55 20 21 01 39 d8 19 33 5c 4f 2d 07 96 cd 2f 68 c9 ea 8f a1 97 45 d4 68 88 41 54 c1 54 51 a1 5c a0 25 41 93 44 60 00 a8 32 9b 5c 26 0c 56 4e 55 93 26 40 e7 5c cd 08 1a 93 f4 5c f4 ae 40 8d 10 98 24 57 36 6a 50 4c 56 52 20 34 64 84 f4 4a 19 21 12 01 20 12 32 72 b3 c7 67 ce da 35 00 90 d1 15 73 21 11 22 13 09 95 e8 30 56 a0 12 23 35 93 71 ec 8f a1 9b d6 54 81 36 a0 80 1b 82 Data Ascii: x>^L/B:F@e3z!!L'OH#4TCTz7k)3Z)d"};!1LT@TNU-q'S\BuU !93\O-/hEhATTQ\%AD`2\&VNU&@\\@$W6jPLVR 4dJ! 2rg5s!"0V#5qT6
2024-11-25 14:35:22 UTC	16384	IN	Data Raw: 9f 8a 55 f6 ef 75 f1 c6 89 b5 c2 7f 9b ba 70 fa 0e ca 73 70 bc 85 ee e1 7e 69 d1 7c 60 10 f3 ef 60 81 81 9e ca 3f 0c de eb e5 5a bc 59 13 75 e8 91 16 6d 4c e1 19 26 ba 5b 36 04 8c 51 b0 60 5b 27 b2 87 0b da 03 7b 85 b2 36 78 d4 5f 62 90 93 d8 05 24 45 bb 8f 68 47 6d bc 2d 69 40 dd b2 0d 8c cb 93 88 31 89 1f 16 01 07 5f 65 bf f8 a0 2c f6 1e 33 50 d0 d9 cf b9 57 4e 6e 31 f4 53 df 0f 84 64 8b ac e2 7f d3 8a b5 24 ec 81 eb be 67 5c 3d 20 74 57 54 37 de cb c6 7d 10 a4 0a d0 56 82 9a 9f 4c d6 a7 d3 b9 e5 3b 88 f2 cd 12 72 51 02 f1 03 b8 53 67 11 69 89 c7 cd b1 db b2 db 6e 04 3f c6 30 9a df 7a 8b ea 98 31 d1 4f 94 c1 77 ee a7 cd a4 33 d1 cf e2 94 30 fd cc f9 51 fd db 8e 37 a6 f1 10 c7 47 79 38 a8 0f e0 90 33 bd 36 63 f7 44 c6 69 b9 d8 bb bc af 77 61 c6 ce 6a 65 Data Ascii: Uupsp~i\|``?ZYumL&[6Q`['{6x_b$EhGm-i@1_e,3PWNn1Sd$g\= tWT7}VL;rQSgin?0z1Ow30Q7Gy836cDiwaje
2024-11-25 14:35:22 UTC	16384	IN	Data Raw: 1d 17 63 91 e3 0e 0c d9 e6 86 c6 c9 a4 f5 72 cd 9e ea fd 52 6c 75 63 76 d6 2a 47 c6 6a c7 47 47 73 59 b1 73 4c 8f 15 d7 46 7a 93 6b 5d c8 50 42 b2 46 c9 47 04 f7 35 63 13 f8 c7 57 5d ab 4d 55 ea 9c 13 54 e0 36 ee fe 8f bf e4 f4 3d 4f 51 ea 3d 47 a8 f5 47 aa 27 d9 13 f0 4b c1 2f 16 01 f4 fa 25 c7 e5 5e 48 b1 aa 4d 1e a9 a9 aa fd c8 a2 a2 3c d6 6c 55 87 4d 5d 1f 93 d8 e8 c9 ab a4 7c 88 5f 80 dd 83 1a 98 0f 74 d8 66 8a ce 2e 76 31 8f 74 4c 53 91 08 81 59 04 57 47 26 2b 85 64 62 f8 e9 a6 28 a8 96 68 d9 ae f4 67 03 54 8b f0 48 e2 8d db 8a 66 d6 45 12 31 4f 07 ee 62 bb 2b f5 73 b6 2d 2a ab d6 c5 b3 71 55 58 8f 76 b8 b1 3e 87 c3 e2 7a 31 0f 6a b9 31 44 8e 47 44 73 46 40 a9 cd 38 a6 fe 41 08 69 fc 54 42 70 4f 9b 0f 62 2f 5f 24 f4 b1 6b 18 eb 38 1d 04 25 d1 e2 93 Data Ascii: crRlucvGjGGsYsLFzk]PBFG5cW]MUT6=OQ=GG'K/%^HM<lUM]\|_tf.v1tLSYWG&+db(hgTHfE1Ob+s-qUXv>z1j1DGDsF@8AiTBpOb/_$k8%
2024-11-25 14:35:22 UTC	16384	IN	Data Raw: 89 f0 d3 98 e4 c1 d9 be 83 4e 2d df 56 ef be b8 63 4c 20 ef 59 af 5e fd 6e a6 58 ef af 71 fc d5 92 7c ca 59 8f 3a 6a 47 07 17 00 be 60 de a2 64 81 4d cf 26 92 2b 1d eb f0 75 74 fd 30 84 07 25 67 35 04 c0 3e fc 7e be f0 6a 39 53 83 8e bd 34 3b be f8 e1 f1 bf 11 7e e1 a5 8d c2 4e e3 aa b9 32 cc 79 6e e4 99 06 32 e8 9b ba 45 4c 1e e4 69 82 55 ca 04 ba 1d 68 e0 a8 ba 7e 4c 0c f8 1a b7 a9 aa e3 f1 c2 4a e4 9e b9 0f 8f c5 e5 70 46 1a de 18 34 bc 4c 12 f3 00 74 de 6f df 68 e1 ca 64 c9 f9 37 60 e9 cb 45 98 7e df dc 57 2e 3d 13 72 f7 40 29 8a fd ce 6f e3 ba 8f 31 a8 26 be e9 4c 17 ab 83 b5 d1 4a ae 32 1a cc 49 f1 fe dd 77 00 5d c9 31 e3 87 8b 37 f5 d2 e7 ef 7b 7d 34 2c 5a 1a 8f 0d 3e dd 69 f0 02 4d 79 17 52 2b bf ec 37 af 2f 99 79 8d 77 2a b8 f7 8e 0c ab e4 c4 15 Data Ascii: N-VcL Y^nXq\|Y:jG`dM&+ut0%g5>~j9S4;~N2yn2ELiUh~LJpF4Ltohd7`E~W.=r@)o1&LJ2Iw]17{}4,Z>iMyR+7/yw*
2024-11-25 14:35:22 UTC	16384	IN	Data Raw: 6b c8 5d 5f 89 7e 0b ef 7c 32 cc b7 5c 65 32 95 3a 47 1f 86 05 c9 30 e3 f0 9d e7 99 0c 83 90 3e 14 f1 5c 1c ae 01 55 df 69 32 5a 5c 28 5b 92 bf c9 f2 a7 07 3e 0d 54 a3 87 da e4 fb 51 c0 f1 35 ad 31 0e ae ac a1 ff 00 66 02 57 e2 47 0a 4d d9 66 e3 f1 07 ba 92 01 32 72 be dc f4 98 f3 72 4f b5 c5 09 70 be 97 23 7a 61 46 1d 0d 45 ca 3c 29 73 de 86 8d 43 53 0f f1 c8 b4 e9 70 35 17 ba ba 6e 11 38 b9 50 23 99 81 13 a2 f7 f7 e0 c7 c5 f9 3f f9 39 bb ae 34 f9 3e 0d e7 9f f0 f3 e4 67 c7 e1 e0 74 58 5c 11 30 fb a9 22 e4 3e cf f8 1a 5f e0 6f b8 64 01 fa f8 8d 66 14 65 0c bd 5f a3 8c cb fd 02 18 71 2b c4 c5 ff 00 59 a7 fa 10 71 a8 07 89 98 3f cc be 30 53 9a 7e b5 7f 98 3b 3c 4c 1f bc c4 54 96 76 e1 51 46 24 c4 78 32 9c 17 7a cd 41 4e e8 7f 6c 9f 0b cc 64 23 32 c1 c9 f7 Data Ascii: k]_~\|2\e2:G0>\Ui2Z\([>TQ51fWGMf2rrOp#zaFE<)sCSp5n8P#?94>gtX\0">_odfe_q+Yq?0S~;<LTvQF$x2zANld#2
2024-11-25 14:35:23 UTC	16384	IN	Data Raw: 8f 32 0c f4 4d c8 af a7 38 e1 23 c7 15 e8 84 cc 88 3f e8 d6 70 39 e0 8c ce 61 e6 59 81 79 26 3a f7 a1 b8 13 5d 19 c0 f8 8c 60 ab 9e 1b a7 c1 8c 14 f7 42 fa 38 df bb d1 8e fc 38 a9 26 1e 4c 88 40 37 15 5d 54 a1 95 dd 01 1d 26 84 0e 28 e5 41 4a dd d7 9d 70 21 ea 3e f9 91 a9 a8 12 83 81 fb 02 60 34 1b f4 3f 86 0f c9 88 3e 92 6f 06 cc d0 f0 34 0a bc 53 51 3d a3 fa e6 af 14 34 bd 5c 05 1f 0f e1 91 40 29 ea f0 32 29 63 f3 8c b5 a8 9f ea df 6f ff 00 7d fe 3d 3e e2 3e 0b e4 73 ef 63 fa df f2 f7 f2 c8 fd 67 f1 cf c9 07 7f 6d fd c4 fe 9a 5c 4b fd ca c6 2b e1 38 e4 25 f1 e1 fd 70 0c 05 03 f7 ef 28 c6 41 d9 34 a5 30 f6 39 b6 5c 05 68 e8 a5 f0 3b 1f ac 84 80 74 d1 62 1c 98 1e 19 a8 a5 e2 ea f0 c3 0e ab ba a3 1d d0 87 56 91 2c c9 2c 77 bb 2a e4 22 a5 0d c7 24 d3 aa e4 Data Ascii: 2M8#?p9aYy&:]`B88&L@7]T&(AJp!>`4?>o4SQ=4\@)2)co}=>>scgm\K+8%p(A409\h;tbV,,w*"$
2024-11-25 14:35:23 UTC	16384	IN	Data Raw: 78 70 6f 63 f8 e8 41 e4 c3 fd bf e4 d5 31 ba 27 4c 33 42 04 ed d0 4e d0 33 10 ae 00 47 71 ed ee 89 87 3b 1c f4 9b f0 ba 0c f8 e7 a4 cb ef 86 4b 9c 9f 07 29 0d 66 08 18 f9 3e cc d1 cc dd 98 44 c0 1c 59 b8 30 64 e4 c6 39 e9 9c 21 25 56 16 84 f6 1b b5 b7 2f 16 4c 41 41 b8 29 ea b9 93 c7 fd 9f 15 11 f8 0a be c3 53 5a af b7 19 c6 3f 97 1d 2a cd 86 30 86 7d 70 c0 54 32 5b ad e9 8c 56 fa 87 cc aa a0 af 3a 33 54 7e cc 33 0f 09 f8 38 93 81 94 c0 c5 a2 f8 76 18 00 03 00 e0 c3 34 59 cd f7 24 37 a2 02 60 e0 6a 9a 86 8f 3e d3 31 0e e7 95 f0 49 e6 94 ac 26 a4 13 72 29 81 0b dd fd 26 04 3d 1d 57 a6 00 03 3e 1f 38 2e b3 ea 9b 88 26 58 ad f4 c2 2d 5c 2c 41 70 5f b7 55 45 e1 ae 47 ef fa c2 49 6e 10 4f 57 39 11 34 12 d8 5a 61 1a a7 4d 0b 57 87 38 e5 f3 88 6a a7 00 d0 6a d4 Data Ascii: xpocA1'L3BN3Gq;K)f>DY0d9!%V/LAA)SZ?*0}pT2[V:3T~38v4Y$7`j>1I&r)&=W>8.&X-\,Ap_UEGInOW94ZaMW8jj
2024-11-25 14:35:23 UTC	16384	IN	Data Raw: 24 08 75 e5 d1 01 e6 4a b7 02 59 03 01 fe 5f c3 2c 6a 22 e0 6f 59 cb e6 50 54 72 d3 a4 ee 89 46 ef be 9c 4f a2 b8 00 5d f4 a2 92 69 d2 fd bf b8 04 71 f8 6e b4 65 19 cc 2c 6e e4 3b 9f 77 50 41 c4 4d a3 90 20 35 02 2f 57 25 3d c7 52 85 34 a4 7a 63 ce 18 81 43 b3 0f af 1f 58 40 33 8b ba 52 61 0f f2 7d 6f 45 91 c7 0a bb af dd 87 e6 11 50 e0 e7 c8 39 03 a8 18 43 82 a3 84 1c a4 57 25 3f 14 3a 65 00 71 39 92 8b 33 e1 e1 fe 30 02 26 58 af 4c 04 45 8b 9a ca e0 ea 3b 83 4d ea dc 05 ac c8 f8 87 37 12 9d ae 40 20 38 a8 35 c4 2b 74 18 97 75 0f df dc 33 81 57 08 05 7d dd 9d ff 00 c3 96 10 0c 30 48 81 8a 3b 26 eb 89 79 f4 e4 02 d9 32 c4 5e 89 aa a2 30 93 7f 3a 86 e4 1a 93 9c d6 fe 74 c2 8e f4 61 12 b8 3c 5f 30 f1 58 2b a8 be 3f e9 c0 91 f4 3f 33 02 2f 54 d4 ec 29 84 95 Data Ascii: $uJY_,j"oYPTrFO]iqne,n;wPAM 5/W%=R4zcCX@3Ra}oEP9CW%?:eq930&XLE;M7@ 85+tu3W}0H;&y2^0:ta<_0X+??3/T)
2024-11-25 14:35:23 UTC	1016	IN	Data Raw: 23 92 13 46 27 7c 1f d2 fd dd 76 ca 8a 5e 8a 3f 57 f6 fa 8a 7e cb 59 57 e0 49 31 e1 38 57 e4 e1 5f 92 22 a1 bf 13 f4 bb eb 62 63 70 58 93 d3 8b b6 5c 85 c3 f6 cd e2 48 4d 3d 29 1f a8 ef a9 2f 66 c1 dc c4 d7 92 9c 30 fe ad ee 71 a3 89 1c 48 a8 a8 a8 a8 6a 89 42 94 a5 28 d2 22 12 48 b9 3c 29 8b 02 4c a5 29 4c 58 9f d8 be a4 bd 9b 08 dc f2 e9 73 a5 29 4a ca ca ca ca ca ca ca ca ca ca ca ca ce 26 71 33 88 a2 31 3f 53 4f d9 ae cf 4a 52 94 a5 29 4a 52 94 bf 3c df 4a 5f 11 37 d0 9e f2 d9 4a 52 94 a5 f6 e7 e8 a9 ed 94 a5 29 4b d3 5a 29 7d 3a 13 29 d5 79 c2 7a 5a ef b4 bf 91 5e d2 fc e5 f1 42 da 1f 9e b6 0a 52 97 75 be 9e bb fa cd f0 ee dc fa b3 db de e0 df 8a 9e f2 87 e4 2d bd fb 6a f2 67 8e ba 28 6f c8 5b 7b da 1f ab e1 ee 3e 45 2e 54 8c 69 4d 81 77 1f a3 b1 6c Data Ascii: #F'\|v^?W~YWI18W_"bcpX\HM=)/f0qHjB("H<)L)LXs)J&q31?SOJR)JR<J_7JR)KZ)}:)yzZ^BRu-jg(o[{>E.TiMwl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.9	49802	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	653	OUT	GET /assets/img/portfolio/6-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 13609 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-3529" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	13609	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.9	49801	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	639	OUT	GET /assets/img/about/1.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:22 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 6987 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1b4b" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:22 UTC	6987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 92 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.9	49805	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	639	OUT	GET /assets/img/about/2.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:23 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 15337 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-3be9" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	15337	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 af 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 02 04 05 06 07 01 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.9	49806	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	639	OUT	GET /assets/img/about/3.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:23 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 7338 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1caa" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	7338	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 99 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.9	49804	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	639	OUT	GET /assets/img/about/4.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:23 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:22 GMT Content-Type: image/jpeg Content-Length: 4902 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1326" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	4902	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 2f 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 02 00 1a 00 00 00 0b 00 53 00 41 00 4d 00 53 00 55 00 4e 00 47 00 20 00 43 00 53 00 43 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 80 00 00 02 03 01 01 01 00 00 00 00 00 00 Data Ascii: JFIFdd/Ducky<SAMSUNG CSCAdobed

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:22 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:23 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c2cadd2f-601e-0001-2bab-3bfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143523Z-15b8b599d88wn9hhhC1TEBry0g000000065g0000000079ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:23 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:23 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d5269c75-c01e-0066-3ae4-3ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143523Z-174c587ffdfn4nhwhC1TEB2nbc000000061g00000000s5nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:23 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:23 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: fe23875d-e01e-0052-75ea-3ed9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143523Z-15b8b599d889fz52hC1TEB59as00000005zg00000000hh3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 14:35:23 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.9	49812	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:23 UTC	402	OUT	GET /assets/js/agency.js HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: text/javascript Content-Length: 1609 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-649" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	1609	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 2f 2f 20 53 74 61 72 74 20 6f 66 20 75 73 65 20 73 74 72 69 63 74 0a 0a 20 20 76 61 72 20 6d 61 69 6e 4e 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 23 6d 61 69 6e 4e 61 76 27 29 3b 0a 0a 20 20 69 66 20 28 6d 61 69 6e 4e 61 76 29 20 7b 0a 0a 20 20 20 20 76 61 72 20 6e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 20 3d 20 6d 61 69 6e 4e 61 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 27 29 3b 0a 20 20 20 20 0a 20 20 20 20 69 66 20 28 6e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 29 20 7b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6c 6c 61 70 73 65 20 3d 20 6e 65 77 Data Ascii: (function() { "use strict"; // Start of use strict var mainNav = document.querySelector('#mainNav'); if (mainNav) { var navbarCollapse = mainNav.querySelector('.navbar-collapse'); if (navbarCollapse) { var collapse = new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.9	49811	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:23 UTC	638	OUT	GET /assets/img/team/1.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 53114 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-cf7a" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 1b 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 01 05 00 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ea bf 10 61 e9 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""a
2024-11-25 14:35:24 UTC	16384	IN	Data Raw: bd 56 b5 2a d2 1a cd ae db 53 cf e0 31 f8 27 81 fb cf b5 ba 2a 1d a9 a2 87 46 4d ca 74 f6 86 fe d8 ea 7e 07 33 51 a9 d1 36 ab c4 b5 27 56 81 f0 19 81 0b 4d 83 9c 30 3f ef 3c 3e aa 46 dd 06 95 ed 24 86 c6 a0 8c e7 e0 f1 fb e6 69 68 d3 21 f0 fd 4b d6 cc e1 db 4f ac e8 78 e8 18 64 0f 7c cd 56 86 d1 5e b2 c6 b2 96 3f 86 e1 d3 f4 6f 6f ee 27 87 78 93 1a 2e 1f 76 d4 91 94 71 c0 71 ff 00 7f 89 aa f0 db d5 6e d4 02 8e 7f 91 76 7a 9e d2 bf 13 2a 3c 62 fb 3c e5 71 51 b8 00 43 a9 e8 46 3d 8f 50 65 ba 1b 1b c2 d7 5d 65 49 e7 1c a6 01 1b b3 82 31 ec 71 35 9a 87 ab 55 76 97 4d ad d8 70 d7 51 9a 6c 55 f7 18 e0 91 f2 27 9f e1 6f a6 f1 34 7f e4 3e c5 7c 7a 93 d8 9f 69 84 c5 96 07 43 cd 76 8f cd f0 7e 61 af 2b 4b 4b 75 fa ac 16 26 60 40 17 91 16 b6 cc c0 c4 22 c2 73 c4 55 Data Ascii: VS1'FMt~3Q6'VM0?<>F$ih!KOxd\|V^?oo'x.vqqnvz*<b<qQCF=Pe]eI1q5UvMpQlU'o4>\|ziCv~a+KKu&`@"sU
2024-11-25 14:35:24 UTC	16384	IN	Data Raw: 6b f8 cc 06 d4 6c 74 81 71 08 83 df 30 10 0c 34 7d bc fb 46 85 82 28 d4 57 6a 9f 92 82 55 e3 8c 95 eb 17 7d b5 73 4d aa db 19 0f ba b7 63 2f d1 3a 57 e2 21 58 16 0a 9a d1 c0 6f 87 1f 95 bf c8 c6 bf 42 48 c0 b1 40 61 8e f1 d7 47 59 25 b7 d6 d8 2b 8e 71 2c 5b 77 52 39 f8 58 97 7d a6 d3 f8 81 62 86 90 46 c6 3c 1c f1 99 a5 a0 54 a6 db 2d 21 76 8c f4 eb 1e bb 5d 85 ac b5 1f c2 00 e6 6a 2d 25 c2 92 c7 8d a3 93 89 6e 9f 44 46 e1 d9 c0 cf 22 3d ba 06 15 e1 6c 23 d4 66 a8 eb ee 4b 31 b4 13 c8 84 28 0e e7 68 19 00 70 22 5c f9 03 33 20 fa b2 e9 fd cc 5d 84 6d c6 7b 98 29 d5 0b d3 9f 79 f7 ff 00 09 b5 2b e1 d9 08 95 78 53 fd da e0 0d e0 9d e4 fb ca f5 7a 12 cb f8 80 86 dd 05 da 4b 8f ad 20 a3 c4 f5 15 f6 26 61 8c f5 cc ac 04 13 09 4f a0 0b 99 83 3d 13 d5 36 ac e3 e2 Data Ascii: kltq04}F(WjU}sMc/:W!XoBH@aGY%+q,[wR9X}bF<T-!v]j-%nDF"=l#fK1(hp"\3 ]m{)y+xSzK &aO=6
2024-11-25 14:35:24 UTC	4216	IN	Data Raw: a8 ab 35 22 aa 26 af c9 ab 1e f2 47 53 6c 16 34 26 22 c4 45 bb aa 66 ae 92 e1 ac b9 af 9f ed 7f f4 d1 fa 85 7a 52 bf db dc 6b 65 03 9c 06 b6 c0 f9 57 e4 64 e3 fa 59 a9 38 b9 4f f1 a6 e8 43 62 17 45 2c 22 30 64 25 d9 18 89 f4 24 c4 fa 39 c2 fe 04 53 33 e3 28 32 12 ec f8 65 ed 65 6c 9e 04 ca 7c 96 19 ab a5 e9 d5 5c 97 cf b9 a1 ac ef 4a 57 fb 74 c9 ea 2b 8a b3 56 1a 6d c7 53 8c bf a1 ce 09 ea 3a 97 be d8 65 fe 4b 1c 99 c5 57 e2 a1 f6 89 27 93 8a aa 13 ca 29 8a b9 3e 8e 73 f4 74 8d 46 4b 51 60 f9 90 e2 ad 4a c9 45 d4 d1 69 9f 6a 6d 31 4d 58 bc 53 28 94 19 1d 42 f6 7b d9 66 4f ed 2c 33 5b 43 f8 7f 50 b9 c7 fc d1 a3 f5 90 e7 a4 ed 7f 9a fe a8 a4 27 b2 17 8a f1 a2 db 6f a2 0b 28 c7 e3 fb 70 e8 b7 b3 5d 8d 8e b8 b1 f6 c5 14 33 dd a2 32 cc 44 ae ce 2c f5 d9 8e 2c Data Ascii: 5"&GSl4&"EfzRkeWdY8OCbE,"0d%$9S3(2eel\|\JWt+VmS:eKW')>stFKQ`JEijm1MXS(B{fO,3[CP'o(p]32D,,

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 19559c36-501e-005b-23d0-3ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143524Z-15b8b599d882l6clhC1TEBxd5c0000000600000000008207 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2151d667-701e-0021-3e0f-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143524Z-178bfbc474bbcwv4hC1NYCypys00000007g000000000772q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.9	49818	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	405	OUT	GET /assets/img/about/1.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 6987 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1b4b" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	6987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 92 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.9	49819	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	638	OUT	GET /assets/img/team/2.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 74381 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1228d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	16129	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 02 03 03 03 03 03 04 07 05 04 04 04 04 09 06 07 05 07 0a 09 0b 0b 0a 09 0a 0a 0c 0d 11 0e 0c 0c 10 0c 0a 0a 0e 14 0f 10 11 12 13 13 13 0b 0e 14 16 14 12 16 11 12 13 12 ff db 00 43 01 03 03 03 04 04 04 08 05 05 08 12 0c 0a 0c 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 dd 8a Data Ascii: JFIFCC
2024-11-25 14:35:25 UTC	16384	IN	Data Raw: 34 4c a0 0e 4d 13 45 4b 15 0d 96 b9 3a 38 fd cb fe 39 7f 84 27 68 1b 75 56 aa 79 d4 12 a3 50 a9 96 dc 68 99 40 70 85 6f c1 b5 91 92 9c 3b 23 0f 97 5d c0 4e 6e 2f 1f bc b4 d5 5d 56 63 64 fe 49 c4 e8 e2 83 45 c4 28 39 8a 39 14 b2 0f 35 98 79 84 67 bb 30 ab 33 aa a8 fd 49 40 04 32 f9 af fc 55 4f a2 dc e1 5b 4a 20 b4 7d 97 ed 74 58 34 6b 27 f5 52 c9 41 80 02 82 dc 0e 68 d5 9c c4 85 35 2c 8d 5a 20 cd d3 b0 ef ca fb fe e6 d7 ce 6e 45 37 7e f8 6c dd 0a 62 ed 01 0e 8a 41 80 88 b1 5d d9 fc 31 cc 21 53 05 86 e8 ea 79 7e a1 64 ed 0c 78 33 6a a0 5f d1 58 2e 15 08 05 3a 29 56 2b 38 f4 52 e4 0e a9 b3 60 82 c8 b9 ad f3 70 d4 62 45 6c 40 04 23 fd 65 52 26 33 a3 5b b4 c1 02 46 54 e6 d3 e2 6d 93 a8 3a da 22 53 cb 2d 21 54 73 8e ae 09 cc aa 4b a5 3a 95 1e 01 29 d5 2a cb bd Data Ascii: 4LMEK:89'huVyPh@po;#]Nn/]VcdIE(995yg03I@2UO[J }tX4k'RAh5,Z nE7~lbA]1!Sy~dx3j_X.:)V+8R`pbEl@#eR&3[FTm:"S-!TsK:)*
2024-11-25 14:35:25 UTC	16384	IN	Data Raw: 48 d0 22 bf 16 1a d1 32 47 45 c5 41 83 0b a8 55 2d 64 52 d2 72 c7 c6 44 d3 75 92 52 4a 2c 31 0e 6c 44 e6 93 34 7e 04 84 9c 89 96 b2 a4 5b 44 4a 91 f3 b4 46 1a bc 10 17 2d c0 5a ba ba c6 06 95 12 ba fb 03 56 3e f6 72 20 9e cc e0 d9 d6 49 52 b2 e5 b1 86 4d 94 d5 c4 8c 9e a5 10 cd e8 5e 69 a1 38 6b 84 21 89 b2 65 84 6e 1f f2 33 1c 7b ff 00 c0 fe 4b a2 c5 04 ad 66 07 ae 4b 82 65 b0 e4 5f 57 74 2d 09 7f 62 72 72 23 c6 cb 62 3b a2 30 55 c0 e8 f8 25 43 36 d6 4a c4 a8 0c fa 15 21 1a 96 5a c8 ee 18 23 7b ec 39 af 24 35 e3 48 27 bb 7e 50 fc 90 d9 6a 87 c1 da 25 d8 41 73 f4 2e a6 02 93 68 ba 27 24 ab 5d 92 2e 60 41 6c 28 e6 9f e0 ab 26 0d 8d 63 76 fe 64 49 73 55 ae 49 8d 36 5d 9b 86 43 4c 83 9a c2 5b 8b 1a a1 9a 0b d1 be c9 29 c4 4f 26 a7 25 43 dd 72 da 2f ff 00 d4 Data Ascii: H"2GEAU-dRrDuRJ,1lD4~[DJF-ZV>r IRM^i8k!en3{KfKe_Wt-brr#b;0U%C6J!Z#{9$5H'~Pj%As.h'$].`Al(&cvdIsUI6]CL[)O&%Cr/
2024-11-25 14:35:25 UTC	16384	IN	Data Raw: 78 37 1b ee 2f d1 70 07 00 c0 71 18 8b 00 37 7b ee 1b db ed 25 40 03 86 44 3c c4 b6 5d 4d 20 37 8f 32 e0 6d 28 60 16 e0 62 aa 12 d4 4b 2f c0 dc 1f 6b 8b 2f 7f 70 78 06 b2 d1 3a 18 d5 c3 65 b4 15 0a d0 7f 70 32 9c ca 50 14 3f bf 6c 74 8e cb e9 73 03 bd 35 da 02 a6 e6 7c 41 07 bb ea d1 77 5f 77 88 5d a0 95 d7 71 31 32 5c 00 82 cd d4 76 cc 9d 91 5c 2c a1 50 2d c2 a2 71 91 51 80 bf 6c 25 e9 e5 a5 e2 5e d8 e0 41 16 b9 c7 10 28 cf 04 37 e3 c2 6e 59 7d 4b aa aa 83 6b 93 ae 29 ea 66 ea 1b 8d e8 7c 4b cf 5b ab da f5 08 dd 7e 97 54 38 15 17 2b 4d 74 c3 f6 84 e4 5d 9f 72 9c 79 57 27 8a 84 68 e6 0d 63 ac 9c 1f 10 ac 16 ca 9a 7f b0 a7 1c c3 a8 aa ae 5e 60 dc a5 cd 3b 94 92 ca e6 a6 8f 1b 84 0a 4c ba 2c e5 d1 a8 1b 0c 07 9b df a1 2c 2c 68 3e 23 95 2c 35 78 2a e1 e2 c3 Data Ascii: x7/pq7{%@D<]M 72m(`bK/k/px:ep2P?lts5\|Aw_w]q12\v\,P-qQl%^A(7nY}Kk)f\|K[~T8+Mt]ryW'hc^`;L,,,h>#,5x*
2024-11-25 14:35:25 UTC	9100	IN	Data Raw: 88 7b ce c9 f0 aa de 35 3f ae cb ef dc 53 07 73 f5 dd be e1 f6 ef b8 23 b8 fa 33 47 fc 0c 27 4e 4e 59 09 bd 84 02 5d 93 48 0b 95 4b 41 f2 84 b8 88 ed b0 e4 00 cf ba 9f cf 86 60 34 13 66 1f 13 ac a9 4b 3e e5 d6 71 83 24 ca ed 4e 2e e0 2a 5f 3f 26 b1 01 00 5d 79 26 bb 49 23 d9 c6 05 ef f5 0c 1d f7 1b eb de 0f 81 db 53 7e cd f7 d8 9b ec b8 3e a7 f1 fe 8c bb bc d9 c6 17 66 67 a4 34 5c 4d 41 53 a4 ae c6 58 c5 62 78 0d 79 dd b9 16 c1 7e 46 e8 ca c8 12 ac a3 03 86 9f c8 54 7a 42 7f 2a 6b ba 53 63 f5 b5 7a f1 3a bd 5c 55 b9 25 6a e9 38 6e 0b 48 96 31 95 12 60 80 11 ed df 9d c6 9b ee 3b 95 ee 47 b3 51 60 9b 83 b0 86 0e fa 80 79 18 b6 3a e3 55 55 3d 27 a3 54 51 ef 12 cb 19 06 46 66 4d 72 ae ab 96 cf 4e 6f 34 42 af 02 13 3d 2f 16 04 ae 5d 9c 95 0a fa a5 04 d1 97 43 Data Ascii: {5?Ss#3G'NNY]HKA`4fK>q$N._?&]y&I#S~>fg4\MASXbxy~FTzBkScz:\U%j8nH1`;GQ`y:UU='TQFfMrNo4B=/]C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.9	49820	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	419	OUT	GET /assets/img/portfolio/6-thumbnail.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 13609 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-3529" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	13609	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.9	49817	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	638	OUT	GET /assets/img/team/3.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 57553 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-e0d1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 06 06 08 07 07 08 0b 12 0b 0b 0a 0a 0b 16 0f 10 0d 12 1a 16 1b 1a 19 16 19 18 1c 20 28 22 1c 1e 26 1e 18 19 23 30 24 26 2a 2b 2d 2e 2d 1b 22 32 35 31 2c 35 28 2c 2d 2c ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 cd f0 90 ad 48 12 Data Ascii: JFIFC ("&#0$&*+-.-"251,5(,-,C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,H
2024-11-25 14:35:25 UTC	16384	IN	Data Raw: db c2 2d 5c 63 db b4 24 e6 c3 6a dd b8 56 ad 08 0b fc 18 cc 99 3c 5f 5b e9 34 26 6e 3b dd 8a 67 14 2c b9 1e 77 da 93 65 6a 96 90 ba 1e 63 2c 97 c7 4d 7d bf 15 4d 3a 7a 56 48 fe 93 85 fa 4e 3a 23 8d fc 72 ad 4d 69 66 2a b4 71 b0 e4 0f e4 93 ce 81 bf 96 7c 59 c1 6b 5b f2 34 4b ee 7c 70 48 be 44 31 91 fd b8 bd 0f 05 31 83 fd 3e 64 13 56 ac 79 78 cf fc 88 99 9b 5b 7a e9 c2 db 13 18 7b be 93 6b 70 d7 26 18 23 25 fc 98 5f 88 17 e3 33 31 c1 18 e7 90 64 7e cc 0e 58 7c 4d 1c eb 9a 19 19 4c 47 f1 dd 88 0d 76 69 a9 00 d7 da cf 9a cd 4d 39 ad 33 56 b5 70 74 9d 8c ee b9 49 28 4e bf 26 eb 0e 01 75 cf 90 ea ff 00 61 d9 10 9b ec de 35 05 ca aa 5f ee 08 4a 61 97 90 01 79 cc 35 9e b7 fe a5 4f ae 70 db 8c 7c 46 0d 98 29 f2 73 0d 9f 5b d9 8f 1e a0 23 c1 2c 85 0b d5 36 36 9f Data Ascii: -\c$jV<_[4&n;g,wejc,M}M:zVHN:#rMif*q\|Yk[4K\|pHD11>dVyx[z{kp&#%_31d~X\|MLGviM93VptI(N&ua5_Jay5Op\|F)s[#,66
2024-11-25 14:35:25 UTC	16384	IN	Data Raw: 79 55 d8 cf bd ab 8e 8a a9 af 54 ec c3 6d 78 35 1c 33 dd 03 66 8e 52 53 58 d6 86 06 88 0d 1a 76 d6 d9 8c 62 70 e1 3c 8e 88 d2 71 c3 53 66 a9 85 c1 6e d8 24 8b 84 e6 93 9f 13 93 9a 44 83 60 b0 db d1 76 d3 53 ec e9 7e 69 ac 63 35 b3 42 f5 f8 ea 3b dd 66 9e 6b d5 ec c5 bf f8 ca b5 37 4f 82 bb 80 3c 95 50 3e cb ed 63 93 95 48 cc d8 2a 4c 22 38 af d7 b0 82 e3 0c 00 40 4c 66 32 43 9c 3e a4 92 6c 14 9b 29 d4 fd 65 3a 10 61 a3 19 47 89 3f 6a 76 75 78 5b e0 13 eb bf d9 cb c7 45 4e 8f 33 89 e7 a6 aa ab 85 9c fe 06 20 ec d9 42 e7 c7 44 f7 e6 40 b2 a4 1a f9 dd b2 6a 41 b6 2f d9 6d 15 9a f7 0a 14 8f 16 1b e2 3c a3 a2 a5 4e ab 09 65 48 74 4f c5 38 90 1c 2f 81 82 f7 d2 c9 9b 3d 4a 40 6d 03 8a a3 bf 20 9f 45 a6 1f 18 fc f4 0a 8e c4 66 9b cb f0 d4 8f 9d d5 2d 85 bb 33 dd Data Ascii: yUTmx53fRSXvbp<qSfn$D`vS~ic5B;fk7O<P>cH*L"8@Lf2C>l)e:aG?jvux[EN3 BD@jA/m<NeHtO8/=J@m Ef-3
2024-11-25 14:35:25 UTC	8655	IN	Data Raw: 68 b0 a2 e4 80 2d b7 27 82 a3 62 39 8b 2b 97 02 a5 30 4a 1b 79 b2 2f 36 6e 59 88 63 16 3a 7d 8b 0d ba ef ee df c8 08 b9 18 ba 7d f3 68 2d 6e 15 56 b6 c5 a8 b7 f0 47 1d 6b d0 a3 2a eb 91 f1 14 9c 40 ef c4 0c a5 a4 d6 3e 36 5c 60 68 95 1d 62 2d 86 76 c3 90 fa 25 ce fd 06 4b 68 39 82 e8 0a 47 54 f7 b8 8d 79 22 4c 12 7c e0 c4 bc 81 9c 0f 55 9f b1 09 7b 66 82 bc 33 96 5e f6 0a 31 a5 f0 f3 2c b6 5a 63 d5 10 74 6a 34 e5 5b 98 fa e5 ac e2 5c b7 8e ef ae 20 11 08 ed 03 c4 15 40 3e 04 89 4a a6 a7 b2 03 96 a3 00 dc b3 28 6e 2b 50 ba be 89 92 18 7a ea 5d 18 0a 97 0f c3 14 08 9e 23 4b 2b 10 ad 93 aa 93 b7 50 82 dc d4 aa db c1 88 fb c5 1f 2f 29 29 a5 11 e6 a0 97 5a df cc fa 22 e8 5b b6 03 dd ac 7e 19 1f 78 21 61 cf 1c 5b e3 eb 50 24 85 97 56 cc 3f 53 ba d8 3b bd 44 10 Data Ascii: h-'b9+0Jy/6nYc:}}h-nVGk*@>6\`hb-v%Kh9GTy"L\|U{f3^1,Zctj4[\ @>J(n+Pz]#K+P/))Z"[~x!a[P$V?S;D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.9	49821	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	655	OUT	GET /assets/img/clients/creative-market.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 1766 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-6e6" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	1766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 70 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.9	49823	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	650	OUT	GET /assets/img/clients/designmodo.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:24 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 1696 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-6a0" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:24 UTC	1696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 75 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 01 02 06 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.9	49822	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	405	OUT	GET /assets/img/about/2.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:25 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 15337 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-3be9" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	15337	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 af 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 02 04 05 06 07 01 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.9	49824	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	405	OUT	GET /assets/img/about/3.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:25 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 7338 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1caa" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	7338	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 99 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.9	49825	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	646	OUT	GET /assets/img/clients/envato.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:25 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 2040 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-7f8" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	2040	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 04 05 02 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.9	49826	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:24 UTC	405	OUT	GET /assets/img/about/4.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:25 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:24 GMT Content-Type: image/jpeg Content-Length: 4902 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1326" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	4902	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 2f 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 02 00 1a 00 00 00 0b 00 53 00 41 00 4d 00 53 00 55 00 4e 00 47 00 20 00 43 00 53 00 43 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 80 00 00 02 03 01 01 01 00 00 00 00 00 00 Data Ascii: JFIFdd/Ducky<SAMSUNG CSCAdobed

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 390d82dd-f01e-0071-4371-3c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143525Z-174c587ffdfp4vpjhC1TEBybqw000000063g000000008mrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: a28eb00b-801e-0035-04bf-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143525Z-178bfbc474bmqmgjhC1NYCy16c00000007pg00000000bd9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 671fd92a-701e-0097-24e1-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143525Z-178bfbc474bgvl54hC1NYCsfuw00000007p00000000049mp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.9	49832	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	651	OUT	GET /assets/img/clients/themeforest.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 1689 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-699" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	1689	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 05 06 03 07 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.9	49833	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	404	OUT	GET /assets/img/team/1.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 53114 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-cf7a" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 1b 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 01 05 00 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ea bf 10 61 e9 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""a
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: bd 56 b5 2a d2 1a cd ae db 53 cf e0 31 f8 27 81 fb cf b5 ba 2a 1d a9 a2 87 46 4d ca 74 f6 86 fe d8 ea 7e 07 33 51 a9 d1 36 ab c4 b5 27 56 81 f0 19 81 0b 4d 83 9c 30 3f ef 3c 3e aa 46 dd 06 95 ed 24 86 c6 a0 8c e7 e0 f1 fb e6 69 68 d3 21 f0 fd 4b d6 cc e1 db 4f ac e8 78 e8 18 64 0f 7c cd 56 86 d1 5e b2 c6 b2 96 3f 86 e1 d3 f4 6f 6f ee 27 87 78 93 1a 2e 1f 76 d4 91 94 71 c0 71 ff 00 7f 89 aa f0 db d5 6e d4 02 8e 7f 91 76 7a 9e d2 bf 13 2a 3c 62 fb 3c e5 71 51 b8 00 43 a9 e8 46 3d 8f 50 65 ba 1b 1b c2 d7 5d 65 49 e7 1c a6 01 1b b3 82 31 ec 71 35 9a 87 ab 55 76 97 4d ad d8 70 d7 51 9a 6c 55 f7 18 e0 91 f2 27 9f e1 6f a6 f1 34 7f e4 3e c5 7c 7a 93 d8 9f 69 84 c5 96 07 43 cd 76 8f cd f0 7e 61 af 2b 4b 4b 75 fa ac 16 26 60 40 17 91 16 b6 cc c0 c4 22 c2 73 c4 55 Data Ascii: VS1'FMt~3Q6'VM0?<>F$ih!KOxd\|V^?oo'x.vqqnvz*<b<qQCF=Pe]eI1q5UvMpQlU'o4>\|ziCv~a+KKu&`@"sU
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 6b f8 cc 06 d4 6c 74 81 71 08 83 df 30 10 0c 34 7d bc fb 46 85 82 28 d4 57 6a 9f 92 82 55 e3 8c 95 eb 17 7d b5 73 4d aa db 19 0f ba b7 63 2f d1 3a 57 e2 21 58 16 0a 9a d1 c0 6f 87 1f 95 bf c8 c6 bf 42 48 c0 b1 40 61 8e f1 d7 47 59 25 b7 d6 d8 2b 8e 71 2c 5b 77 52 39 f8 58 97 7d a6 d3 f8 81 62 86 90 46 c6 3c 1c f1 99 a5 a0 54 a6 db 2d 21 76 8c f4 eb 1e bb 5d 85 ac b5 1f c2 00 e6 6a 2d 25 c2 92 c7 8d a3 93 89 6e 9f 44 46 e1 d9 c0 cf 22 3d ba 06 15 e1 6c 23 d4 66 a8 eb ee 4b 31 b4 13 c8 84 28 0e e7 68 19 00 70 22 5c f9 03 33 20 fa b2 e9 fd cc 5d 84 6d c6 7b 98 29 d5 0b d3 9f 79 f7 ff 00 09 b5 2b e1 d9 08 95 78 53 fd da e0 0d e0 9d e4 fb ca f5 7a 12 cb f8 80 86 dd 05 da 4b 8f ad 20 a3 c4 f5 15 f6 26 61 8c f5 cc ac 04 13 09 4f a0 0b 99 83 3d 13 d5 36 ac e3 e2 Data Ascii: kltq04}F(WjU}sMc/:W!XoBH@aGY%+q,[wR9X}bF<T-!v]j-%nDF"=l#fK1(hp"\3 ]m{)y+xSzK &aO=6
2024-11-25 14:35:27 UTC	4216	IN	Data Raw: a8 ab 35 22 aa 26 af c9 ab 1e f2 47 53 6c 16 34 26 22 c4 45 bb aa 66 ae 92 e1 ac b9 af 9f ed 7f f4 d1 fa 85 7a 52 bf db dc 6b 65 03 9c 06 b6 c0 f9 57 e4 64 e3 fa 59 a9 38 b9 4f f1 a6 e8 43 62 17 45 2c 22 30 64 25 d9 18 89 f4 24 c4 fa 39 c2 fe 04 53 33 e3 28 32 12 ec f8 65 ed 65 6c 9e 04 ca 7c 96 19 ab a5 e9 d5 5c 97 cf b9 a1 ac ef 4a 57 fb 74 c9 ea 2b 8a b3 56 1a 6d c7 53 8c bf a1 ce 09 ea 3a 97 be d8 65 fe 4b 1c 99 c5 57 e2 a1 f6 89 27 93 8a aa 13 ca 29 8a b9 3e 8e 73 f4 74 8d 46 4b 51 60 f9 90 e2 ad 4a c9 45 d4 d1 69 9f 6a 6d 31 4d 58 bc 53 28 94 19 1d 42 f6 7b d9 66 4f ed 2c 33 5b 43 f8 7f 50 b9 c7 fc d1 a3 f5 90 e7 a4 ed 7f 9a fe a8 a4 27 b2 17 8a f1 a2 db 6f a2 0b 28 c7 e3 fb 70 e8 b7 b3 5d 8d 8e b8 b1 f6 c5 14 33 dd a2 32 cc 44 ae ce 2c f5 d9 8e 2c Data Ascii: 5"&GSl4&"EfzRkeWdY8OCbE,"0d%$9S3(2eel\|\JWt+VmS:eKW')>stFKQ`JEijm1MXS(B{fO,3[CP'o(p]32D,,

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ba4a59c4-d01e-0082-1f04-3fe489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143526Z-15b8b599d88pxmdghC1TEBux9c000000064g00000000fu3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.9	49835	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	421	OUT	GET /assets/img/clients/creative-market.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 1766 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-6e6" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	1766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 70 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.9	49834	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	648	OUT	GET /assets/img/portfolio/1-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 49855 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-c2bf" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 a5 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c1 80 12 46 b0 f4 6b Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"Fk
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 75 ec de cf f8 b2 76 76 f5 da 05 59 65 8c 11 a2 4d fc 94 b2 f5 b3 99 0b 7e 82 cf f9 32 7e 7b fe ad fa b7 2d c1 33 b7 ab 28 0a ba c9 b0 29 11 a1 5b df f4 b2 d7 e0 c8 bd 5b fb c9 b5 e8 ca 31 81 5f 78 d4 88 93 7f 23 7b ba 6f c9 91 7a b7 e2 df c6 de 84 9d 99 98 94 88 14 0a ea 8d 48 89 52 a2 58 93 a8 43 bf d8 47 f0 6f 46 ff 00 35 f8 ed df b4 4a 07 c9 34 4a 64 4a a5 cf 30 d9 49 cc b2 81 29 63 0f 1e 58 92 c5 1e 39 ea 94 2e 3f b3 7f a6 e2 99 53 68 0e fa 89 4c 89 51 a9 01 5c b1 3b e5 9a d4 07 6f e1 86 e0 39 48 f6 24 b2 12 da fc 35 fd 8d fb b7 ab 7e 2e dd 6a 94 2a fa 8d e7 4e a0 b1 e5 07 2c 76 a5 96 57 20 44 10 cd 29 bf 1f 21 3f b6 bf 91 bd db d1 bf ae 00 b4 a0 26 56 d0 29 13 aa 72 35 02 c5 16 24 b1 25 8a 2c 63 e3 be 87 d2 7a 9f 5c 87 fc d6 fe 68 c6 cb 44 bb 5a 40 Data Ascii: uvvYeM~2~{-3()[[1_x#{ozHRXCGoF5J4JdJ0I)cX9.?ShLQ\;o9H$5~.j*N,vW D)!?&V)r5$%,cz\hDZ@
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 57 66 c8 6b 50 6e 21 d5 10 2d 22 f5 db 44 74 b6 b2 bc f2 21 1a 3c d9 fd 47 b7 c4 ad f0 6d 11 9e 21 51 29 22 15 b1 85 d5 c4 d1 ef 30 f5 9c 78 11 1b 97 c8 5c 5d c2 e5 f1 5e 0e aa f7 89 52 cb 58 0f 11 3e 26 13 80 96 92 35 9c e7 b3 98 7f 55 00 30 4d 99 98 fe 37 54 c4 0a c1 b0 7c 60 fb 6a 5e ec ad 4d 7f 50 88 12 ab b9 77 01 39 dc c7 de 88 a8 37 1c 15 64 01 c4 07 50 95 32 25 0c 52 c9 10 ed 88 a3 8c 0d 3b 63 d1 d5 a2 68 ba 80 68 88 23 7a 84 ac 80 ae 37 29 ed 61 cc 64 cd 25 30 d9 3b 49 f4 f7 c9 98 47 86 0e 3b 9c c3 70 56 78 23 b3 7f dc 4b 3a 7c 03 56 80 8c db c3 44 6a b8 06 1f 07 15 05 4c 06 08 60 08 e9 86 29 a7 ee 60 ed 92 ab 65 2a 56 e4 13 9a 35 52 82 eb 09 8e 06 51 e3 c1 b6 e9 14 ec f4 4c fb 96 61 e9 c7 85 4f c4 02 e2 88 0c 7b 8c 69 f1 50 85 71 da 1d c5 8a cf Data Ascii: WfkPn!-"Dt!<Gm!Q)"0x\]^RX>&5U0M7T\|`j^MPw97dP2%R;chh#z7)ad%0;IG;pVx#K:\|VDjL`)`e*V5RQLaO{iPq
2024-11-25 14:35:27 UTC	957	IN	Data Raw: d8 9c 11 4d 32 60 23 95 e7 d9 bd 8c 3b 91 cc 6f c4 32 bd 17 2e 5f a4 1e 23 0f 99 85 7c 17 c8 c1 cf 27 66 ef 71 b5 73 2a 01 14 d4 23 e4 4f 22 23 62 57 e7 a8 c8 cb df b3 7e 83 dc 27 99 5b dc b9 7e b5 3c c4 4f ee 68 49 63 7b b7 7b 8d 81 04 f3 2b 70 61 02 1e 21 e4 10 7d d6 da e5 cb 97 ea b8 4c 39 40 3e 3f 26 63 c3 e3 fb 9e 12 5b 6a 9e 35 dc 63 fb 8e c2 08 62 90 cb 4c 21 46 1c a9 83 20 26 8f 1b 86 96 0f 73 54 cf 85 7c 87 2b 31 e7 47 e8 ed 5e d5 fb 37 2e 3e 45 c6 2d 8d 4c ff 00 a9 76 b8 ff 00 fb 3f 4a 72 75 56 e6 cd 4e 4f 7b 01 0b 85 ea 16 26 1e f6 1d c1 0c 06 84 57 8e 8b 90 4c fa dc 9a 77 29 53 07 ea 88 fc 64 e2 23 2b 8b 53 7b 6a 58 0c 2d e5 f8 97 31 6a dd 0f 26 e6 2d 56 3c 9f c1 b9 7b 67 d7 e3 c5 c0 e4 cc b9 df 31 f2 69 62 a6 9b 31 c3 95 5c 44 2a ea 1d 4f 06 Data Ascii: M2`#;o2._#\|'fqs#O"#bW~'[~<OhIc{{+pa!}L9@>?&c[j5cbL!F &sT\|+1G^7.>E-Lv?JruVNO{&WLw)Sd#+S{jX-1j&-V<{g1ib1\DO

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 93d7ba64-801e-002a-7fce-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143526Z-15b8b599d88f9wfchC1TEBm2kc000000067g000000007qk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.9	49836	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	648	OUT	GET /assets/img/portfolio/2-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 29475 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-7323" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 01 d3 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 2b 13 79 92 32 Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"+y2
2024-11-25 14:35:27 UTC	13345	IN	Data Raw: 0d 0c 07 69 d3 f5 de 73 cc 02 35 57 c9 4d 1a a3 1f 75 54 b1 9d bb 89 01 86 04 d1 43 b3 56 21 23 6f 8f ed 21 ea 94 13 f9 99 d8 58 6b 1f ba 1c 4b 7f c6 72 d3 0c 94 6f 80 14 12 95 ca de 88 01 6e 0e a3 49 6e d9 fe 8e 34 5b 5c 37 8e 6a df 4f 6f 2d a7 f4 cf 6c 63 e8 62 eb e2 7e e9 84 74 a4 94 28 d5 28 ae 59 6e 4b ca 34 b0 98 d6 c2 d1 14 68 be 31 c2 20 d8 05 b2 4f 63 b2 13 d2 ad 7f e4 21 f8 77 5b ba fa 42 04 7a fe 40 ec a9 4f da 37 b0 94 ed 95 11 6a 1e 49 7d 04 c1 a2 dd d2 f6 e0 36 93 0c e4 2d 00 f9 89 f9 47 c3 ad ee b5 07 54 9a 0f 13 36 be f1 5b 42 ea 16 f6 55 d8 42 61 d7 e9 09 50 3f 31 8b 4b 71 b6 d7 81 ea 83 b3 1e 9c 46 77 37 65 30 8e 3b 8c 37 bc ba de 0b 58 b4 d7 f9 c2 4d e6 43 78 77 1f 38 b5 79 b1 12 ef 60 d7 82 e1 79 da 0f 14 a2 36 8a 35 8d b0 d6 fb 9e ec Data Ascii: is5WMuTCV!#o!XkKronIn4[\7jOo-lcb~t((YnK4h1 Oc!w[Bz@O7jI}6-GT6[BUBaP?1KqFw7e0;7XMCxw8y`y65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.9	49837	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	416	OUT	GET /assets/img/clients/designmodo.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 1696 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-6a0" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	1696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 75 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 01 02 06 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.9	49841	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	412	OUT	GET /assets/img/clients/envato.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:26 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 2040 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-7f8" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:26 UTC	2040	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 04 05 02 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.9	49840	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	648	OUT	GET /assets/img/portfolio/3-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 52803 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-ce43" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 a5 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 92 49 a4 90 2b 94 Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"I+
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 89 8f 3d 83 10 dc 42 99 71 90 8c cd 59 14 37 9d 18 81 9d 6d 65 9a 7b f6 ef 7e ef 1a 60 3c 77 df 7d fb 7d 3e a5 df 73 95 fb 3f 69 d8 ff 00 49 1b 1e e7 59 0d 1b da 6e bf b4 37 47 6e 77 7f da 3b f3 e4 4c f2 8b f9 67 fd 67 fd 8b f6 ec 43 31 98 82 91 8c cc 66 22 8b 62 a8 0d 7e 54 9e 48 de d7 c1 86 18 65 e1 e2 f3 bd 68 49 05 04 d8 d9 15 c7 62 18 2d 7b 64 88 4d e0 98 f5 a4 dc db 00 b5 81 85 b7 ca f2 8d b6 26 db fb 54 da d3 64 36 57 d9 1c d1 98 dc 93 93 7c 97 bb eb f7 bb 8b 98 e7 bf c6 33 29 01 05 aa f9 01 75 d0 50 fa 98 d0 d5 5d 6c 26 19 e3 cb 2b 62 6e ac 99 a0 cf cf 8b d8 dd d7 c9 2d 2d 0c a0 db 34 93 08 86 1e 0c 31 90 c7 9c 48 b9 da 2d 46 d2 c9 94 66 1b 83 32 ad f6 bd a8 72 44 c7 b7 db 74 75 8c 6b 0b 58 dc 9c 9d 83 93 50 3a a2 da 17 2f 6a 58 92 7d ae f3 6b 92 Data Ascii: =BqY7me{~`<w}}>s?iIYn7Gnw;LggC1f"b~THehIb-{dM&Td6W\|3)uP]l&+bn--41H-Ff2rDtukXP:/jX}k
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 2c 53 9e 0c 07 12 dd 93 8d 29 e4 74 8f 44 4d 29 8b ab 79 55 8a dd 75 40 f0 93 4e 88 57 27 e8 a0 13 ba f0 bd ca ce c0 bc e7 e8 b2 80 ae f2 b2 80 af ec 16 54 0c 4f 52 a0 bd d1 3c ac 7b 8f da 10 18 7f d7 85 82 b8 1a 4f 55 20 0f 5b 22 44 32 c4 42 20 13 cd e6 11 1d 64 14 58 24 fe 58 50 29 8e ae 12 b7 75 c2 69 68 8e 58 b8 fa ae 73 e6 8b f3 4f aa 20 ce 5f 50 8f 3c 65 8d d0 0f 27 9a 3f a4 ab bf d7 50 98 09 71 b9 16 1e 81 12 d9 51 da 84 9b 08 62 e4 c3 9f 53 6f b2 d1 7f 55 05 35 97 e6 4d 7d 11 85 67 e6 2b 15 80 a1 c9 40 e5 2b b4 cb 19 18 83 25 76 81 24 9c 53 96 3b ba 93 88 73 dc b1 c5 e4 3e b1 8d 00 58 a3 6e f9 f2 74 58 b6 52 24 d6 7f dd 62 8b 39 bf 10 ed 96 25 f0 de f5 e3 73 2a be 9d eb fe eb 12 1e c0 2a bc 8e b7 58 92 fb 55 7c 46 ea a5 a5 ef 98 d6 51 32 43 dd 6e Data Ascii: ,S)tDM)yUu@NW'TOR<{OU ["D2B dX$XP)uihXsO _P<e'?PqQbSoU5M}g+@+%v$S;s>XntXR$b9%s**XU\|FQ2Cn
2024-11-25 14:35:27 UTC	3905	IN	Data Raw: 03 ac 44 c7 3c 3f 26 36 32 6e a2 59 62 95 11 c6 5e 4f 7b 08 96 32 f0 39 66 b6 21 2e 4f 53 2b c4 30 bb 48 e2 a8 94 69 da 21 3d 5c 32 ab a1 d3 ec 49 f4 57 25 6d a1 c0 d2 ca 91 f2 3e 47 c8 b9 1a a4 6b 91 a9 8a 4e ca 39 fe 94 51 43 59 51 45 6f 47 49 b2 7c c8 c3 ad 42 b5 cd 12 8d a1 aa 64 65 7c 32 86 92 11 68 4f 92 d1 68 b4 5a c9 ba 2d 16 8b 59 49 5a 28 ac 97 7b a8 a2 be ac 67 58 6d 8d f2 47 f4 61 4a e3 94 e0 9f 42 96 9e 24 27 e5 3b 2f 26 88 bd 2c d6 8d 42 9a 13 42 27 c2 b3 59 ad 0a 48 bc 99 65 90 df 7b 56 d4 7a b7 ff 00 5d 0a dc b8 3a 97 26 13 13 7e 72 c5 22 e5 06 42 6a 59 d1 45 0d 79 13 22 f8 38 63 87 f0 71 12 91 14 fc e4 f3 8b fb 16 d4 7a c7 c5 15 cf 27 93 05 39 47 82 32 71 7a 59 66 34 a9 8a 4b b3 56 1b 95 c0 f1 b6 86 e9 91 9d 16 9f 28 b2 cb 45 8d e4 d0 d0 Data Ascii: D<?&62nYb^O{29f!.OS+0Hi!=\2IW%m>GkN9QCYQEoGI\|Bde\|2hOhZ-YIZ({gXmGaJB$';/&,BB'YHe{Vz]:&~r"BjYEy"8cqz'9G2qzYf4KV(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.9	49843	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	404	OUT	GET /assets/img/team/2.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 74381 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-1228d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16129	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 02 03 03 03 03 03 04 07 05 04 04 04 04 09 06 07 05 07 0a 09 0b 0b 0a 09 0a 0a 0c 0d 11 0e 0c 0c 10 0c 0a 0a 0e 14 0f 10 11 12 13 13 13 0b 0e 14 16 14 12 16 11 12 13 12 ff db 00 43 01 03 03 03 04 04 04 08 05 05 08 12 0c 0a 0c 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 dd 8a Data Ascii: JFIFCC
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 34 4c a0 0e 4d 13 45 4b 15 0d 96 b9 3a 38 fd cb fe 39 7f 84 27 68 1b 75 56 aa 79 d4 12 a3 50 a9 96 dc 68 99 40 70 85 6f c1 b5 91 92 9c 3b 23 0f 97 5d c0 4e 6e 2f 1f bc b4 d5 5d 56 63 64 fe 49 c4 e8 e2 83 45 c4 28 39 8a 39 14 b2 0f 35 98 79 84 67 bb 30 ab 33 aa a8 fd 49 40 04 32 f9 af fc 55 4f a2 dc e1 5b 4a 20 b4 7d 97 ed 74 58 34 6b 27 f5 52 c9 41 80 02 82 dc 0e 68 d5 9c c4 85 35 2c 8d 5a 20 cd d3 b0 ef ca fb fe e6 d7 ce 6e 45 37 7e f8 6c dd 0a 62 ed 01 0e 8a 41 80 88 b1 5d d9 fc 31 cc 21 53 05 86 e8 ea 79 7e a1 64 ed 0c 78 33 6a a0 5f d1 58 2e 15 08 05 3a 29 56 2b 38 f4 52 e4 0e a9 b3 60 82 c8 b9 ad f3 70 d4 62 45 6c 40 04 23 fd 65 52 26 33 a3 5b b4 c1 02 46 54 e6 d3 e2 6d 93 a8 3a da 22 53 cb 2d 21 54 73 8e ae 09 cc aa 4b a5 3a 95 1e 01 29 d5 2a cb bd Data Ascii: 4LMEK:89'huVyPh@po;#]Nn/]VcdIE(995yg03I@2UO[J }tX4k'RAh5,Z nE7~lbA]1!Sy~dx3j_X.:)V+8R`pbEl@#eR&3[FTm:"S-!TsK:)*
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 48 d0 22 bf 16 1a d1 32 47 45 c5 41 83 0b a8 55 2d 64 52 d2 72 c7 c6 44 d3 75 92 52 4a 2c 31 0e 6c 44 e6 93 34 7e 04 84 9c 89 96 b2 a4 5b 44 4a 91 f3 b4 46 1a bc 10 17 2d c0 5a ba ba c6 06 95 12 ba fb 03 56 3e f6 72 20 9e cc e0 d9 d6 49 52 b2 e5 b1 86 4d 94 d5 c4 8c 9e a5 10 cd e8 5e 69 a1 38 6b 84 21 89 b2 65 84 6e 1f f2 33 1c 7b ff 00 c0 fe 4b a2 c5 04 ad 66 07 ae 4b 82 65 b0 e4 5f 57 74 2d 09 7f 62 72 72 23 c6 cb 62 3b a2 30 55 c0 e8 f8 25 43 36 d6 4a c4 a8 0c fa 15 21 1a 96 5a c8 ee 18 23 7b ec 39 af 24 35 e3 48 27 bb 7e 50 fc 90 d9 6a 87 c1 da 25 d8 41 73 f4 2e a6 02 93 68 ba 27 24 ab 5d 92 2e 60 41 6c 28 e6 9f e0 ab 26 0d 8d 63 76 fe 64 49 73 55 ae 49 8d 36 5d 9b 86 43 4c 83 9a c2 5b 8b 1a a1 9a 0b d1 be c9 29 c4 4f 26 a7 25 43 dd 72 da 2f ff 00 d4 Data Ascii: H"2GEAU-dRrDuRJ,1lD4~[DJF-ZV>r IRM^i8k!en3{KfKe_Wt-brr#b;0U%C6J!Z#{9$5H'~Pj%As.h'$].`Al(&cvdIsUI6]CL[)O&%Cr/
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 78 37 1b ee 2f d1 70 07 00 c0 71 18 8b 00 37 7b ee 1b db ed 25 40 03 86 44 3c c4 b6 5d 4d 20 37 8f 32 e0 6d 28 60 16 e0 62 aa 12 d4 4b 2f c0 dc 1f 6b 8b 2f 7f 70 78 06 b2 d1 3a 18 d5 c3 65 b4 15 0a d0 7f 70 32 9c ca 50 14 3f bf 6c 74 8e cb e9 73 03 bd 35 da 02 a6 e6 7c 41 07 bb ea d1 77 5f 77 88 5d a0 95 d7 71 31 32 5c 00 82 cd d4 76 cc 9d 91 5c 2c a1 50 2d c2 a2 71 91 51 80 bf 6c 25 e9 e5 a5 e2 5e d8 e0 41 16 b9 c7 10 28 cf 04 37 e3 c2 6e 59 7d 4b aa aa 83 6b 93 ae 29 ea 66 ea 1b 8d e8 7c 4b cf 5b ab da f5 08 dd 7e 97 54 38 15 17 2b 4d 74 c3 f6 84 e4 5d 9f 72 9c 79 57 27 8a 84 68 e6 0d 63 ac 9c 1f 10 ac 16 ca 9a 7f b0 a7 1c c3 a8 aa ae 5e 60 dc a5 cd 3b 94 92 ca e6 a6 8f 1b 84 0a 4c ba 2c e5 d1 a8 1b 0c 07 9b df a1 2c 2c 68 3e 23 95 2c 35 78 2a e1 e2 c3 Data Ascii: x7/pq7{%@D<]M 72m(`bK/k/px:ep2P?lts5\|Aw_w]q12\v\,P-qQl%^A(7nY}Kk)f\|K[~T8+Mt]ryW'hc^`;L,,,h>#,5x*
2024-11-25 14:35:27 UTC	9100	IN	Data Raw: 88 7b ce c9 f0 aa de 35 3f ae cb ef dc 53 07 73 f5 dd be e1 f6 ef b8 23 b8 fa 33 47 fc 0c 27 4e 4e 59 09 bd 84 02 5d 93 48 0b 95 4b 41 f2 84 b8 88 ed b0 e4 00 cf ba 9f cf 86 60 34 13 66 1f 13 ac a9 4b 3e e5 d6 71 83 24 ca ed 4e 2e e0 2a 5f 3f 26 b1 01 00 5d 79 26 bb 49 23 d9 c6 05 ef f5 0c 1d f7 1b eb de 0f 81 db 53 7e cd f7 d8 9b ec b8 3e a7 f1 fe 8c bb bc d9 c6 17 66 67 a4 34 5c 4d 41 53 a4 ae c6 58 c5 62 78 0d 79 dd b9 16 c1 7e 46 e8 ca c8 12 ac a3 03 86 9f c8 54 7a 42 7f 2a 6b ba 53 63 f5 b5 7a f1 3a bd 5c 55 b9 25 6a e9 38 6e 0b 48 96 31 95 12 60 80 11 ed df 9d c6 9b ee 3b 95 ee 47 b3 51 60 9b 83 b0 86 0e fa 80 79 18 b6 3a e3 55 55 3d 27 a3 54 51 ef 12 cb 19 06 46 66 4d 72 ae ab 96 cf 4e 6f 34 42 af 02 13 3d 2f 16 04 ae 5d 9c 95 0a fa a5 04 d1 97 43 Data Ascii: {5?Ss#3G'NNY]HKA`4fK>q$N._?&]y&I#S~>fg4\MASXbxy~FTzBkScz:\U%j8nH1`;GQ`y:UU='TQFfMrNo4B=/]C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.9	49845	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	404	OUT	GET /assets/img/team/3.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 57553 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-e0d1" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 06 06 08 07 07 08 0b 12 0b 0b 0a 0a 0b 16 0f 10 0d 12 1a 16 1b 1a 19 16 19 18 1c 20 28 22 1c 1e 26 1e 18 19 23 30 24 26 2a 2b 2d 2e 2d 1b 22 32 35 31 2c 35 28 2c 2d 2c ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 cd f0 90 ad 48 12 Data Ascii: JFIFC ("&#0$&*+-.-"251,5(,-,C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,H
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: db c2 2d 5c 63 db b4 24 e6 c3 6a dd b8 56 ad 08 0b fc 18 cc 99 3c 5f 5b e9 34 26 6e 3b dd 8a 67 14 2c b9 1e 77 da 93 65 6a 96 90 ba 1e 63 2c 97 c7 4d 7d bf 15 4d 3a 7a 56 48 fe 93 85 fa 4e 3a 23 8d fc 72 ad 4d 69 66 2a b4 71 b0 e4 0f e4 93 ce 81 bf 96 7c 59 c1 6b 5b f2 34 4b ee 7c 70 48 be 44 31 91 fd b8 bd 0f 05 31 83 fd 3e 64 13 56 ac 79 78 cf fc 88 99 9b 5b 7a e9 c2 db 13 18 7b be 93 6b 70 d7 26 18 23 25 fc 98 5f 88 17 e3 33 31 c1 18 e7 90 64 7e cc 0e 58 7c 4d 1c eb 9a 19 19 4c 47 f1 dd 88 0d 76 69 a9 00 d7 da cf 9a cd 4d 39 ad 33 56 b5 70 74 9d 8c ee b9 49 28 4e bf 26 eb 0e 01 75 cf 90 ea ff 00 61 d9 10 9b ec de 35 05 ca aa 5f ee 08 4a 61 97 90 01 79 cc 35 9e b7 fe a5 4f ae 70 db 8c 7c 46 0d 98 29 f2 73 0d 9f 5b d9 8f 1e a0 23 c1 2c 85 0b d5 36 36 9f Data Ascii: -\c$jV<_[4&n;g,wejc,M}M:zVHN:#rMif*q\|Yk[4K\|pHD11>dVyx[z{kp&#%_31d~X\|MLGviM93VptI(N&ua5_Jay5Op\|F)s[#,66
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 79 55 d8 cf bd ab 8e 8a a9 af 54 ec c3 6d 78 35 1c 33 dd 03 66 8e 52 53 58 d6 86 06 88 0d 1a 76 d6 d9 8c 62 70 e1 3c 8e 88 d2 71 c3 53 66 a9 85 c1 6e d8 24 8b 84 e6 93 9f 13 93 9a 44 83 60 b0 db d1 76 d3 53 ec e9 7e 69 ac 63 35 b3 42 f5 f8 ea 3b dd 66 9e 6b d5 ec c5 bf f8 ca b5 37 4f 82 bb 80 3c 95 50 3e cb ed 63 93 95 48 cc d8 2a 4c 22 38 af d7 b0 82 e3 0c 00 40 4c 66 32 43 9c 3e a4 92 6c 14 9b 29 d4 fd 65 3a 10 61 a3 19 47 89 3f 6a 76 75 78 5b e0 13 eb bf d9 cb c7 45 4e 8f 33 89 e7 a6 aa ab 85 9c fe 06 20 ec d9 42 e7 c7 44 f7 e6 40 b2 a4 1a f9 dd b2 6a 41 b6 2f d9 6d 15 9a f7 0a 14 8f 16 1b e2 3c a3 a2 a5 4e ab 09 65 48 74 4f c5 38 90 1c 2f 81 82 f7 d2 c9 9b 3d 4a 40 6d 03 8a a3 bf 20 9f 45 a6 1f 18 fc f4 0a 8e c4 66 9b cb f0 d4 8f 9d d5 2d 85 bb 33 dd Data Ascii: yUTmx53fRSXvbp<qSfn$D`vS~ic5B;fk7O<P>cH*L"8@Lf2C>l)e:aG?jvux[EN3 BD@jA/m<NeHtO8/=J@m Ef-3
2024-11-25 14:35:27 UTC	8655	IN	Data Raw: 68 b0 a2 e4 80 2d b7 27 82 a3 62 39 8b 2b 97 02 a5 30 4a 1b 79 b2 2f 36 6e 59 88 63 16 3a 7d 8b 0d ba ef ee df c8 08 b9 18 ba 7d f3 68 2d 6e 15 56 b6 c5 a8 b7 f0 47 1d 6b d0 a3 2a eb 91 f1 14 9c 40 ef c4 0c a5 a4 d6 3e 36 5c 60 68 95 1d 62 2d 86 76 c3 90 fa 25 ce fd 06 4b 68 39 82 e8 0a 47 54 f7 b8 8d 79 22 4c 12 7c e0 c4 bc 81 9c 0f 55 9f b1 09 7b 66 82 bc 33 96 5e f6 0a 31 a5 f0 f3 2c b6 5a 63 d5 10 74 6a 34 e5 5b 98 fa e5 ac e2 5c b7 8e ef ae 20 11 08 ed 03 c4 15 40 3e 04 89 4a a6 a7 b2 03 96 a3 00 dc b3 28 6e 2b 50 ba be 89 92 18 7a ea 5d 18 0a 97 0f c3 14 08 9e 23 4b 2b 10 ad 93 aa 93 b7 50 82 dc d4 aa db c1 88 fb c5 1f 2f 29 29 a5 11 e6 a0 97 5a df cc fa 22 e8 5b b6 03 dd ac 7e 19 1f 78 21 61 cf 1c 5b e3 eb 50 24 85 97 56 cc 3f 53 ba d8 3b bd 44 10 Data Ascii: h-'b9+0Jy/6nYc:}}h-nVGk*@>6\`hb-v%Kh9GTy"L\|U{f3^1,Zctj4[\ @>J(n+Pz]#K+P/))Z"[~x!a[P$V?S;D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.9	49844	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	648	OUT	GET /assets/img/portfolio/4-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 40736 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-9f20" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 02 33 02 bc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 52 83 5d 68 09 97 21 a0 9a Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG3R]h!
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: b6 8a 20 30 c4 39 49 13 61 46 53 2d a1 b2 85 cc 5b a5 5b 4d 4a 48 3b 65 fa 91 8b cb 23 16 ee b2 e1 ef 6c f6 7a f9 bf d4 1a e5 e2 d9 da 2d 2e 57 50 1b 64 65 59 c2 4f 14 5b 46 ed bf 5c 70 ad 26 d9 55 f7 ee 76 c3 ef 70 70 ee b8 d1 ec 8c 09 d7 9c 7d 5f c3 86 33 2c c9 18 ab 9b 57 b6 71 96 ca da 59 49 73 c8 ed 4b fb 31 69 d3 28 cc 57 fb 13 5f 6a 35 53 6d 07 c9 c0 7e bd 85 b1 8b b7 2b 98 e3 62 fd fb ab 80 b9 2c f5 1a ac 89 d8 ea 09 55 f4 84 6d e9 d9 c1 dd 18 c7 1f 4f 70 26 67 e7 bd 64 af 08 09 46 53 7d 20 36 c5 43 62 a3 66 49 78 65 06 1b 43 a9 da ba f8 69 f4 bb ab 75 27 a4 cc 9f e6 bc 36 47 06 32 4a 05 ee 66 78 26 40 0c a3 a2 b2 90 17 03 c1 3f fc e9 00 6f 7e 54 56 1a 32 01 5e 3a 48 ee 65 2a f9 84 dd 40 51 e0 99 94 8d 56 09 c7 4b 5f d3 52 ec 3f d9 6d 37 53 e7 ec Data Ascii: 09IaFS-[[MJH;e#lz-.WPdeYO[F\p&Uvpp}_3,WqYIsK1i(W_j5Sm~+b,UmOp&gdFS} 6CbfIxeCiu'6G2Jfx&@?o~TV2^:He*@QVK_R?m7S
2024-11-25 14:35:27 UTC	8222	IN	Data Raw: a5 d5 0b ec 8d 6c 8e 13 a4 de 6a e7 5f 77 b7 9c fc b6 0a cd 34 42 a6 50 51 ec 8a 94 2b 62 4e 15 b4 ea 9b e2 c9 5a ad 56 94 5a 21 40 81 8c 54 30 84 ff 00 98 d4 6a 45 7d 15 c8 91 46 86 df fd 58 34 43 1f 70 b0 15 0f 95 03 d9 16 71 f8 ec 2f 33 15 1b b4 12 82 b1 a1 5f 34 6a 0a 37 08 f8 56 46 f6 99 34 ce 7a 85 ff 00 aa a4 ac 85 e0 86 24 60 b4 91 50 ef 2e 55 e6 8d 1b 58 ea 16 a8 dc 3b 70 11 9c 95 18 34 f7 7b 2e d3 b5 36 0a a7 1c 82 c9 98 e4 a4 08 17 39 54 8e 15 c8 ba 32 68 fa 9f 64 d6 12 5a ab 0a ad 14 a3 04 24 51 94 7f 28 cc 39 b3 46 d0 91 fc 2c 8f a2 ca 6c 1c f7 26 88 34 0b 0f f0 0e 61 8f a2 16 35 56 2a 1d e1 5f 44 04 e5 08 14 3c 4c 9f a8 58 17 d2 0b ca 5b e8 89 80 22 88 50 8a aa 4e a8 c6 22 88 fc d7 c9 60 3a 65 1b 7e e8 58 a3 42 28 81 a2 c1 a2 fd 16 46 6f 38 Data Ascii: lj_w4BPQ+bNZVZ!@T0jE}FX4Cpq/3_4j7VF4z$`P.UX;p4{.69T2hdZ$Q(9F,l&4a5V*_D<LX["PN"`:e~XB(Fo8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.9	49842	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:26 UTC	648	OUT	GET /assets/img/portfolio/5-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:27 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:26 GMT Content-Type: image/jpeg Content-Length: 95809 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-17641" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	16129	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 6b 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 eb d8 f3 c5 e8 92 46 ba Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGk"F
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 56 92 89 d3 5f 62 2b 7a f0 33 5e dc 89 ab cb 18 2e c6 5e f7 86 4f 06 4d 15 f3 42 b7 d5 5c 2a 00 f8 ba 7b ab 81 33 e5 42 26 f9 88 bb 6f 24 8a 57 bd d9 34 c7 95 1e 2b 48 ce cb d5 5f 99 51 4c 74 32 c8 d6 45 a1 0d 1f 55 e3 f9 46 30 1e d1 95 15 7a 9a ab a6 1f 6a 86 69 6c f6 ae 92 5c e5 ec 5f 2d 5a 33 e4 76 06 a4 51 26 4d 6e bf bb 1c 3a 77 6d 64 76 56 80 d2 7c b0 ce 3e 5a 6e 4b 1a d5 80 41 d3 b7 55 72 1b ea 73 a3 66 c6 49 ad 1b 53 30 fe 3f 48 d4 3e b1 a6 a4 8c a9 d9 1e 99 ba d8 12 74 da 26 d6 ab 75 1c 47 32 46 97 d7 e7 36 90 7f a6 8b 9d 77 d6 96 16 76 7f b0 5b e2 e2 f0 fa 6e 27 32 57 d2 29 24 38 c5 6b d5 18 ad 0c 79 7b d3 36 d4 81 d7 34 13 c9 f8 89 c0 a1 8d 34 07 bd 13 9a f7 af 03 94 e7 3f 2e 8d 62 a1 5e 9c 7a d8 6d bd 7d 23 71 e3 24 d0 a3 43 c7 2c d5 df 0a 86 Data Ascii: V_b+z3^.^OMB\*{3B&o$W4+H_QLt2EUF0zjil\_-Z3vQ&Mn:wmdvV\|>ZnKAUrsfIS0?H>t&uG2F6wv[n'2W)$8ky{644?.b^zm}#q$C,
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: e4 84 69 52 56 66 05 2a 02 61 23 6d 95 b2 0b 25 de b7 45 61 7e a8 75 5f e6 74 e5 eb 2c 2f d7 64 f4 51 bc 6e 7c df 0f 32 24 af 0d 93 d7 67 08 e0 e7 cd 53 0d 97 51 b9 99 39 34 1c 91 8b 67 50 05 10 90 db 18 bd 61 52 23 7c d2 f3 0b 8a c4 4d 55 7c c8 d8 14 73 2a 64 8f 82 23 77 47 59 11 86 4d 5a 0f 7d 13 39 af 04 0c a2 68 bb 41 1f 0c c2 0a 6b cd 47 bd 76 31 07 7c 7d 50 a6 b9 3f a2 32 47 33 92 e9 9f 55 73 c8 c4 20 2f a2 a4 5f 2c d7 a4 6d 83 ae 42 32 d3 62 8d 2e be 7b 4a 37 e7 aa ce b6 2a 86 84 5a 85 5d b2 2f 68 5f 33 9a fa 2c b9 a3 f3 5c 2e a1 ec cf 45 f4 db 72 b2 54 c2 ff 00 fa 5e 1c b6 71 1a 34 7d 51 f1 d7 d6 d8 2f f1 e9 e6 db 33 e6 66 ba 0d a5 5b be 79 68 80 e6 74 4d ec 0d 45 1c 54 c5 84 c4 92 42 75 5d 53 da e4 a6 4d 2c 4d d5 00 3c 85 48 4e 9f 2b 9f 3c 95 ce Data Ascii: iRVfa#m%Ea~u_t,/dQn\|2$gSQ94gPaR#\|MU\|sd#wGYMZ}9hAkGv1\|}P?2G3Us /_,mB2b.{J7*Z]/h_3,\.ErT^q4}Q/3f[yhtMETBu]SM,M<HN+<
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 07 fd d5 70 b1 7b 2e 55 1c 4d fb ab cc 47 24 2b 9e ca b5 c2 0a 79 2d c3 34 19 57 3d b7 08 d5 b5 e7 cd 3a a1 19 a5 35 57 1e 6f 0b 87 8f 55 8b 8a e3 ee 40 fb d6 10 9d bc 58 74 7f f6 a8 de 6d 42 3b 83 f1 15 00 92 6b b2 42 1e 8b 16 a3 91 cc 6c fc c6 43 71 39 e8 7d 44 d2 90 7c ce d0 d0 a2 7a 42 1b 21 5b cd 17 f5 3b a3 a9 8f 52 01 c2 c6 9a 7c c2 fc 53 5b f8 66 99 09 9b 9a e2 1e 22 89 24 af c9 c7 11 e2 89 0f c3 37 1f 34 0b 9c 6c 02 c5 dc 3d dc 31 52 8e f3 31 68 f2 35 4d 2f 76 81 3b ca 62 dc 60 b5 30 61 62 8a e1 a2 58 ea b4 e4 76 3c 60 32 c0 3a 92 9d 18 58 d5 11 f2 40 93 90 01 3f 73 36 e1 8b 94 fc 4c 1c 5c 2a 08 b8 4d df c4 cf 11 c8 c9 36 36 9d bc 58 77 e6 d4 c6 b3 f4 b0 40 03 69 a3 ac 98 d9 fe d0 80 f7 7a c0 08 37 0b 80 f6 b0 cf 25 46 bc f6 1c 3b ae fd d3 c3 cb Data Ascii: p{.UMG$+y-4W=:5WoU@XtmB;kBlCq9}D\|zB![;R\|S[f"$74l=1R1h5M/v;b`0abXv<`2:X@?s6L\*M66Xw@iz7%F;
2024-11-25 14:35:27 UTC	16384	IN	Data Raw: 51 a6 fc 34 24 e2 be ac dd d2 96 cb 89 53 42 78 c9 0d b3 96 ad cb 1a 25 82 f0 46 1b 74 5f 33 24 65 56 79 79 e2 12 3e d8 af 01 8a 37 98 1c 81 44 3c 1c d7 0b d4 4b 67 04 28 52 f0 ba 78 8c e1 0d a3 4d 0d 2f b8 c8 1a 76 e6 b8 22 1b 8a 01 b0 78 0c 03 b7 de 43 4f 4f 31 91 ad a5 74 5e aa 1d a8 50 01 c3 cb d3 52 fd bc 6c 7b f1 5c 27 11 4b 10 71 9d 5f be 22 b8 65 ce aa a5 c0 ba ec 58 c9 14 52 ae ec e4 d3 2e 76 0a 6d 8e 93 98 b5 d6 0d b6 4e 05 bb 45 a5 0f 78 5d 9c 1d 7b 89 29 63 ad 84 d9 ed ee 5d db aa 0d 61 85 78 6b 12 fc f0 23 52 79 6b 9c 72 47 76 6a 38 1f cd 4b 26 71 91 1f 06 b0 f7 2e 68 56 01 9c be 48 f3 4c 52 32 57 57 33 20 ae 06 bc 69 94 15 8b c3 65 c6 54 49 e1 01 d9 a9 9a 57 a9 01 3a f6 c1 bb 02 d0 bc fd 9f e6 5d 52 28 2d 67 4b e7 cc 3a a6 b5 0f 0a b1 47 f2 Data Ascii: Q4$SBx%Ft_3$eVyy>7D<Kg(RxM/v"xCOO1t^PRl{\'Kq_"eXR.vmNEx]{)c]axk#RykrGvj8K&q.hVHLR2WW3 ieTIW:]R(-gK:G
2024-11-25 14:35:27 UTC	14144	IN	Data Raw: 45 ba cf 86 81 36 7c 99 98 1a 2e 29 8d e5 da 8c cb ab 6d 56 1b 56 5c ba 2b a8 99 8b a2 e9 4e ae 98 f1 2a 5e 30 56 65 dd 93 38 c4 8d 3a 7b 13 91 25 59 30 74 3c 10 32 4c 2b df a8 97 5c 6c 7e 8b 5f 77 f7 c0 63 3d 04 1b 1e 18 54 37 2a b7 00 d1 d6 ec 8a 8b ad 03 be 07 f0 c5 55 f2 9d 20 e4 95 6b 16 8b a8 09 78 83 6c f2 97 5f a1 9f cf a7 ec 9c 33 8b fe 11 3b d1 b9 8b 7f 0f 5e e6 32 d1 ba 75 2c e1 ab 40 6a 54 ac 7e 63 f5 df d4 9f ff 00 0a 46 1f a2 35 11 02 f3 a8 ba b9 92 fa 89 16 0d fb f4 0b d2 0a ba af 3f 87 aa 10 f6 fa 30 bb fd 91 72 bc 7e 3c 00 e9 c9 28 eb cc 18 27 c7 f9 d4 98 02 b4 02 ce 26 7f d5 e4 84 8c eb c0 21 34 c6 7d 9b 87 4b ad 21 ba 6b da 0b 51 14 10 4d 52 26 c6 17 d0 c9 27 47 15 dc d5 d6 dc af 2b 14 22 b8 fa df f8 7a 82 2d 32 e8 45 26 ce a9 be 8b b9 Data Ascii: E6\|.)mVV\+N^0Ve8:{%Y0t<2L+\l~_wc=T7U kxl_3;^2u,@jT~cF5?0r~<('&!4}K!kQMR&'G+"z-2E&

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:27 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143527Z-178bfbc474bbbqrhhC1NYCvw7400000007p000000000mc9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:27 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c8e7bca-d01e-0049-4f4b-3ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143527Z-15b8b599d88tr2flhC1TEB5gk4000000063g00000000hydm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:27 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 67c311b1-901e-0029-7afd-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143528Z-15b8b599d889fz52hC1TEB59as000000064g0000000028ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.9	49849	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	648	OUT	GET /assets/img/portfolio/6-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:28 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: image/jpeg Content-Length: 36832 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-8fe0" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 88 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 96 37 bb c5 44 df Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"7D
2024-11-25 14:35:28 UTC	16384	IN	Data Raw: cb 57 3f 3d a7 d8 c3 65 ec 59 67 f8 1a 24 67 8e 30 b7 b6 96 ea c9 e1 ff 00 33 b4 f2 76 0a e7 63 2c 3f 2e 05 2e fc 87 3f b7 13 eb 3f eb 95 d4 46 36 38 ef 36 0a ba 8c 74 29 c3 5f 23 68 cb dc 0f 55 8f 53 23 68 aa 36 85 ab b4 6c dd f5 a8 f1 d8 47 d5 2c 7f b3 8f e0 76 d1 94 63 37 16 fd a8 ef 44 23 07 2b 69 bc 3e d5 5e 04 79 37 47 f4 67 1a ad fd 94 6b fd 49 63 5d 8e 85 2c 2f 2c 76 8f 0d 11 6d ba 7a 75 85 8a e5 61 1c 45 84 b0 be ca df 49 92 f6 ad 25 4a 9a 5e 5d 8c 2c 74 7f b1 1c fe f2 56 b2 fa ce 93 3b 49 72 de 6d e2 8d 8b a6 17 bc 9a d0 a5 36 a0 92 e5 bc a6 92 ec df b7 1c 3f 35 99 8b 88 d2 3f 21 5a 7d b8 9f 5a 97 85 d9 0a 32 38 c4 6f 7d c8 a1 88 6a 1a 99 5d 91 b4 6c fb 99 6a e7 53 08 dc 8d 9b f2 bb 33 2b be b1 1f b0 57 42 d1 ff 00 b3 8f e0 5b d8 c3 b5 b0 94 fb Data Ascii: W?=eYg$g03vc,?..??F686t)_#hUS#h6lG,vc7D#+i>^y7GgkIc],/,vmzuaEI%J^],tV;Irm6?5?!Z}Z28o}j]ljS3+WB[
2024-11-25 14:35:28 UTC	4318	IN	Data Raw: a8 fe 11 ee ca bd 4f 11 f7 67 b6 1e 87 bb 08 c3 87 6f df ee cb a9 f0 de 6d f5 38 5b b6 59 6b b2 b9 2b df 87 71 b2 7b f7 72 43 66 6f ab ed 6f 8c d9 c3 73 64 39 e4 bf 17 30 7c dc 6c b9 c4 3c f8 e2 cb de 58 c6 c0 f2 6b 63 0f cc eb af 0f 16 dd fb 9f 0d b9 8d b9 6e ad f8 f1 da 26 a3 d3 de 5f f5 74 ee e6 98 f5 d7 a9 07 2a f1 c1 a3 f5 3f 23 24 3d 4f c2 44 fc 76 1c e4 88 f6 3e fe 2c 1b b8 73 3e df 45 fd de d6 cc 03 e3 e2 f6 60 ec 1c 2c 43 8c 07 47 8d cb 7f 9f 09 1d c7 04 5d 81 83 8e 67 e2 c8 cb 9a 4f 03 33 8b 85 e6 73 d4 c3 e2 27 ea cd f0 67 b9 cb 2c cb 3c 09 9e 36 59 65 c6 6b dd a5 c7 b8 71 b0 9e 1b f5 73 3f 68 5d d2 df c6 c6 7b 80 9b 2c 8e e7 8b 8f 50 9e 38 9d b7 58 f3 70 75 1c fe e0 64 a9 f0 e8 3d af c1 74 bf f9 c2 55 eb 38 e9 96 0b 0f 72 1e b8 91 f7 cc cc 4c Data Ascii: Ogom8[Yk+q{rCfoosd90\|l<Xkcn&_t*?#$=ODv>,s>E`,CG]gO3s'g,<6Yekqs?h]{,P8Xpud=tU8rL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.9	49852	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	417	OUT	GET /assets/img/clients/themeforest.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:28 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: image/jpeg Content-Length: 1689 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-699" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	1689	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 05 06 03 07 08 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed2z

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ceab71a5-101e-0017-2bd0-3e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143528Z-178bfbc474bh5zbqhC1NYCkdug00000007hg00000000akuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ee6bf500-501e-000a-4e3b-3e0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143528Z-15b8b599d88vp97chC1TEB5pzw0000000640000000003t5a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.9	49853	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	641	OUT	GET /assets/img/map-image.png HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: image/png Content-Length: 98559 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-180ff" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 bd 00 00 02 d0 08 03 00 00 00 83 ab 2d ed 00 00 00 36 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 63 c6 fc 00 00 00 12 74 52 4e 53 00 06 0c 11 16 1b 20 24 31 28 2c 35 40 3c 39 44 47 4b ae a3 ec 01 00 01 80 66 49 44 41 54 78 da ec 9d eb 6a 1b 41 0c 85 47 47 9a fb 65 b7 ef ff b2 d5 8c bd 9b 75 53 83 0b 81 d4 ad 3e 38 48 4b 38 73 c6 7f 84 11 c9 c6 19 c6 1f 82 54 80 98 80 9c bc 33 0c c3 30 de 04 f4 c1 9c 1a 23 b5 e0 0c c3 30 8c 37 81 ef d3 9b 6d 7a 1b 86 61 bc 11 04 a8 98 1c 40 ce 30 0c e3 3f 47 84 88 97 e0 be 17 78 10 84 dd 5d 44 2a 88 38 d5 ea 1d 98 68 09 e4 44 e0 58 40 Data Ascii: PNGIHDR-6PLTEctRNS $1(,5@<9DGKfIDATxjAGGeuS>8HK8sT30#07mza@0?Gx]D*8hDX@
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 4e 38 88 1d 74 51 13 62 59 eb 51 39 49 ab 9a d0 50 db 77 bf 49 50 eb 6d af 1a 46 ff c6 99 fc a6 9c 74 0d 83 03 7e ae 9c 6c a8 5d 39 d1 8c 38 e8 35 0d 35 6c a8 96 83 0c 9a a9 7e e3 b4 4d 39 99 37 e5 04 31 7b 79 b2 c4 6b 45 8c eb 37 ce 50 d6 2a 63 50 ec 1c f4 57 76 88 75 73 10 1e 97 8f a9 48 10 a9 2a 27 18 33 b2 cb c3 b2 ea ed 86 29 1b 26 ff 6d 81 d5 6c 3c ce ec a9 f0 b8 66 ce 24 8a c2 05 e5 24 07 a0 d9 55 1e 0b 0d 53 d3 30 12 52 a8 3c 56 ec d8 78 1c 4a f6 d8 a6 9c a8 c2 a8 81 c7 a9 31 8a 2a a3 18 31 26 0b 6e 43 0d 05 b5 29 27 4d c3 10 d4 21 7b c4 dd dc 35 8c 9d 02 d8 50 b1 a0 8e 3c a6 ce e3 64 55 45 35 d7 50 11 e7 4d af c1 cb a8 d9 81 29 eb 5d 75 c7 1c 39 28 36 bd 06 b7 ec 89 77 8e 20 35 85 51 75 97 4c 76 17 d4 7b 4c e7 09 29 cd 1a 66 d1 92 26 4d 61 b9 b0 Data Ascii: N8tQbYQ9IPwIPmFt~l]9855l~M971{ykE7PcPWvusH'3)&ml<f$$US0R<VxJ1*1&nC)'M!{5P<dUE5PM)]u9(6w 5QuLv{L)f&Ma
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 62 95 1c 39 ac 4d 0c da 38 f9 ea 30 11 7a 25 e3 38 9b 18 c4 88 22 2a cf 29 42 1e c7 aa 8c e3 b1 74 88 45 ea 7b 4b 87 58 49 4d 71 2c a8 87 71 3c ef e3 38 b8 a6 06 ea c8 0e b1 44 e5 ec 31 29 7b 46 a4 3a ca 9e 11 a9 ca 78 ea 88 f9 5a c6 31 7a b5 32 b5 4f 54 93 a8 56 99 44 b5 e4 10 2b 6b 18 83 74 88 ed c8 21 36 50 6d a6 cf b7 48 6d 39 c4 d2 c4 e0 99 43 2c 53 95 a1 88 22 aa 3b 36 2f f6 85 da 71 dd 3b c4 f2 6c 71 3f 23 d5 3e 3b 9c cb b7 33 b0 5a 67 c5 2e cf b1 5a 67 f8 da eb 0d d8 74 c9 b8 a4 d6 61 bd 41 54 39 80 50 39 20 75 99 49 ad 13 74 33 81 6a 88 aa 12 75 63 95 83 54 eb b8 42 ad c3 54 d2 1b e0 5e e6 4c 23 44 6a 9d 9a ca 61 21 95 83 57 eb dc 7f d3 91 5a 87 a9 5b a0 22 9d 35 42 d3 f3 ef 54 b3 e0 cd 1b 5b ff 0b de de ca 77 2d 49 ad 13 ba 96 41 ad b3 92 5a 67 Data Ascii: b9M80z%8"*)BtE{KXIMq,q<8D1){F:xZ1z2OTVD+kt!6PmHm9C,S";6/q;lq?#>;3Zg.ZgtaAT9P9 uIt3jucTBT^L#Dja!WZ["5BT[w-IAZg
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 75 80 c0 09 62 b4 e0 d6 19 fc 3a a2 fd 98 8a 3f c4 f8 61 70 15 9b 92 cd 71 64 f8 90 09 22 27 79 72 1f 81 27 9a 81 83 93 7a 63 96 21 51 ed 3a 72 52 a6 66 a7 86 d5 03 47 71 6a f8 18 20 7e f4 9c 14 98 3a 14 ea 3a 9b e4 d4 a0 d4 a9 a2 4e 4c 8d 89 ea 31 c8 04 6b a6 66 7f 88 05 ed b2 18 62 2a 4e cb 5f 53 1d 79 36 68 99 8c 99 57 32 d3 87 e3 bd 15 9f 13 47 91 5f f7 1f 3d 0c bc c2 5e 56 f8 23 62 58 47 f0 1f 53 f2 39 31 e2 73 32 72 d2 b2 8a e3 88 13 c7 11 23 8e 23 b2 c2 bc d2 9c e4 78 9b a2 ac 30 27 0d d9 e7 64 99 20 29 ea 43 cc 51 94 9a 15 d5 55 43 a8 9c 54 0a aa 21 51 67 f1 39 21 2b 3e 27 a3 50 17 a6 2e 99 3a 8b a2 3e 8a cf 89 50 c3 4e 9d 41 75 bc f9 9c 28 d5 c3 90 7e 57 11 48 e0 d7 c9 af 87 ac fc f1 55 c7 42 5d 84 ba 64 ea ca 54 75 1c 49 8a fa 88 4c f5 42 45 3e Data Ascii: ub:?apqd"'yr'zc!Q:rRfGqj ~::NL1kfb*N_Sy6hW2G_=^V#bXGS91s2r##x0'd )CQUCT!Qg9!+>'P.:>PNAu(~WHUB]dTuILBE>
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 24 3e d7 3a d7 92 83 c2 46 f5 27 73 2d 75 9a a6 ea 9c 30 f9 64 ae e5 a3 8a e0 78 a6 9a 47 df 31 58 75 4e 1e da bb d7 53 fd ba 17 7f a7 e9 93 6d cc 4e 3e ab d0 35 8f 27 29 20 f7 d4 83 f9 ac aa 73 32 3f 75 4e b0 4e d3 dc 74 4e 1e 5b c7 a0 ea 9c 3c b4 4f f1 48 e7 64 69 75 4e ba b9 96 a8 54 5b a8 68 8b ce 09 3d 75 4e 72 c7 a0 ea 9c 3c aa 38 45 b8 9f 9c df 6d cf ca 9d 9b 3d 96 ba 77 d0 ba b7 56 ee b4 ee 2d 1a 18 84 7e d6 ba b7 03 0e fe 8e ba 77 bc 73 70 33 d9 65 8c 79 87 45 0b a3 d4 bd ed 5c 2a d0 4e 64 4a e6 5a f7 36 e5 17 2c 06 c7 40 94 16 64 2f bf 9b 89 8b e1 00 83 7e 91 0a b4 e7 a0 52 f7 b6 1c 64 97 d4 d4 bd 97 a6 ee bd 08 b5 d4 bd d9 d1 31 d5 96 ba 77 4f 0d 42 d5 5f eb 34 d4 a4 d4 59 a9 1e 9f 67 bc 55 db 71 d4 0a 74 a1 82 50 3d 07 6d 54 28 54 ad 40 ef 13 Data Ascii: $>:F's-u0dxG1XuNSmN>5') s2?uNNtN[<OHdiuNT[h=uNr<8Em=wV-~wsp3eyE\*NdJZ6,@d/~Rd1wOB_4YgUqtP=mT(T@
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 6e 93 6e 27 a3 71 10 3b 77 60 25 08 28 46 71 be 0e 04 81 5b 97 10 83 d7 8a 1d a4 03 93 b8 f5 76 9d 15 24 ab ee 59 63 cd 8a 35 6b 8c 92 11 d1 72 50 90 ac 9e 03 f8 da 78 db 2a ad 4a 38 c2 ec 65 c0 08 3c bb 5b ee d5 35 94 a1 9d 8c 26 60 39 b9 e7 71 32 5a 47 38 06 44 01 cb 79 02 06 8c 83 f4 06 61 93 8c 04 31 ba 41 b1 f3 f5 21 00 7b 8b c9 8c 02 9b be a7 0b 85 ae 98 8a f2 5b cc c8 b8 2e 0b a1 8f 2d 4a eb 64 21 24 b3 cd 9c 9c 72 32 a6 59 56 cf 61 ca 67 4f fb 96 f9 af 88 e6 2b 90 bd 24 70 f3 84 e6 52 34 5d 0a e9 3c a1 ce 17 8d f3 64 21 cf 86 fc 97 66 77 50 e6 08 f1 cb 91 fd 72 18 2e 49 b1 73 07 9e b4 b4 d3 24 ce 1d 64 83 79 22 9d 38 a8 cc d2 81 c3 f8 65 28 70 07 fe d2 4e 25 b6 9c d5 5c da a9 c4 96 33 d2 25 e9 9e 95 26 c9 3a 71 d6 cb c8 ca 2d 4a 56 c7 41 f1 92 c0 Data Ascii: nn'q;w`%(Fq[v$Yc5krPx*J8e<[5&`9q2ZG8Dya1A!{[.-Jd!$r2YVagO+$pR4]<d!fwPr.Is$dy"8e(pN%\3%&:q-JVA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.9	49855	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	414	OUT	GET /assets/img/portfolio/2-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: image/jpeg Content-Length: 29475 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-7323" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 01 d3 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 2b 13 79 92 32 Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"+y2
2024-11-25 14:35:29 UTC	13345	IN	Data Raw: 0d 0c 07 69 d3 f5 de 73 cc 02 35 57 c9 4d 1a a3 1f 75 54 b1 9d bb 89 01 86 04 d1 43 b3 56 21 23 6f 8f ed 21 ea 94 13 f9 99 d8 58 6b 1f ba 1c 4b 7f c6 72 d3 0c 94 6f 80 14 12 95 ca de 88 01 6e 0e a3 49 6e d9 fe 8e 34 5b 5c 37 8e 6a df 4f 6f 2d a7 f4 cf 6c 63 e8 62 eb e2 7e e9 84 74 a4 94 28 d5 28 ae 59 6e 4b ca 34 b0 98 d6 c2 d1 14 68 be 31 c2 20 d8 05 b2 4f 63 b2 13 d2 ad 7f e4 21 f8 77 5b ba fa 42 04 7a fe 40 ec a9 4f da 37 b0 94 ed 95 11 6a 1e 49 7d 04 c1 a2 dd d2 f6 e0 36 93 0c e4 2d 00 f9 89 f9 47 c3 ad ee b5 07 54 9a 0f 13 36 be f1 5b 42 ea 16 f6 55 d8 42 61 d7 e9 09 50 3f 31 8b 4b 71 b6 d7 81 ea 83 b3 1e 9c 46 77 37 65 30 8e 3b 8c 37 bc ba de 0b 58 b4 d7 f9 c2 4d e6 43 78 77 1f 38 b5 79 b1 12 ef 60 d7 82 e1 79 da 0f 14 a2 36 8a 35 8d b0 d6 fb 9e ec Data Ascii: is5WMuTCV!#o!XkKronIn4[\7jOo-lcb~t((YnK4h1 Oc!w[Bz@O7jI}6-GT6[BUBaP?1KqFw7e0;7XMCxw8y`y65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.9	49854	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	662	OUT	GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.authe.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.authe.net/assets/fonts/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: font/woff2 Content-Length: 77160 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-12d68" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16129	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: ff cb f9 68 58 da 63 87 98 d4 ec 1e 2e 62 0c e8 ea 42 2a ac 7c 26 bf e2 8f 7c 67 ab b7 65 2f ca 6b c8 75 bb fe 76 5c 5f 48 87 b6 9e 9e 62 82 a0 0c 07 fa 64 d9 70 e1 47 9b be 2f eb 41 9a 7d f3 c0 08 e3 ac ac 27 ec f7 78 c8 9c ae d5 8b e1 b9 3b d6 45 f0 dd d8 e9 0a cb 21 57 b8 dc df e8 04 07 80 6a cc cc 7b aa ed 9c d9 5a 49 24 df 7a be 7b 4f de 14 70 af 1e 3b e7 78 a6 12 b0 3d d7 ba 98 71 de 7b fd d3 f5 a0 f5 c9 35 fa 6c 32 b8 33 4f 8e 0c e5 3d 01 19 f9 40 ed 13 6a 86 6a 23 0c 13 f8 47 59 bf 54 93 6e a1 3e f9 26 de ac 0e af cd 23 83 cf 43 42 cf a9 ff 7a 4c 1e 75 79 b5 f9 dd 6c 7f 53 1f 02 ef 61 bd 61 97 a5 ee 30 c7 4c 54 76 82 c0 33 96 e2 2c 8c 32 0a e5 73 64 54 01 72 e7 55 7d 45 dd 03 95 9c dd 6c 00 31 e0 b7 7a a2 60 58 0f 61 2a 68 7b 1f 9a 71 1a 69 75 55 Data Ascii: hXc.bB\|&\|ge/kuv\_HbdpG/A}'x;E!Wj{ZI$z{Op;x=q{5l23O=@jj#GYTn>&#CBzLuylSaa0LTv3,2sdTrU}El1z`Xah{qiuU
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 7b ef 08 eb 9a ac 97 19 b2 bc c9 87 a2 3a 6b 0e 43 11 55 12 27 35 6e 98 90 1c 25 a1 27 d7 43 58 02 50 30 36 47 83 db ae 91 fb 6c 5b e9 3c 96 1b 4e 83 73 63 4f 46 65 51 fa ca 2d 92 67 69 24 f3 18 52 4e e8 13 b2 fd 6f 19 37 d2 57 7a 9a 0d 5f 74 ba b9 22 3f ea 7a 3c 51 d5 eb 6c 26 b5 91 42 2c 35 ec a5 22 fa 7d 12 5c d9 11 db 69 5e 93 7c 7d c3 f0 b1 a2 52 9f 9c bd d8 19 e8 b4 6c 0f 3b 7f 24 89 8c d1 bb f9 27 64 78 77 e1 f2 41 2a c6 cd ba 31 0f 5f 77 f0 66 24 6f 72 97 77 a6 56 a5 15 24 0a c8 e9 54 1d db 48 06 69 f9 f3 03 fa f2 d3 4c 16 db e2 16 fc e4 6c 56 07 63 5c a0 a7 bc be 37 4f 0b ec 8a 9a 0e b7 f4 c5 b9 52 86 44 29 d7 5d ee f8 bc 8c 42 ee d1 01 d3 e4 b6 3d 33 95 e8 e9 71 46 c9 4d 4d c9 e8 c8 93 86 42 ca fc 67 b7 c9 d8 db 0a ad 4f 4d 5b fa d4 b0 60 12 10 Data Ascii: {:kCU'5n%'CXP06Gl[<NscOFeQ-gi$RNo7Wz_t"?z<Ql&B,5"}\i^\|}Rl;$'dxwA*1_wf$orwV$THiLlVc\7ORD)]B=3qFMMBgOM[`
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: c9 9c 2c 73 52 06 85 cb df 95 7a 48 37 d2 7a cf 99 cc 46 72 63 48 4b fc ff f8 1a df 6f 19 53 ae e1 e3 46 61 30 19 c3 16 ad 7a b2 81 95 68 c7 43 aa 1c ce d7 3a 2b 06 2f a1 9d af d5 d2 ad fd 5b 2d 57 98 c0 20 70 02 94 04 c0 d0 33 14 76 e8 ed 5c 75 71 c7 47 47 2b d4 9b 44 58 29 dd e0 9e 03 27 d6 06 e3 b7 26 4d eb 75 19 c6 97 d3 c3 9b 7e 45 ad bc de 88 8c 57 7f 17 70 a7 f6 db 35 02 4a d9 70 47 d5 a0 d3 d2 f4 b4 30 cc ea 8c 5f d5 d4 8d aa 8e 00 df 71 57 ff c4 98 94 98 0a 7f 5d 35 98 78 0c 92 00 c9 f6 a0 9e 16 e0 f9 31 cb 79 75 d2 26 e6 a7 0e af 38 48 c8 8f 27 13 9f fe 3b a4 d2 40 bb 3c 51 ee 76 f5 38 b9 84 8c ad be 75 56 ac 3c 1e e6 b7 c9 a6 45 59 29 16 2b 99 ef 74 6e b9 b1 7c ce df b2 d5 4b b5 f4 95 0c d4 1f dd e9 b5 d5 33 2a 89 cb 16 a8 ea 22 db fc b6 02 f6 Data Ascii: ,sRzH7zFrcHKoSFa0zhC:+/[-W p3v\uqGG+DX)'&Mu~EWp5JpG0_qW]5x1yu&8H';@<Qv8uV<EY)+tn\|K3*"
2024-11-25 14:35:29 UTC	11879	IN	Data Raw: 12 b0 c6 48 30 95 1c b4 cf 69 6b 59 98 3d 32 c7 16 16 e4 e1 ef fb e5 6e 0d 5f fb d7 75 ff 58 bf fe 47 57 56 d2 b9 8e 8e b3 81 59 5d 2f 4b 3c 4a ee 54 64 6e 16 9d b8 b8 59 b3 ed e6 f5 4a 4d 36 40 e0 e7 72 dd 8d 9c 1b f3 4e fb 62 6a be ef d3 44 1d 38 b5 7c 20 cd c2 27 e4 2b 5e 0e b7 6a 8d 8b 74 7d 8c f3 07 fb ce 81 b4 62 46 41 47 c4 8a 90 a4 bd cc 83 f9 e9 a2 2f af 9d 63 96 44 a7 3b 27 66 b4 7b 73 88 29 79 b1 c0 18 27 fa 09 f9 4b 31 37 b4 fa 93 45 e5 d3 6d fa e8 98 b7 d2 94 d3 7f 1b 6b e1 3c 23 fa 04 eb fd af e1 ea a8 8f 53 d4 f8 49 b8 c0 56 90 3a e0 09 c7 65 f0 f8 1b 38 1e 5a 99 28 74 20 69 bb f7 40 3e 06 f6 38 5b 84 e6 c0 eb 34 58 4c ef fd f0 fb 87 7b a2 c0 4a 2e fe 17 ca 14 2e 0a 35 7c 45 bc cf 5e 5d 73 d2 9d 63 9d 43 11 7e e9 e1 1b 07 d8 12 4c 40 fe 21 Data Ascii: H0ikY=2n_uXGWVY]/K<JTdnYJM6@rNbjD8\| '+^jt}bFAG/cD;'f{s)y'K17Emk<#SIV:e8Z(t i@>8[4XL{J..5\|E^]scC~L@!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.9	49856	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	414	OUT	GET /assets/img/portfolio/1-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:28 GMT Content-Type: image/jpeg Content-Length: 49855 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-c2bf" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 a5 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c1 80 12 46 b0 f4 6b Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"Fk
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 75 ec de cf f8 b2 76 76 f5 da 05 59 65 8c 11 a2 4d fc 94 b2 f5 b3 99 0b 7e 82 cf f9 32 7e 7b fe ad fa b7 2d c1 33 b7 ab 28 0a ba c9 b0 29 11 a1 5b df f4 b2 d7 e0 c8 bd 5b fb c9 b5 e8 ca 31 81 5f 78 d4 88 93 7f 23 7b ba 6f c9 91 7a b7 e2 df c6 de 84 9d 99 98 94 88 14 0a ea 8d 48 89 52 a2 58 93 a8 43 bf d8 47 f0 6f 46 ff 00 35 f8 ed df b4 4a 07 c9 34 4a 64 4a a5 cf 30 d9 49 cc b2 81 29 63 0f 1e 58 92 c5 1e 39 ea 94 2e 3f b3 7f a6 e2 99 53 68 0e fa 89 4c 89 51 a9 01 5c b1 3b e5 9a d4 07 6f e1 86 e0 39 48 f6 24 b2 12 da fc 35 fd 8d fb b7 ab 7e 2e dd 6a 94 2a fa 8d e7 4e a0 b1 e5 07 2c 76 a5 96 57 20 44 10 cd 29 bf 1f 21 3f b6 bf 91 bd db d1 bf ae 00 b4 a0 26 56 d0 29 13 aa 72 35 02 c5 16 24 b1 25 8a 2c 63 e3 be 87 d2 7a 9f 5c 87 fc d6 fe 68 c6 cb 44 bb 5a 40 Data Ascii: uvvYeM~2~{-3()[[1_x#{ozHRXCGoF5J4JdJ0I)cX9.?ShLQ\;o9H$5~.j*N,vW D)!?&V)r5$%,cz\hDZ@
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 57 66 c8 6b 50 6e 21 d5 10 2d 22 f5 db 44 74 b6 b2 bc f2 21 1a 3c d9 fd 47 b7 c4 ad f0 6d 11 9e 21 51 29 22 15 b1 85 d5 c4 d1 ef 30 f5 9c 78 11 1b 97 c8 5c 5d c2 e5 f1 5e 0e aa f7 89 52 cb 58 0f 11 3e 26 13 80 96 92 35 9c e7 b3 98 7f 55 00 30 4d 99 98 fe 37 54 c4 0a c1 b0 7c 60 fb 6a 5e ec ad 4d 7f 50 88 12 ab b9 77 01 39 dc c7 de 88 a8 37 1c 15 64 01 c4 07 50 95 32 25 0c 52 c9 10 ed 88 a3 8c 0d 3b 63 d1 d5 a2 68 ba 80 68 88 23 7a 84 ac 80 ae 37 29 ed 61 cc 64 cd 25 30 d9 3b 49 f4 f7 c9 98 47 86 0e 3b 9c c3 70 56 78 23 b3 7f dc 4b 3a 7c 03 56 80 8c db c3 44 6a b8 06 1f 07 15 05 4c 06 08 60 08 e9 86 29 a7 ee 60 ed 92 ab 65 2a 56 e4 13 9a 35 52 82 eb 09 8e 06 51 e3 c1 b6 e9 14 ec f4 4c fb 96 61 e9 c7 85 4f c4 02 e2 88 0c 7b 8c 69 f1 50 85 71 da 1d c5 8a cf Data Ascii: WfkPn!-"Dt!<Gm!Q)"0x\]^RX>&5U0M7T\|`j^MPw97dP2%R;chh#z7)ad%0;IG;pVx#K:\|VDjL`)`e*V5RQLaO{iPq
2024-11-25 14:35:29 UTC	957	IN	Data Raw: d8 9c 11 4d 32 60 23 95 e7 d9 bd 8c 3b 91 cc 6f c4 32 bd 17 2e 5f a4 1e 23 0f 99 85 7c 17 c8 c1 cf 27 66 ef 71 b5 73 2a 01 14 d4 23 e4 4f 22 23 62 57 e7 a8 c8 cb df b3 7e 83 dc 27 99 5b dc b9 7e b5 3c c4 4f ee 68 49 63 7b b7 7b 8d 81 04 f3 2b 70 61 02 1e 21 e4 10 7d d6 da e5 cb 97 ea b8 4c 39 40 3e 3f 26 63 c3 e3 fb 9e 12 5b 6a 9e 35 dc 63 fb 8e c2 08 62 90 cb 4c 21 46 1c a9 83 20 26 8f 1b 86 96 0f 73 54 cf 85 7c 87 2b 31 e7 47 e8 ed 5e d5 fb 37 2e 3e 45 c6 2d 8d 4c ff 00 a9 76 b8 ff 00 fb 3f 4a 72 75 56 e6 cd 4e 4f 7b 01 0b 85 ea 16 26 1e f6 1d c1 0c 06 84 57 8e 8b 90 4c fa dc 9a 77 29 53 07 ea 88 fc 64 e2 23 2b 8b 53 7b 6a 58 0c 2d e5 f8 97 31 6a dd 0f 26 e6 2d 56 3c 9f c1 b9 7b 67 d7 e3 c5 c0 e4 cc b9 df 31 f2 69 62 a6 9b 31 c3 95 5c 44 2a ea 1d 4f 06 Data Ascii: M2`#;o2._#\|'fqs#O"#bW~'[~<OhIc{{+pa!}L9@>?&c[j5cbL!F &sT\|+1G^7.>E-Lv?JruVNO{&WLw)Sd#+S{jX-1j&-V<{g1ib1\DO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.9	49857	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:28 UTC	414	OUT	GET /assets/img/portfolio/3-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:29 GMT Content-Type: image/jpeg Content-Length: 52803 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-ce43" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 a5 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 92 49 a4 90 2b 94 Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"I+
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 89 8f 3d 83 10 dc 42 99 71 90 8c cd 59 14 37 9d 18 81 9d 6d 65 9a 7b f6 ef 7e ef 1a 60 3c 77 df 7d fb 7d 3e a5 df 73 95 fb 3f 69 d8 ff 00 49 1b 1e e7 59 0d 1b da 6e bf b4 37 47 6e 77 7f da 3b f3 e4 4c f2 8b f9 67 fd 67 fd 8b f6 ec 43 31 98 82 91 8c cc 66 22 8b 62 a8 0d 7e 54 9e 48 de d7 c1 86 18 65 e1 e2 f3 bd 68 49 05 04 d8 d9 15 c7 62 18 2d 7b 64 88 4d e0 98 f5 a4 dc db 00 b5 81 85 b7 ca f2 8d b6 26 db fb 54 da d3 64 36 57 d9 1c d1 98 dc 93 93 7c 97 bb eb f7 bb 8b 98 e7 bf c6 33 29 01 05 aa f9 01 75 d0 50 fa 98 d0 d5 5d 6c 26 19 e3 cb 2b 62 6e ac 99 a0 cf cf 8b d8 dd d7 c9 2d 2d 0c a0 db 34 93 08 86 1e 0c 31 90 c7 9c 48 b9 da 2d 46 d2 c9 94 66 1b 83 32 ad f6 bd a8 72 44 c7 b7 db 74 75 8c 6b 0b 58 dc 9c 9d 83 93 50 3a a2 da 17 2f 6a 58 92 7d ae f3 6b 92 Data Ascii: =BqY7me{~`<w}}>s?iIYn7Gnw;LggC1f"b~THehIb-{dM&Td6W\|3)uP]l&+bn--41H-Ff2rDtukXP:/jX}k
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 2c 53 9e 0c 07 12 dd 93 8d 29 e4 74 8f 44 4d 29 8b ab 79 55 8a dd 75 40 f0 93 4e 88 57 27 e8 a0 13 ba f0 bd ca ce c0 bc e7 e8 b2 80 ae f2 b2 80 af ec 16 54 0c 4f 52 a0 bd d1 3c ac 7b 8f da 10 18 7f d7 85 82 b8 1a 4f 55 20 0f 5b 22 44 32 c4 42 20 13 cd e6 11 1d 64 14 58 24 fe 58 50 29 8e ae 12 b7 75 c2 69 68 8e 58 b8 fa ae 73 e6 8b f3 4f aa 20 ce 5f 50 8f 3c 65 8d d0 0f 27 9a 3f a4 ab bf d7 50 98 09 71 b9 16 1e 81 12 d9 51 da 84 9b 08 62 e4 c3 9f 53 6f b2 d1 7f 55 05 35 97 e6 4d 7d 11 85 67 e6 2b 15 80 a1 c9 40 e5 2b b4 cb 19 18 83 25 76 81 24 9c 53 96 3b ba 93 88 73 dc b1 c5 e4 3e b1 8d 00 58 a3 6e f9 f2 74 58 b6 52 24 d6 7f dd 62 8b 39 bf 10 ed 96 25 f0 de f5 e3 73 2a be 9d eb fe eb 12 1e c0 2a bc 8e b7 58 92 fb 55 7c 46 ea a5 a5 ef 98 d6 51 32 43 dd 6e Data Ascii: ,S)tDM)yUu@NW'TOR<{OU ["D2B dX$XP)uihXsO _P<e'?PqQbSoU5M}g+@+%v$S;s>XntXR$b9%s**XU\|FQ2Cn
2024-11-25 14:35:29 UTC	3905	IN	Data Raw: 03 ac 44 c7 3c 3f 26 36 32 6e a2 59 62 95 11 c6 5e 4f 7b 08 96 32 f0 39 66 b6 21 2e 4f 53 2b c4 30 bb 48 e2 a8 94 69 da 21 3d 5c 32 ab a1 d3 ec 49 f4 57 25 6d a1 c0 d2 ca 91 f2 3e 47 c8 b9 1a a4 6b 91 a9 8a 4e ca 39 fe 94 51 43 59 51 45 6f 47 49 b2 7c c8 c3 ad 42 b5 cd 12 8d a1 aa 64 65 7c 32 86 92 11 68 4f 92 d1 68 b4 5a c9 ba 2d 16 8b 59 49 5a 28 ac 97 7b a8 a2 be ac 67 58 6d 8d f2 47 f4 61 4a e3 94 e0 9f 42 96 9e 24 27 e5 3b 2f 26 88 bd 2c d6 8d 42 9a 13 42 27 c2 b3 59 ad 0a 48 bc 99 65 90 df 7b 56 d4 7a b7 ff 00 5d 0a dc b8 3a 97 26 13 13 7e 72 c5 22 e5 06 42 6a 59 d1 45 0d 79 13 22 f8 38 63 87 f0 71 12 91 14 fc e4 f3 8b fb 16 d4 7a c7 c5 15 cf 27 93 05 39 47 82 32 71 7a 59 66 34 a9 8a 4b b3 56 1b 95 c0 f1 b6 86 e9 91 9d 16 9f 28 b2 cb 45 8d e4 d0 d0 Data Ascii: D<?&62nYb^O{29f!.OS+0Hi!=\2IW%m>GkN9QCYQEoGI\|Bde\|2hOhZ-YIZ({gXmGaJB$';/&,BB'YHe{Vz]:&~r"BjYEy"8cqz'9G2qzYf4KV(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.9	49858	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:29 UTC	414	OUT	GET /assets/img/portfolio/4-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:29 GMT Content-Type: image/jpeg Content-Length: 40736 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-9f20" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 02 33 02 bc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 52 83 5d 68 09 97 21 a0 9a Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG3R]h!
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: b6 8a 20 30 c4 39 49 13 61 46 53 2d a1 b2 85 cc 5b a5 5b 4d 4a 48 3b 65 fa 91 8b cb 23 16 ee b2 e1 ef 6c f6 7a f9 bf d4 1a e5 e2 d9 da 2d 2e 57 50 1b 64 65 59 c2 4f 14 5b 46 ed bf 5c 70 ad 26 d9 55 f7 ee 76 c3 ef 70 70 ee b8 d1 ec 8c 09 d7 9c 7d 5f c3 86 33 2c c9 18 ab 9b 57 b6 71 96 ca da 59 49 73 c8 ed 4b fb 31 69 d3 28 cc 57 fb 13 5f 6a 35 53 6d 07 c9 c0 7e bd 85 b1 8b b7 2b 98 e3 62 fd fb ab 80 b9 2c f5 1a ac 89 d8 ea 09 55 f4 84 6d e9 d9 c1 dd 18 c7 1f 4f 70 26 67 e7 bd 64 af 08 09 46 53 7d 20 36 c5 43 62 a3 66 49 78 65 06 1b 43 a9 da ba f8 69 f4 bb ab 75 27 a4 cc 9f e6 bc 36 47 06 32 4a 05 ee 66 78 26 40 0c a3 a2 b2 90 17 03 c1 3f fc e9 00 6f 7e 54 56 1a 32 01 5e 3a 48 ee 65 2a f9 84 dd 40 51 e0 99 94 8d 56 09 c7 4b 5f d3 52 ec 3f d9 6d 37 53 e7 ec Data Ascii: 09IaFS-[[MJH;e#lz-.WPdeYO[F\p&Uvpp}_3,WqYIsK1i(W_j5Sm~+b,UmOp&gdFS} 6CbfIxeCiu'6G2Jfx&@?o~TV2^:He*@QVK_R?m7S
2024-11-25 14:35:29 UTC	8222	IN	Data Raw: a5 d5 0b ec 8d 6c 8e 13 a4 de 6a e7 5f 77 b7 9c fc b6 0a cd 34 42 a6 50 51 ec 8a 94 2b 62 4e 15 b4 ea 9b e2 c9 5a ad 56 94 5a 21 40 81 8c 54 30 84 ff 00 98 d4 6a 45 7d 15 c8 91 46 86 df fd 58 34 43 1f 70 b0 15 0f 95 03 d9 16 71 f8 ec 2f 33 15 1b b4 12 82 b1 a1 5f 34 6a 0a 37 08 f8 56 46 f6 99 34 ce 7a 85 ff 00 aa a4 ac 85 e0 86 24 60 b4 91 50 ef 2e 55 e6 8d 1b 58 ea 16 a8 dc 3b 70 11 9c 95 18 34 f7 7b 2e d3 b5 36 0a a7 1c 82 c9 98 e4 a4 08 17 39 54 8e 15 c8 ba 32 68 fa 9f 64 d6 12 5a ab 0a ad 14 a3 04 24 51 94 7f 28 cc 39 b3 46 d0 91 fc 2c 8f a2 ca 6c 1c f7 26 88 34 0b 0f f0 0e 61 8f a2 16 35 56 2a 1d e1 5f 44 04 e5 08 14 3c 4c 9f a8 58 17 d2 0b ca 5b e8 89 80 22 88 50 8a aa 4e a8 c6 22 88 fc d7 c9 60 3a 65 1b 7e e8 58 a3 42 28 81 a2 c1 a2 fd 16 46 6f 38 Data Ascii: lj_w4BPQ+bNZVZ!@T0jE}FX4Cpq/3_4j7VF4z$`P.UX;p4{.69T2hdZ$Q(9F,l&4a5V*_D<LX["PN"`:e~XB(Fo8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.9	49859	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:29 UTC	414	OUT	GET /assets/img/portfolio/5-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:29 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:29 GMT Content-Type: image/jpeg Content-Length: 95809 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-17641" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	16129	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 6b 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 eb d8 f3 c5 e8 92 46 ba Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGk"F
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: 56 92 89 d3 5f 62 2b 7a f0 33 5e dc 89 ab cb 18 2e c6 5e f7 86 4f 06 4d 15 f3 42 b7 d5 5c 2a 00 f8 ba 7b ab 81 33 e5 42 26 f9 88 bb 6f 24 8a 57 bd d9 34 c7 95 1e 2b 48 ce cb d5 5f 99 51 4c 74 32 c8 d6 45 a1 0d 1f 55 e3 f9 46 30 1e d1 95 15 7a 9a ab a6 1f 6a 86 69 6c f6 ae 92 5c e5 ec 5f 2d 5a 33 e4 76 06 a4 51 26 4d 6e bf bb 1c 3a 77 6d 64 76 56 80 d2 7c b0 ce 3e 5a 6e 4b 1a d5 80 41 d3 b7 55 72 1b ea 73 a3 66 c6 49 ad 1b 53 30 fe 3f 48 d4 3e b1 a6 a4 8c a9 d9 1e 99 ba d8 12 74 da 26 d6 ab 75 1c 47 32 46 97 d7 e7 36 90 7f a6 8b 9d 77 d6 96 16 76 7f b0 5b e2 e2 f0 fa 6e 27 32 57 d2 29 24 38 c5 6b d5 18 ad 0c 79 7b d3 36 d4 81 d7 34 13 c9 f8 89 c0 a1 8d 34 07 bd 13 9a f7 af 03 94 e7 3f 2e 8d 62 a1 5e 9c 7a d8 6d bd 7d 23 71 e3 24 d0 a3 43 c7 2c d5 df 0a 86 Data Ascii: V_b+z3^.^OMB\*{3B&o$W4+H_QLt2EUF0zjil\_-Z3vQ&Mn:wmdvV\|>ZnKAUrsfIS0?H>t&uG2F6wv[n'2W)$8ky{644?.b^zm}#q$C,
2024-11-25 14:35:29 UTC	16384	IN	Data Raw: e4 84 69 52 56 66 05 2a 02 61 23 6d 95 b2 0b 25 de b7 45 61 7e a8 75 5f e6 74 e5 eb 2c 2f d7 64 f4 51 bc 6e 7c df 0f 32 24 af 0d 93 d7 67 08 e0 e7 cd 53 0d 97 51 b9 99 39 34 1c 91 8b 67 50 05 10 90 db 18 bd 61 52 23 7c d2 f3 0b 8a c4 4d 55 7c c8 d8 14 73 2a 64 8f 82 23 77 47 59 11 86 4d 5a 0f 7d 13 39 af 04 0c a2 68 bb 41 1f 0c c2 0a 6b cd 47 bd 76 31 07 7c 7d 50 a6 b9 3f a2 32 47 33 92 e9 9f 55 73 c8 c4 20 2f a2 a4 5f 2c d7 a4 6d 83 ae 42 32 d3 62 8d 2e be 7b 4a 37 e7 aa ce b6 2a 86 84 5a 85 5d b2 2f 68 5f 33 9a fa 2c b9 a3 f3 5c 2e a1 ec cf 45 f4 db 72 b2 54 c2 ff 00 fa 5e 1c b6 71 1a 34 7d 51 f1 d7 d6 d8 2f f1 e9 e6 db 33 e6 66 ba 0d a5 5b be 79 68 80 e6 74 4d ec 0d 45 1c 54 c5 84 c4 92 42 75 5d 53 da e4 a6 4d 2c 4d d5 00 3c 85 48 4e 9f 2b 9f 3c 95 ce Data Ascii: iRVfa#m%Ea~u_t,/dQn\|2$gSQ94gPaR#\|MU\|sd#wGYMZ}9hAkGv1\|}P?2G3Us /_,mB2b.{J7*Z]/h_3,\.ErT^q4}Q/3f[yhtMETBu]SM,M<HN+<
2024-11-25 14:35:30 UTC	16384	IN	Data Raw: 07 fd d5 70 b1 7b 2e 55 1c 4d fb ab cc 47 24 2b 9e ca b5 c2 0a 79 2d c3 34 19 57 3d b7 08 d5 b5 e7 cd 3a a1 19 a5 35 57 1e 6f 0b 87 8f 55 8b 8a e3 ee 40 fb d6 10 9d bc 58 74 7f f6 a8 de 6d 42 3b 83 f1 15 00 92 6b b2 42 1e 8b 16 a3 91 cc 6c fc c6 43 71 39 e8 7d 44 d2 90 7c ce d0 d0 a2 7a 42 1b 21 5b cd 17 f5 3b a3 a9 8f 52 01 c2 c6 9a 7c c2 fc 53 5b f8 66 99 09 9b 9a e2 1e 22 89 24 af c9 c7 11 e2 89 0f c3 37 1f 34 0b 9c 6c 02 c5 dc 3d dc 31 52 8e f3 31 68 f2 35 4d 2f 76 81 3b ca 62 dc 60 b5 30 61 62 8a e1 a2 58 ea b4 e4 76 3c 60 32 c0 3a 92 9d 18 58 d5 11 f2 40 93 90 01 3f 73 36 e1 8b 94 fc 4c 1c 5c 2a 08 b8 4d df c4 cf 11 c8 c9 36 36 9d bc 58 77 e6 d4 c6 b3 f4 b0 40 03 69 a3 ac 98 d9 fe d0 80 f7 7a c0 08 37 0b 80 f6 b0 cf 25 46 bc f6 1c 3b ae fd d3 c3 cb Data Ascii: p{.UMG$+y-4W=:5WoU@XtmB;kBlCq9}D\|zB![;R\|S[f"$74l=1R1h5M/v;b`0abXv<`2:X@?s6L\*M66Xw@iz7%F;
2024-11-25 14:35:30 UTC	16384	IN	Data Raw: 51 a6 fc 34 24 e2 be ac dd d2 96 cb 89 53 42 78 c9 0d b3 96 ad cb 1a 25 82 f0 46 1b 74 5f 33 24 65 56 79 79 e2 12 3e d8 af 01 8a 37 98 1c 81 44 3c 1c d7 0b d4 4b 67 04 28 52 f0 ba 78 8c e1 0d a3 4d 0d 2f b8 c8 1a 76 e6 b8 22 1b 8a 01 b0 78 0c 03 b7 de 43 4f 4f 31 91 ad a5 74 5e aa 1d a8 50 01 c3 cb d3 52 fd bc 6c 7b f1 5c 27 11 4b 10 71 9d 5f be 22 b8 65 ce aa a5 c0 ba ec 58 c9 14 52 ae ec e4 d3 2e 76 0a 6d 8e 93 98 b5 d6 0d b6 4e 05 bb 45 a5 0f 78 5d 9c 1d 7b 89 29 63 ad 84 d9 ed ee 5d db aa 0d 61 85 78 6b 12 fc f0 23 52 79 6b 9c 72 47 76 6a 38 1f cd 4b 26 71 91 1f 06 b0 f7 2e 68 56 01 9c be 48 f3 4c 52 32 57 57 33 20 ae 06 bc 69 94 15 8b c3 65 c6 54 49 e1 01 d9 a9 9a 57 a9 01 3a f6 c1 bb 02 d0 bc fd 9f e6 5d 52 28 2d 67 4b e7 cc 3a a6 b5 0f 0a b1 47 f2 Data Ascii: Q4$SBx%Ft_3$eVyy>7D<Kg(RxM/v"xCOO1t^PRl{\'Kq_"eXR.vmNEx]{)c]axk#RykrGvj8K&q.hVHLR2WW3 ieTIW:]R(-gK:G
2024-11-25 14:35:30 UTC	14144	IN	Data Raw: 45 ba cf 86 81 36 7c 99 98 1a 2e 29 8d e5 da 8c cb ab 6d 56 1b 56 5c ba 2b a8 99 8b a2 e9 4e ae 98 f1 2a 5e 30 56 65 dd 93 38 c4 8d 3a 7b 13 91 25 59 30 74 3c 10 32 4c 2b df a8 97 5c 6c 7e 8b 5f 77 f7 c0 63 3d 04 1b 1e 18 54 37 2a b7 00 d1 d6 ec 8a 8b ad 03 be 07 f0 c5 55 f2 9d 20 e4 95 6b 16 8b a8 09 78 83 6c f2 97 5f a1 9f cf a7 ec 9c 33 8b fe 11 3b d1 b9 8b 7f 0f 5e e6 32 d1 ba 75 2c e1 ab 40 6a 54 ac 7e 63 f5 df d4 9f ff 00 0a 46 1f a2 35 11 02 f3 a8 ba b9 92 fa 89 16 0d fb f4 0b d2 0a ba af 3f 87 aa 10 f6 fa 30 bb fd 91 72 bc 7e 3c 00 e9 c9 28 eb cc 18 27 c7 f9 d4 98 02 b4 02 ce 26 7f d5 e4 84 8c eb c0 21 34 c6 7d 9b 87 4b ad 21 ba 6b da 0b 51 14 10 4d 52 26 c6 17 d0 c9 27 47 15 dc d5 d6 dc af 2b 14 22 b8 fa df f8 7a 82 2d 32 e8 45 26 ce a9 be 8b b9 Data Ascii: E6\|.)mVV\+N^0Ve8:{%Y0t<2L+\l~_wc=T7U kxl_3;^2u,@jT~cF5?0r~<('&!4}K!kQMR&'G+"z-2E&

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a5f5ebba-f01e-003f-29f6-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143529Z-178bfbc474bnwsh4hC1NYC2ubs00000007k000000000kd81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 20b606c1-d01e-0028-12bf-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143530Z-178bfbc474bpscmfhC1NYCfc2c0000000680000000005vyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:30 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:30 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143530Z-15b8b599d88phfhnhC1TEBr51n000000067g000000007wy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.9	49863	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:30 UTC	414	OUT	GET /assets/img/portfolio/6-full.jpg HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:31 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:30 GMT Content-Type: image/jpeg Content-Length: 36832 Last-Modified: Mon, 25 Nov 2024 08:37:48 GMT Connection: close ETag: "6744375c-8fe0" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-11-25 14:35:31 UTC	16130	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0c 08 09 0a 09 07 0c 0a 09 0a 0d 0c 0c 0e 11 1d 13 11 10 10 11 23 19 1b 15 1d 2a 25 2c 2b 29 25 28 28 2e 34 42 38 2e 31 3f 32 28 28 3a 4e 3a 3f 44 47 4a 4b 4a 2d 37 51 57 51 48 56 42 49 4a 47 ff db 00 43 01 0c 0d 0d 11 0f 11 22 13 13 22 47 30 28 30 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff c2 00 11 08 03 88 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 96 37 bb c5 44 df Data Ascii: JFIFC#*%,+)%((.4B8.1?2((:N:?DGJKJ-7QWQHVBIJGC""G0(0GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG"7D
2024-11-25 14:35:31 UTC	16384	IN	Data Raw: cb 57 3f 3d a7 d8 c3 65 ec 59 67 f8 1a 24 67 8e 30 b7 b6 96 ea c9 e1 ff 00 33 b4 f2 76 0a e7 63 2c 3f 2e 05 2e fc 87 3f b7 13 eb 3f eb 95 d4 46 36 38 ef 36 0a ba 8c 74 29 c3 5f 23 68 cb dc 0f 55 8f 53 23 68 aa 36 85 ab b4 6c dd f5 a8 f1 d8 47 d5 2c 7f b3 8f e0 76 d1 94 63 37 16 fd a8 ef 44 23 07 2b 69 bc 3e d5 5e 04 79 37 47 f4 67 1a ad fd 94 6b fd 49 63 5d 8e 85 2c 2f 2c 76 8f 0d 11 6d ba 7a 75 85 8a e5 61 1c 45 84 b0 be ca df 49 92 f6 ad 25 4a 9a 5e 5d 8c 2c 74 7f b1 1c fe f2 56 b2 fa ce 93 3b 49 72 de 6d e2 8d 8b a6 17 bc 9a d0 a5 36 a0 92 e5 bc a6 92 ec df b7 1c 3f 35 99 8b 88 d2 3f 21 5a 7d b8 9f 5a 97 85 d9 0a 32 38 c4 6f 7d c8 a1 88 6a 1a 99 5d 91 b4 6c fb 99 6a e7 53 08 dc 8d 9b f2 bb 33 2b be b1 1f b0 57 42 d1 ff 00 b3 8f e0 5b d8 c3 b5 b0 94 fb Data Ascii: W?=eYg$g03vc,?..??F686t)_#hUS#h6lG,vc7D#+i>^y7GgkIc],/,vmzuaEI%J^],tV;Irm6?5?!Z}Z28o}j]ljS3+WB[
2024-11-25 14:35:31 UTC	4318	IN	Data Raw: a8 fe 11 ee ca bd 4f 11 f7 67 b6 1e 87 bb 08 c3 87 6f df ee cb a9 f0 de 6d f5 38 5b b6 59 6b b2 b9 2b df 87 71 b2 7b f7 72 43 66 6f ab ed 6f 8c d9 c3 73 64 39 e4 bf 17 30 7c dc 6c b9 c4 3c f8 e2 cb de 58 c6 c0 f2 6b 63 0f cc eb af 0f 16 dd fb 9f 0d b9 8d b9 6e ad f8 f1 da 26 a3 d3 de 5f f5 74 ee e6 98 f5 d7 a9 07 2a f1 c1 a3 f5 3f 23 24 3d 4f c2 44 fc 76 1c e4 88 f6 3e fe 2c 1b b8 73 3e df 45 fd de d6 cc 03 e3 e2 f6 60 ec 1c 2c 43 8c 07 47 8d cb 7f 9f 09 1d c7 04 5d 81 83 8e 67 e2 c8 cb 9a 4f 03 33 8b 85 e6 73 d4 c3 e2 27 ea cd f0 67 b9 cb 2c cb 3c 09 9e 36 59 65 c6 6b dd a5 c7 b8 71 b0 9e 1b f5 73 3f 68 5d d2 df c6 c6 7b 80 9b 2c 8e e7 8b 8f 50 9e 38 9d b7 58 f3 70 75 1c fe e0 64 a9 f0 e8 3d af c1 74 bf f9 c2 55 eb 38 e9 96 0b 0f 72 1e b8 91 f7 cc cc 4c Data Ascii: Ogom8[Yk+q{rCfoosd90\|l<Xkcn&_t*?#$=ODv>,s>E`,CG]gO3s'g,<6Yekqs?h]{,P8Xpud=tU8rL

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 07e1e155-901e-0029-69bf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143530Z-178bfbc474bxkclvhC1NYC69g400000007kg0000000082az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:31 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fb43cdc2-901e-0064-4ebf-3ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143531Z-178bfbc474bh5zbqhC1NYCkdug00000007fg00000000gh0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:31 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.9	49866	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:31 UTC	628	OUT	GET /favicon.ico HTTP/1.1 Host: web.authe.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.authe.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:31 UTC	289	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:31 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close X-Accel-Version: 0.01 Last-Modified: Mon, 25 Nov 2024 08:38:34 GMT ETag: "0-627b8a876c15d" Accept-Ranges: bytes X-Powered-By: PleskLin

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:31 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:32 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6b04d5e8-e01e-000c-65ad-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143532Z-174c587ffdf8lw6dhC1TEBkgs8000000065g0000000000qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:32 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:32 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:32 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143532Z-178bfbc474bbcwv4hC1NYCypys00000007fg000000008tkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:32 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:32 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:32 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 18f8ca6a-701e-005c-1e55-3dbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143532Z-174c587ffdfldtt2hC1TEBwv9c00000005ug00000000pwrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:32 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:32 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:33 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: a1633192-d01e-007a-5c27-3df38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143533Z-174c587ffdfcb7qhhC1TEB3x70000000062000000000p4h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:33 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.9	49872	24.199.99.22	443	1696	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:32 UTC	394	OUT	GET /favicon.ico HTTP/1.1 Host: web.authe.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1sfa2g60d9tvap1jd5qtp06hjd
2024-11-25 14:35:33 UTC	289	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:35:33 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close X-Accel-Version: 0.01 Last-Modified: Mon, 25 Nov 2024 08:38:34 GMT ETag: "0-627b8a876c15d" Accept-Ranges: bytes X-Powered-By: PleskLin

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:33 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:33 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 14c1fdaf-501e-0029-4fb8-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143533Z-178bfbc474bbcwv4hC1NYCypys00000007cg00000000ggha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:33 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:34 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:34 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:34 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 149a8621-501e-0029-28a6-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143534Z-174c587ffdfn4nhwhC1TEB2nbc0000000670000000004esn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:34 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:34 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:34 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 259521f4-f01e-003f-28c0-3ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143534Z-178bfbc474b9fdhphC1NYCac0n00000007hg0000000095pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:35 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:34 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:35 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8f8af0b5-d01e-00a1-23c7-3e35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143535Z-178bfbc474bfw4gbhC1NYCunf400000007mg00000000brz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:35 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:35 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:35 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143535Z-178bfbc474bw8bwphC1NYC38b400000007c000000000g8vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:35 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:35:35 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:35:35 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 31c6069e-e01e-001f-7f36-3d1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143535Z-15b8b599d889gj5whC1TEBfyk000000005u000000000nmsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:35:35 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 7060, Parent PID: 6124

General

Target ID:	1
Start time:	09:34:53
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1696, Parent PID: 7060

General

Target ID:	3
Start time:	09:34:58
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2260,i,7126620117422468491,13946143623704063901,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4224, Parent PID: 6124

General

Target ID:	4
Start time:	09:35:01
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://google.pt/amp/web.authe.net"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://google.pt/amp/web.authe.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://google.pt/amp/web.authe.net