Edit tour

Windows Analysis Report
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/

Overview

General Information

Sample URL:	https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/
Analysis ID:	1431463
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: }}catch(ag){}function af(){try{aj.apply(window,[].slice.call(arguments,0));ah()}catch(ak){ah();throw ak}}window[ai]=af}function ac(){return"object"===typeof YT&&YT&&YT.Player}function Z(){if(!ac()){return}var af=ae.getElementsByTagName("iframe");for(var ag=0;ag<af.length;ag++){if(p.isMediaIgnored(af[ag])){continue}var ah=p.getAttribute(af[ag],"src");if(ah&&(ah.indexOf("youtube.com")>0||ah.indexOf("youtube-nocookie.com")>0)){if(af[ag].setAttribute){af[ag].setAttribute("enablejsapi","true")}new w(af[ag],g.VIDEO)}}}if(Y&&Y.length){if(ac()){Z()}else{if(G.onYouTubeIframeAPIReady){X("onYouTubeIframeAPIReady",Z);ab(false)}else{if(G.onYouTubePlayerAPIReady){X("onYouTubePlayerAPIReady",Z);ab(false)}else{G.onYouTubeIframeAPIReady=Z;ab(true)}}}}function ab(ah){if(!ah&&(typeof G.YT==="object"||t.querySelectorAll('script[src="https://www.youtube.com/iframe_api"]').length>0)){return}var ag=t.createElement("script");ag.src="https://www.youtube.com/iframe_api";var af=t.getElementsByTagName("script");if(af&&af.length){var ai=af[0]; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: web.leitz-cloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.vboxx.eu

Source: unknown

HTTP traffic detected: POST /matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1Host: analytics.vboxx.euConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://web.leitz-cloud.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_97.2.dr	String found in binary or memory: http://jqueryui.com)
Source: chromecache_90.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_90.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_77.2.dr	String found in binary or memory: https://gravatar.com/avatar/
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_90.2.dr	String found in binary or memory: https://w.soundcloud.com/player/api.js
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/license
Source: chromecache_90.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/57@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://www.innocraft.com/license	0%	URL Reputation	safe
https://www.innocraft.com/	0%	URL Reputation	safe
https://web.leitz-cloud.com/static/themes/default/images/svg/sidebar.js	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.js	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/api/2/person	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-light.woff2	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/sites/1/branding/logo	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=724701&h=8&m=23&s=58&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=9zYqZ8&fa_pv=1&fa_fp[0][fa_vid]=McZrQa&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=525&pf_srv=463&pf_tfr=2&pf_dm1=544&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=204970&h=8&m=23&s=34&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=TCHRDo&fa_pv=1&fa_fp[0][fa_vid]=e65TJF&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=249&pf_tfr=36&pf_dm1=541&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
http://jqueryui.com)	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/sites/1/branding/icon/	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Kontowiederherstellung&idsite=33&rec=1&r=310271&h=8&m=23&s=46&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=LGr2Y2&fa_pv=1&fa_fp[0][fa_vid]=fTrLsE&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=539&pf_srv=453&pf_tfr=1&pf_dm1=745&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/api/2/person	0%	Virustotal		Browse
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-regular.woff2	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/gen/main.52b56941.min.js	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=562126&h=8&m=23&s=30&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=21iyUu&fa_pv=1&fa_fp[0][fa_vid]=yu2AXf&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=529&pf_srv=482&pf_tfr=3&pf_dm1=477&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/custom/styles.css?v=3.6.0.117	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=771846&h=8&m=23&s=14&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=MzNZPV&fa_pv=1&fa_fp[0][fa_vid]=0bnpR5&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=522&pf_srv=497&pf_tfr=2&pf_dm1=251&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/themes/default/images/svg/lottie.js	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/gen/main_header.cf07ee37.min.js	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/themes/default/images/svg/custom_script.js	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	0%	Avira URL Cloud	safe
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=032852&h=8&m=23&s=18&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=FK8JTu&fa_pv=1&fa_fp[0][fa_vid]=bf6zEM&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=294&pf_tfr=2&pf_dm1=301&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/auth/login/?clear_cookie=1	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/js/translations/de.js?v=3.6.0.117	0%	Avira URL Cloud	safe
https://web.leitz-cloud.com/static/themes/default/images/svg/right-arrow.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.105.103	true	false	high
web.leitz-cloud.com	2.58.164.9	true	false	unknown
analytics.vboxx.eu	2.58.165.70	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	false		unknown
https://web.leitz-cloud.com/api/2/person	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/sidebar.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/	false		unknown
https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.js	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-light.woff2	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/sites/1/branding/logo	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=724701&h=8&m=23&s=58&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=9zYqZ8&fa_pv=1&fa_fp[0][fa_vid]=McZrQa&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=525&pf_srv=463&pf_tfr=2&pf_dm1=544&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=204970&h=8&m=23&s=34&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=TCHRDo&fa_pv=1&fa_fp[0][fa_vid]=e65TJF&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=249&pf_tfr=36&pf_dm1=541&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/sites/1/branding/icon/	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Kontowiederherstellung&idsite=33&rec=1&r=310271&h=8&m=23&s=46&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=LGr2Y2&fa_pv=1&fa_fp[0][fa_vid]=fTrLsE&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=539&pf_srv=453&pf_tfr=1&pf_dm1=745&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-regular.woff2	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/gen/main.52b56941.min.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/recovery/	false		unknown
https://web.leitz-cloud.com/static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/forgot/	false		unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=562126&h=8&m=23&s=30&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=21iyUu&fa_pv=1&fa_fp[0][fa_vid]=yu2AXf&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=529&pf_srv=482&pf_tfr=3&pf_dm1=477&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/custom/styles.css?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=771846&h=8&m=23&s=14&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=MzNZPV&fa_pv=1&fa_fp[0][fa_vid]=0bnpR5&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=522&pf_srv=497&pf_tfr=2&pf_dm1=251&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/	false		unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/lottie.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/custom_script.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/gen/main_header.cf07ee37.min.js	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=032852&h=8&m=23&s=18&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=FK8JTu&fa_pv=1&fa_fp[0][fa_vid]=bf6zEM&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=294&pf_tfr=2&pf_dm1=301&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/?clear_cookie=1	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/js/translations/de.js?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/right-arrow.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://gravatar.com/avatar/	chromecache_77.2.dr	false		high
https://piwik.org/free-software/bsd/	chromecache_90.2.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_71.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_90.2.dr	false		high
http://jqueryui.com)	chromecache_97.2.dr	false	Avira URL Cloud: safe	low
https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers	chromecache_90.2.dr	false		high
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_90.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_90.2.dr	false		high
https://w.soundcloud.com/player/api.js	chromecache_90.2.dr	false		high
https://developer.matomo.org/api-reference/tracking-javascript	chromecache_90.2.dr	false		high
https://www.innocraft.com/license	chromecache_90.2.dr	false	URL Reputation: safe	unknown
https://piwik.org	chromecache_90.2.dr	false		high
https://www.innocraft.com/	chromecache_90.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.58.164.9	web.leitz-cloud.com	Netherlands	207843	VBOXXNL	false
2.58.165.70	analytics.vboxx.eu	Netherlands	207843	VBOXXNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.105.103	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431463
Start date and time:	2024-04-25 08:21:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/57@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://web.leitz-cloud.com/auth/forgot/ Browse: https://web.leitz-cloud.com/auth/login/?clear_cookie=1 Browse: https://web.leitz-cloud.com/auth/forgot/ Browse: https://web.leitz-cloud.com/auth/login/?clear_cookie=1 Browse: https://web.leitz-cloud.com/auth/login/recovery/ Browse: https://web.leitz-cloud.com/auth/forgot/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.124.94, 172.253.124.113, 172.253.124.100, 172.253.124.139, 172.253.124.102, 172.253.124.138, 172.253.124.101, 64.233.177.84, 34.104.35.123, 74.125.136.95, 142.251.15.95, 172.217.215.95, 64.233.177.95, 108.177.122.95, 64.233.176.95, 142.250.9.95, 173.194.219.95, 172.253.124.95, 64.233.185.95, 142.250.105.95, 74.125.138.95, 52.165.165.26, 72.21.81.240, 192.229.211.108, 20.166.126.56, 20.3.187.198, 142.250.9.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9090)
Category:	downloaded
Size (bytes):	1074952
Entropy (8bit):	5.566497019092541
Encrypted:	false
SSDEEP:	24576:TqFTBpgnuhPW8ChDTIm+C8cCAhVuhmwGw/3TSZWkcSO2dpmv2yEFWLkWkVDBT5Du:TqFTBpgnuA8+Dkm+C8tLv2yEPlFrWjXX
MD5:	CF07EE379B101385F53207F7D724030C
SHA1:	37E28E09D918C7BC9545A67B736B2B6AC61DC5EF
SHA-256:	2B1521FD18C73F1CEC43135456A818C475303B4E55B70D7CE52C39F7EDA66C38
SHA-512:	95E8034DA02746E08EF30108849CCA0EEB0BFBA90F3E52533B3560A22CA1B71A12AD600DC18EDCD0B48A7FE3FAD133EDAF4E19C0D11349818FE6151C78507F36
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/gen/main_header.cf07ee37.min.js
Preview:	var babel=new function(){var defaultPluralExpr=function(n){return n==1?0:1;};var formatRegex=/%?%(?:$([^$]+)\))?([disr])/g;var Translations=this.Translations=function(locale,domain){this.messages={};this.locale=locale\|\|'unknown';this.domain=domain\|\|'messages';this.pluralexpr=defaultPluralExpr;};Translations.load=function(catalog){var rv=new Translations();rv.load(catalog);return rv;};Translations.prototype={gettext:function(string){var translated=this.messages[string];if(typeof translated=='undefined').return string;return(typeof translated=='string')?translated:translated[0];},ngettext:function(singular,plural,n){var translated=this.messages[singular];if(typeof translated=='undefined').return(n==1)?singular:plural;return translated[this.pluralexpr(n)];},install:function(){var self=this;window._=window.gettext=function(string){return self.gettext(string);};window.ngettext=function(singular,plural,n){return self.ngettext(singular,plural,n);};return this;},load:function(catalog){if(cat

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.7156720603068045
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0JxmfxqtW4fn:wmEM3IQMt2/MbBJxMxM9fn
MD5:	72ED9E48E2F15C751644DA0099B4378C
SHA1:	10CFB1BD633C14C3E6B270D3A18A8D1EFCF8E6C7
SHA-256:	C66A866A777BFA777CD6939CF0DF82B25B337E002A723F2710788A875A1788A4
SHA-512:	FFFC7AD7D4AC6F439026A0932BB0BDC33D21E9AB4211DBD1CBA5172491DCDC391AA99B83077510BC996F8F7EBB00BD4B8AD6275F151D51B6BE4B3E4388B0E981
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"WgIqI3"});

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.750713645521419
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0JxmfxpHoen:wmEM3IQMt2/MbBJxMxpIe
MD5:	0C375088F94D295B2E3BB15043C37A83
SHA1:	287A64E8B09584C081576830DDB6861F948061A2
SHA-256:	D0D124E9CBC726C2033633A3BBF475B61CDADC04BF84BF859F95AF2F7A5BD2F9
SHA-512:	1287F688F100DC9F14730DE30205B2438ABA54F64807151CB90FA32823EED34CC9FB3EBFAB42ADC58D98971CB94954BD12AC27DAEE276FA7AA0BA3AC0CB2409F
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"ToyWF0"});

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (685)
Category:	downloaded
Size (bytes):	775
Entropy (8bit):	5.158011135449937
Encrypted:	false
SSDEEP:	24:XPnAOsETlJqdV8JTlDI3LJ8fEmSsI2eaIqInx:/VcX8Vx2ifPntFqx
MD5:	366D0AACB55F4929CC50BB977ABEC674
SHA1:	1D4B710A1CCCCC7522874A171F776B965C41F9CE
SHA-256:	9AD8C2229988615C3908B7FB2298C15A9E95B45CDD2A1FD8B5916DA487884AD7
SHA-512:	36222DE6A0C48B4CA73D2325F8F65F47CDF9A2A7D88934A11CFFDDB7A89921C04B036993F95B0ECE1DAF8C45435E1198EBC223BEBAF74540BD14D4F8F53545C5
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117
Preview:	/! Select2 4.0.3 \| https://github.com/select2/select2/blob/master/LICENSE.md /..(function(){if(jQuery&&jQuery.fn&&jQuery.fn.select2&&jQuery.fn.select2.amd)var e=jQuery.fn.select2.amd;return e.define("select2/i18n/de",[],function(){return{inputTooLong:function(e){var t=e.input.length-e.maximum;return"Bitte "+t+" Zeichen weniger eingeben"},inputTooShort:function(e){var t=e.minimum-e.input.length;return"Bitte "+t+" Zeichen mehr eingeben"},loadingMore:function(){return"Lade mehr Ergebnisse."},maximumSelected:function(e){var t="Sie k.nnen nur "+e.maximum+" Eintr";return e.maximum===1?t+="ag":t+=".ge",t+=" ausw.hlen",t},noResults:function(){return"Keine .bereinstimmungen gefunden"},searching:function(){return"Suche."}}}),{define:e.define,require:e.require}})();

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.705561099608227
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0JxmfxS6Jf:wmEM3IQMt2/MbBJxMxS6Jf
MD5:	74E13A9D698A1D3B0A45F26AEA35D691
SHA1:	0E00103AC0C6F8C616FDD14768772B2101D1A598
SHA-256:	91F716CE262DFAE1302F849F79D87B729863EDAF049039D7B5B51D375056EFB0
SHA-512:	30E08D925884A707EB71BFAF77B1C82ABEB41584C6F51322073E47454CED667803E8F247B9A1DD219A5B5E788FA39805257D3DE32686FCA8F1ABC32B7A56BAD1
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"0eVsvC"});

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.5144608760283615
Encrypted:	false
SSDEEP:	3:0TIjiH3WZNTsfMS1CYYn:0TIjo2sxC
MD5:	8B068D499E6F22B2F38E0D392E2241CB
SHA1:	0D5F386322F3AB5F9A23B3EA4FEE82DB7342E7CA
SHA-256:	204B5CE9D23D945629BE6876AB815F0A7A63ECAA052B43F0D42E2542C5FBC37B
SHA-512:	D137E08A97FC787D245B6D77E58B738A2E64318F1520A097B88FD29F0BC724ABDA29579E9F69A2C9590E2D0B40C911E9320C01049C062C870060A2BB673DAD8C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmzlEC23fbCyBIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	CiAKEQ3njUAOGgQICRgBGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.68846708251421
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0JxmfxHJI:wmEM3IQMt2/MbBJxMxHJI
MD5:	FEA536AC5F56E676387CBE6AEB070B4D
SHA1:	85A4A6B3742DD2E1E3EA7FFB4000983D2D964979
SHA-256:	DEA56855A821E4C3108D57A8CECE6A56C0900C6BF772A49C8FE515D99C69FEAF
SHA-512:	58AA41F22AC1DEFBE89C5E578970ED99CB72B86EFF6F2E7851C41435A5EF879E963705678904FD4767F2B96BD37DBDD45E0B008E30FB1FAAC65211BCA549EC69
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"z99seb"});

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	38187
Entropy (8bit):	4.956544774357478
Encrypted:	false
SSDEEP:	192:nL+FlgFfDeStlSpyHoPuuoBeCSfEy8xV45daV5Lu3skyMwlbty9pWnL/IA/3lMh3:niFl9AJuyOpg/5MhwVFogiaAuiZ/
MD5:	CD2F2077C6E0036D84383753B4C72D45
SHA1:	2972B0893A34E336AEDB99DC772D214D34E18FCC
SHA-256:	74870D1BAB50E52F333B08DEE3170BC191C3336CC3D4DF7733E784E1588D9A63
SHA-512:	A5D89E4984EFB55EB238625BECC790EFB802065BCA33C4FFA9E7EFC49751A2B6B4718FC92AB0D1CB396358BB8949E4D668E94D7F55581F844E98CEFFE0AB6FDD
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/custom/styles.css?v=3.6.0.117
Preview:	/LeitzCloud/./Global variables /.:root {. --primary-color: #2b4d8a;. --secondary-color: #162745;. --tertiary-color: #295eb4;.. --primary-color-hover: #162745;. --secondary-color-hover: #2b4d8a;. --tertiary-color-hover: #295eb4;.. --primary-color-border: var(--primary-color);. --box-shadow: 0 0 0 0.2rem rgba(0, 123, 255, 0.5);..}...app-anchor .searchbar {. border-radius: 5px;. background: #f5f6f8;.}../Fix IE/.[class*="icon"] {. background-repeat: no-repeat;.}.span.main-menu-link__icon.icon-folder-shared-by-me::before{background-repeat:no-repeat;}..icon-home::before{background-repeat:no-repeat;}.span.icon-user.text-primary.mr-1.icon-user::before{background-repeat:no-repeat;}.span.icon-settings.mr-1::before{background-repeat:no-repeat;}..icon-download::before{background-repeat:no-repeat;}..icon-close-circle::before{background-repeat:no-repeat;}..icon-download::before{background-repeat:no-repeat;}..icon-windows::before{background-repeat:no-repeat;}..ico

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 89668, version 3.393
Category:	downloaded
Size (bytes):	89668
Entropy (8bit):	7.996656505732768
Encrypted:	true
SSDEEP:	1536:g0IQ36IaPQwZjF+y9fln1nEAem6gVfTigZHlaIF4AfK1dhJIH5eW7qe4+ZSxL+cO:VIpQwH+yRJ1YaVf2gZFaI+z1dXE5eW73
MD5:	B13C669D61EC35A7682A892456C8D4E9
SHA1:	94FDD2B3352105AA6ED3869F05907DCD6B29B16B
SHA-256:	2FBF1609996EF719058D36B3C290B5A63D4327004CFE517E6BADA30B51B742C4
SHA-512:	B9B5295FCFE23CCE444586A99F2D6131413DF2F3B9F3D06E0C2F86C825052849E016487406CB80CA3B578FFBEED4740B7431E6C24681D1C5D1B38AF62EFC06A2
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2
Preview:	wOF2......^D......q$..]..........................F..p...2.....`.."...l..u..&..6.$..H. ..:....[....Jl....%.&.....X...yu...'X....'K..:...k..:.N&..!}....7.7L.<.w....._B...............]${......#7..... .xT..j...B.:.%H.f.3.(CBV.t.t...'~.a...36....^RW$3..3..[..VU.TVYu"K580.v.MHZ5.}}........8.Ag6.&@.lke7V'<.E.K..T...Ke......$.4....T.....d/.$..#...wR.}.S..xB........R..v..Q.....e..M.O..r....+._....u.B.hf-$M/.3..hG#/..>M.K....I].B95....>8/.l.......5e...${R.....$r.)G.%X.Q.S.^.r..{.K-V=.>.E.HY.[.e..~~.-.RH...s...9n....q........./.eW...r{b....l1.7........i..A.....}-`..V..%p..t.,..tF...&)D.ZE...R..B.z.U$.3...Q7.7.r.....-.....vQ..(..X..k6.O..$....V.........$&&t./.._q..lg;...\|.?.W...Uo..U2...........Y%G...;....;\|n..%^.B^.z.o...dl...9......8L....2..}&/...Y..k..F.........A.....U\.G.;UK..A..t.dY..{......-..".D.K.mt.D....G>..._....:C...3p. #`t..rw..R..~ekTX....=Ys..sYS....Y....i..=..4?W!v.G_.C.z?_.U.......QN..."ej..S\|.I.]..F..S..T..f....I.Oj......yV...V....z.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7786)
Category:	downloaded
Size (bytes):	93924
Entropy (8bit):	5.084514333399791
Encrypted:	false
SSDEEP:	1536:hZBmY+7avlMR0tedqAyL4vTe59cxaZYHtaEsbl3YYG8DzV68EUIoyAtppxvFgBJT:hZBmY+7AlMR0tedqAtvTe59cxaZYNaEv
MD5:	5A3436A950759A27F755BD5E47CF9872
SHA1:	A7C5A9C878094FB39D5B4CC764FAFD17AE5F9215
SHA-256:	742CDB2F11D45519FC7EE999C3C4A907EEAE8309AA4B285B1A1CFFA17D905CA0
SHA-512:	1C808CC46203AE44189D6934D42130E1E505FFB28EBA413AA7521A0E6038FDCBA078C3B217F78F95FB5D0664CFD54384AA33587919E89B81B3A6EC67CDAE3D71
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/themes/default/images/svg/sidebar.js
Preview:	$(document).ready(function(){window.location.hostname==atob("ZGljb3ZhdWx0LmRpY28uYWZyaWNh")&&window.location.pathname.includes("files/download/agent/")&&($(".col-md-6.col-xl-4:nth-child(9)").remove(),$(".col-md-6.col-xl-4:nth-child(8)").remove(),$(".col-md-6.col-xl-4:nth-child(6)").remove(),$(".col-md-6.col-xl-4:nth-child(5)").remove()),$('a[href="/auth/logout/"]').click(e=>{localStorage.getItem("whoAmI")&&localStorage.removeItem("whoAmI")}),window.whoAmI(e=>{let t=getColorFromName($(".header-links .text-dark").text());if(e.gravatar?$(".header-links .icon-user").parent().prepend('<img style="border-radius: 50%; width: 36px; border: 1px solid rgba(0,0,0,0.1);" src="'+e.gravatar+'">'):$(".header-links .icon-user").parent().prepend('<span style="background-color: '+t.bg+"; border-radius: 50%; color: "+t.text+'; padding: 6px; display: inline-block; height: 100%;">'+getInitials(e.first_name,e.last_name)+"</span>"),$(".header-links .icon-user").remove(),window.location.pathname.includes("sha

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6442
Entropy (8bit):	7.947540884642669
Encrypted:	false
SSDEEP:	192:93nf2bGnkR4ctl5vL4fgLZORjHoKNBPAY:93f2Kkyct7URZ3
MD5:	36CC41BA70B57205F5DA20AC1B3522F2
SHA1:	B0BB9E394D54557B05471C3FE045930639A6E7CF
SHA-256:	F945F51AD9DDAD4B5C43C9E9501BFC74F3F319D0A2A67198859EF60A3FE130DA
SHA-512:	9C18A65769283F31780833AA9FF3D2B3F732F9D6DF9CFDD203D7191AB9F51DA2031A73AF1DD2C209785C0E52211F55C3BBECECC4AE71147BFFB82D94B4854573
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/sites/1/branding/logo
Preview:	.PNG........IHDR.......2......Q......IDATx..y..U....'.'C..B..H ...(.. OD.....QA..A\|".@....\|...y..F...D\|L4...!A#{ B.a..6Kw.}..{R.k.g..d!....OOW....sO.@.UTQE.UTQE.........`..2@....h..1.8vv.....w7..Q1M.,../-.]C.Vd...<.*...H....,..FL?~..w....t_..~H.,.aI......P.........X......x....}.L(.....{1...Z.+!@x.W..x..JF\)....i=.+..{.K..=..=....~u.Y.'U...'tj.....M.f.........b..>D(....G...IP....z......hv..U.-..``-B...]:...2+....V...0..y-u.5...gLn.......G.kh......?}x...g..W/.'....hk.......[..u.t...S.<d..8...8...c..n.....r..s...n.zz.&% .BX...V.6uvs.....<......Q>..@!gm..j...m...y.[.=.p...otn...-mm/z...zY.......;..F.E...{....'qI\|XJ...J..D1.....P.....N@...D. .1e.i.."..A...q!..`.3...1q.;G....1....6=.y..O.Q..x.._^..d..~..0.....a.g.....E\..p...>...AC......ww.....H...6WA.w.~.L.."cr.....#0.L.nM.0..F=!...!....Q..6<w...U..:....g...KvW..9`.0.a....!n.... B.AWF.7D@..Zx.C.`...K.~.....l\p.H.`.T6.B"(..q...n......]...\|n...K......>..8.o.5...FW........(NO..$..........w.WV.F...[9s.r...e

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 89676, version 3.393
Category:	downloaded
Size (bytes):	89676
Entropy (8bit):	7.997627435180478
Encrypted:	true
SSDEEP:	1536:tCsvS7t2VrJaO6qgG9gUFz85Ygq2y09gOKITV0VRdTnsDDkd2ugHews/aPK4TSOq:VSB0laO6zG9TFz842rBFTyVvsvkdy+wm
MD5:	8BB5B88B2B1B019E3B97B513B2226F3E
SHA1:	B8609AECCE88B584CA1CABD6495823065E738182
SHA-256:	D3F2A7C124A4A987CBF255A3579B9866789CC3E561D3AB7CB2D09BEE40B137E0
SHA-512:	A5A0CEE29629AE283B9089599AAA48FEA609F557D567A22A185DA816F3D910C5FE7B4074BBDBC88B7452378272D9ED06BFCBB2320553DD15306E1A41568C3389
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-regular.woff2
Preview:	wOF2......^L......r...]..........................F..p...:.....`.."...4..0..&..6.$..H. ..^....[t...r...d......iT.3sQu.m+..@..T.5D./..U.6.f.sl.CG..b...g.B.!./.M".................$....~,.yx...8q..T......... %}.2.q.%T....S.Grp..!PI.)...$..B.MFh.......(...x6....s...&..3_Q..8:T..9d..)......Xa..B. ....].j$/..Qi;..8...n..}..d....Tpq)..uq...."=b...D....p..5T..V&oW...z...9pk.z....!......0.P.3....T..&...h.Bx........_.....O............8Es....5(.....F....]).._..d&.MW0&.EZ........l..)..9p....Y........$R...;}.....2p58..,..kq.A....\.....v..y....Q.}...}.=..1.B2..S.'.&zS.E...$.G.{H...7p.A.7..C..$..HN........]..v.o.].K6.&.I..uf..P^.-........;{f.}~d...A....`_Y.B.Y).>/..E\..O...n......N...;8.8.S..>...w..4tk4e.....Jz<......(.....\|.b..87X%.../r...Q....$.KGnGtE3..@...5............G..$.Dj~....0..#_x.7`.Z..$...}o..f...2..'...q...L..A......e...hA...Ud{5u..JD... ..]8.P..A.[+.Mb2..9....Vc.......}..5..g...}....;6d..T*l...d.V...'/...=.E.)X..b`...G.5....p....H.......{.H1n}.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.732766077400822
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0Jxmfxvw1w:wmEM3IQMt2/MbBJxMxvw1w
MD5:	681B23808A81E27E9A7883E21BBE48A4
SHA1:	46F2A7F7AF58E1F002FB8831D531B57CC6B1C83E
SHA-256:	8A8A880C7F752F8CE32E17F918AA81D199D6FAFFE5C61FDC3D204AA15DE801E5
SHA-512:	A9EE996D0826963CA1BA2E19CF13DCD751D5631F74D01B2313B58F752AEA0795F571914F2F9C1109C6AF1F40ADFE49F80313602941034944712F83372E2CD227
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"RUPzzJ"});

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6442
Entropy (8bit):	7.947540884642669
Encrypted:	false
SSDEEP:	192:93nf2bGnkR4ctl5vL4fgLZORjHoKNBPAY:93f2Kkyct7URZ3
MD5:	36CC41BA70B57205F5DA20AC1B3522F2
SHA1:	B0BB9E394D54557B05471C3FE045930639A6E7CF
SHA-256:	F945F51AD9DDAD4B5C43C9E9501BFC74F3F319D0A2A67198859EF60A3FE130DA
SHA-512:	9C18A65769283F31780833AA9FF3D2B3F732F9D6DF9CFDD203D7191AB9F51DA2031A73AF1DD2C209785C0E52211F55C3BBECECC4AE71147BFFB82D94B4854573
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2......Q......IDATx..y..U....'.'C..B..H ...(.. OD.....QA..A\|".@....\|...y..F...D\|L4...!A#{ B.a..6Kw.}..{R.k.g..d!....OOW....sO.@.UTQE.UTQE.........`..2@....h..1.8vv.....w7..Q1M.,../-.]C.Vd...<.*...H....,..FL?~..w....t_..~H.,.aI......P.........X......x....}.L(.....{1...Z.+!@x.W..x..JF\)....i=.+..{.K..=..=....~u.Y.'U...'tj.....M.f.........b..>D(....G...IP....z......hv..U.-..``-B...]:...2+....V...0..y-u.5...gLn.......G.kh......?}x...g..W/.'....hk.......[..u.t...S.<d..8...8...c..n.....r..s...n.zz.&% .BX...V.6uvs.....<......Q>..@!gm..j...m...y.[.=.p...otn...-mm/z...zY.......;..F.E...{....'qI\|XJ...J..D1.....P.....N@...D. .1e.i.."..A...q!..`.3...1q.;G....1....6=.y..O.Q..x.._^..d..~..0.....a.g.....E\..p...>...AC......ww.....H...6WA.w.~.L.."cr.....#0.L.nM.0..F=!...!....Q..6<w...U..:....g...KvW..9`.0.a....!n.... B.AWF.7D@..Zx.C.`...K.~.....l\p.H.`.T6.B"(..q...n......]...\|n...K......>..8.o.5...FW........(NO..$..........w.WV.F...[9s.r...e

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1332
Entropy (8bit):	7.653387477182735
Encrypted:	false
SSDEEP:	24:Z3wzYnIZnqxTfFL+uQXmA+qpgAL3OMA0zaztmOIR37zyzZUEMwcN:xkYqC7R+ZXT7DA0zaztm7hGOEtcN
MD5:	519259F1F0DEE25924C42DDE80FFA467
SHA1:	0641664A88126446E08B8A4CCDE7B9BFDC4B0C2D
SHA-256:	6E942E547AF3361880610BF7F7C06FAC24779485C40C7520F70A382799B468B7
SHA-512:	88EBDA9B3E5D387113ADE7D6966B776F74204F9273D1629E9CCB9358CAA8ED29A29BE49D5D3B57CFA71646C4E334E0CC53C7715F712859B30C10689D1A12BAA6
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/themes/default/images/svg/right-arrow.png
Preview:	.PNG........IHDR...d...d.......].....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD....#2....tIME.....$.JK.....<IDATx....k.e........x....l6...R(..C...,...? .....P.......^.C.M.....%^.Q[3.n)........dg<l.U.3..d....<...3....pqqqqqqqq..a....2......n...4.$.<......+....,......E..'x..=/.is._._d.).aT.....Q....CTg>..7.<.9\|..fE..a.i^....."..2..S9 )r....P.....4[.GL.1.7)V..GU.,B.Z.x.'R.j.R..OH....x...a...).@I.."...$.X...E%.....:>..d$u......[..5G-~.9\|.5<fmP. .).r..<E.2+.\A..#.....HR:~.........^rU..1;.M.\.i.~C.....Nbp9....q.P..[....<.[N1...rH.bb.o.r..n.....o!. .B..."......W.....=..b.2.+..x0....?s.........j.....d.W...(. ..+2.X..Rr...`IW,p..R.=\....X...`]d).l.+.-=.:d@Qj.o.....e.J.....~S..$.9......m..g..6..r..RW..p.!........ .........s.........On... (.2".B..A....D..g.$S......}.G8).h..7d......"...)9..K+.@..X........C.d..>.P.....$k.%H..+}D.!... M....!5.V.!...z' ..H..2C...B....q..'...&...2....MF...3.~...i2.mEF.y.?.D.....p..\|i.a.E...S,..!.6$....}.y.(..e8.Y..d

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.182005814760213
Encrypted:	false
SSDEEP:	3:GMyoSdoYn:jFSdoY
MD5:	0325B3C39FAB186C7457A287EEEAE8C1
SHA1:	312BB431FC6ADE586E3CA87D3DAA359BDF721837
SHA-256:	0B76E8C0F484B3BE138E316D746A9DFD82D59244717B6F9599B76422486735EC
SHA-512:	75655A596C7E57B372E38478C25B804715F4F347E0FE23B38338173F7FD4EAC55BC215EE86DEF14BA80AA22EF4778019FC588EEE57C593845CC9BF0047FCD656
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnnlOntkjk9FBIFDeeNQA4SBQ0RK9kS?alt=proto
Preview:	ChIKBw3njUAOGgAKBw0RK9kSGgA=

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	428244
Entropy (8bit):	5.037568767487221
Encrypted:	false
SSDEEP:	6144:Xsli2t24BpQd12XvtQ666Mmdc3SYiRENM6HN26OHbnnr2aiFp/qihWORwbz:8Nt24BpQd/vwbz
MD5:	ED99EA6B138A467F1893E550E94BB694
SHA1:	1AFBBC7D2F9C6A6A2EA0A37FED32AA4F0157AEBF
SHA-256:	F6F5C679A576105E6918A2714B25B8480B850F624B0CD8C5827214AE25999FAC
SHA-512:	F23B5171AFA35916B5A0291D698CFEDA3AC884AC2CFC09726DB1EE72622E9876D9134C1F4DA9026341B89679185A058152A5A0D6D3AB87140B3C7A94075554BB
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css
Preview:	.ct-label{fill:#3c3c46;color:#3c3c46;font-size:.75rem;line-height:1}.ct-chart-line .ct-label,.ct-chart-bar .ct-label{display:block;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex}.ct-chart-pie .ct-label,.ct-chart-donut .ct-label{dominant-baseline:central}.ct-label.ct-horizontal.ct-start{-webkit-box-align:flex-end;-webkit-align-items:flex-end;-ms-flex-align:flex-end;align-items:flex-end;-webkit-box-pack:flex-start;-webkit-justify-content:flex-start;-ms-flex-pack:flex-start;justify-content:flex-start;text-align:left;text-anchor:start}.ct-label.ct-horizontal.ct-end{-webkit-box-align:flex-start;-webkit-align-items:flex-start;-ms-flex-align:flex-start;align-items:flex-start;-webkit-box-pack:flex-start;-webkit-justify-content:flex-start;-ms-flex-pack:flex-start;justify-content:flex-start;text-align:left;text-anchor:start}.ct-label.ct-vertical.ct-start{-webkit-box-align:flex-end;-webkit-align-items:flex-end;-ms-flex-align:flex-end;align-items:flex-en

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.739218107333842
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0Jxmfxp9H4fn:wmEM3IQMt2/MbBJxMxpqn
MD5:	1B1260CBE6B61922717BD483B13360AB
SHA1:	2454D32E97008046373A5FA9C263FB7D86C332F4
SHA-256:	1761094876748116BCA8648618765D27ED608BB14BDB4772FA448E68E68D8201
SHA-512:	80DF4F6BCFC060809B1CCD10A8F6F2B3B362F47CC59B8EBF9202A2F3B77C0E14499410863CAC31AC2237D53BB35FD029167881514D693E96C27DA231CE2B2C7F
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"TvJd9S"});

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.697366851331795
Encrypted:	false
SSDEEP:	3:w4IQEM2LNMTIMekNeHNonfHfMKka0JxmfxuH3:wmEM3IQMt2/MbBJxMxA
MD5:	D479B6118C4650D96707547766562FC9
SHA1:	5BFCDED7C1FF1E2F4B7AF70E8DE52E0AC866524B
SHA-256:	471F18F4003346A9A97084A8FED543F0BB81819E1016459F4CC72AAF499FC487
SHA-512:	F84AFD004C1846974E18D6FFE4FEDCD5498103DAF7909841946AC0AD91CF7CA6625424FB197EA7C071A5E246A7E146233E726501605106649DABE43538F14CA1
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F
Preview:	Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"SwQQnj"});

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2393
Entropy (8bit):	7.876651288737464
Encrypted:	false
SSDEEP:	48:i+DZNMosiXVbX/SYUVx2HvNoJe/l/FmlX4offO0vM7/3Emm:ikt/lLu42e/BoWof20vM7/3jm
MD5:	5E8D6501FB6FC6A034A1484B24E9B6DE
SHA1:	0AADD566F53CA433D47CF33AD4D67DD4B7EE8C29
SHA-256:	2628777FADB685F1F92F373EE6ED898D62794659D468E52C430347B6D320EA99
SHA-512:	BCD9A8A97A33410A32DEC3FA240A20E8753529D266381D274235A1DDDF081D8D97D9B4C4DE94E81E6875238F362609174E752047077FD9B2F3F30AC570FD9158
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/sites/1/branding/icon/
Preview:	.PNG........IHDR...0...0.....W...... IDATx..}p........]..%.@.#...Db..........H9`..".)."......d.E...b.0.P.(.u.L.hu...B... ...rI.w{/....G^H ...b...ng...........9.>..1...<\|../ -.. n.;sdS_.b.,..i.+.+ub.0.8.`..2.....C...(........3.N.S....Y...$Y.\.W.0...u..@..u.#............E#v......o)..KL2..\.q..7..`..9....cP..(...<..Z..d\[.m..~.H....[E.d'..s.3.Wa0%.9.D. @.%0&Q.W.\|.s..\ M...cZQy..... -o..<.71I.....Z..:..@.=. ...Ao.....zk....XbW.<..>.......m.$y<..t........-2. .."........0...ox..XyeT...3.<.x..4.` .....Zj .{.v......:.MW....!.....$..+_.q...>zf6o..L.0...H...u.[d.F#L....z...J..+...!Q.6'd.z.......1?E../..O....."2.S.vC..&...........=~I...v..6.X....2.'.5.E.B.d.u..{.Pa/.[..!.....4^...V.....t....Z[..Q2............"A.%...\|...6W..&..g..........l..@T.......,.6..........a.Z.S\jv..y..$. F...y.......+>@.(Q...1.A.`.%.$.. *.4.b. .q ......G....U..l.ct.... +............Kn4zT..a.ED..j..:x.g....c.t...n.6<.../.s.}HJJ.r\|..:...1..w... ..bz.?.\v.c........xt....%..uk..2........e(-H

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	7.653387477182735
Encrypted:	false
SSDEEP:	24:Z3wzYnIZnqxTfFL+uQXmA+qpgAL3OMA0zaztmOIR37zyzZUEMwcN:xkYqC7R+ZXT7DA0zaztm7hGOEtcN
MD5:	519259F1F0DEE25924C42DDE80FFA467
SHA1:	0641664A88126446E08B8A4CCDE7B9BFDC4B0C2D
SHA-256:	6E942E547AF3361880610BF7F7C06FAC24779485C40C7520F70A382799B468B7
SHA-512:	88EBDA9B3E5D387113ADE7D6966B776F74204F9273D1629E9CCB9358CAA8ED29A29BE49D5D3B57CFA71646C4E334E0CC53C7715F712859B30C10689D1A12BAA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.......].....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD....#2....tIME.....$.JK.....<IDATx....k.e........x....l6...R(..C...,...? .....P.......^.C.M.....%^.Q[3.n)........dg<l.U.3..d....<...3....pqqqqqqqq..a....2......n...4.$.<......+....,......E..'x..=/.is._._d.).aT.....Q....CTg>..7.<.9\|..fE..a.i^....."..2..S9 )r....P.....4[.GL.1.7)V..GU.,B.Z.x.'R.j.R..OH....x...a...).@I.."...$.X...E%.....:>..d$u......[..5G-~.9\|.5<fmP. .).r..<E.2+.\A..#.....HR:~.........^rU..1;.M.\.i.~C.....Nbp9....q.P..[....<.[N1...rH.bb.o.r..n.....o!. .B..."......W.....=..b.2.+..x0....?s.........j.....d.W...(. ..+2.X..Rr...`IW,p..R.=\....X...`]d).l.+.-=.:d@Qj.o.....e.J.....~S..$.9......m..g..6..r..RW..p.!........ .........s.........On... (.2".B..A....D..g.$S......}.G8).h..7d......"...)9..K+.@..X........C.d..>.P.....$k.%H..+}D.!... M....!5.V.!...z' ..H..2C...B....q..'...&...2....MF...3.~...i2.mEF.y.?.D.....p..\|i.a.E...S,..!.6$....}.y.(..e8.Y..d

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4716), with no line terminators
Category:	downloaded
Size (bytes):	4724
Entropy (8bit):	5.323083186870453
Encrypted:	false
SSDEEP:	96:PIHAPrAapPrEmhdVjpTJWWPrrFvhFCGfhezS57o+xD2DrKBr40tpoWVMhA4zdVj9:wmddpFFv7CGwOEvKJ40t2WV6ddpSFA
MD5:	7E03C5764D2F3135C479AD0AAF302B70
SHA1:	9361606FDE6D15E2CF2C1DEB1FF39698A68E384E
SHA-256:	1BF38668ACE55662E84BC5B1A103FB41F443867D033FCFC8950E999F7566C267
SHA-512:	AC4BA173721E3D832D673DC7ACCE43DD4BBC7D99EBED4DEFF4E08C27DB3225C6D19ABEA553DA8F8EFC12D7DAC14DEFCC00D2233FF4CB0B41BE5C354C2FCDEE8C
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/themes/default/images/svg/custom_script.js
Preview:	$(document).ready(function(){var t,e,o,n,i=window._paq=window._paq\|\|[];function r(){window.location.href.indexOf("/shares/folder/")>-1&&($("img[src='/sites/3370/branding/logo']").length\|\|$("img[src='/sites/4349/branding/logo']").length\|\|$("img[src='/sites/25/branding/logo']").length)&&($("img[src='/sites/4349/branding/logo']").length&&($("#slot-hbtn-download").hide(),$("#slot-hbtn-print").hide(),$("#fm-btn-download").hide(),$("#fm-btn-print").hide()),$("body > div.container-fluid.h-md-100.px-0 > div > div > div.container.mt-2 > div.row.mb-3 > div.col-auto.ml-auto.text-right > a").hide(),$("#file_list > tr").contextmenu(function(t){var e=setInterval(()=>{$("body > ul > li").length>0&&($("body > ul > li").length>1?($(".icon-download")&&$(".icon-download").parent().parent().hide(),$(".context-menu-separator")&&$(".context-menu-separator").remove(),clearInterval(e)):$("body > ul").hide(),clearInterval(e)),$("img[src='/sites/4349/branding/logo']").length&&$("body > ul > li > ul > li").lengt

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601)
Category:	downloaded
Size (bytes):	205913
Entropy (8bit):	5.464975577516348
Encrypted:	false
SSDEEP:	6144:ASbu8YUm0mtrLH5vw9cW/e254H8bTdaOa:9Dm04hNT
MD5:	BAA6F5924D55CE37D1F12E70A9DF4BF7
SHA1:	6104D9A4127BFD071CF7351536A841ADF153D763
SHA-256:	10368E1584BDDFDBB5FBC2F9E64566543C43F0020DBCDE52AD73D58AC1F6F500
SHA-512:	7ED41D6AE2967708CE02B24FC1CD8AA760A69F8F4727352B72785FE9234A4BB52FEF1D3CAEFB29BFA9EB91C00A470AB47DF40E2D50ACB3F1B62E8F5919539C15
Malicious:	false
Reputation:	low
URL:	https://analytics.vboxx.eu/matomo.js
Preview:	/!!. Matomo - free/libre analytics platform. . JavaScript tracking client. . @link https://piwik.org. * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js. * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js/LICENSE.txt). * @license magnet:?xt=urn:btih:c80d50af7d3db9be66a4d0a86db0286e4fd33292&dn=bsd-3-clause.txt BSD-3-Clause. */.;if(typeof _paq!=="object"){_paq=[]}if(typeof window.Matomo!=="object"){window.Matomo=window.Piwik=(function(){var s,b={},A={},K=document,g=navigator,ac=screen,X=window,h=X.performance\|\|X.mozPerformance\|\|X.msPerformance\|\|X.webkitPerformance,u=X.encodeURIComponent,W=X.decodeURIComponent,k=unescape,M=[],I,v,am=[],z=0,ag=0,Y=0,m=false,q="";function p(au){try{return W(au)}catch(av){return unescape(au)}}function N(av){var au=typeof av;return au!=="undefined"}function D(au){return typeof au==="function"}function aa(au){return typeof au==="object"}function y(au){return typeof au==="string"\|\|au instanceof String}function

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310127
Encrypted:	false
SSDEEP:	3:PqpC2Y:f
MD5:	D925274463DF83CD655B4AC5370FD050
SHA1:	B98CF6768B21EE7E42D14C59B37C3419EB67BB10
SHA-256:	358350D2300A8AFFFA98E9610424F983D159D7519F2A2F19F7552E48231F6055
SHA-512:	2391436CF17E22FF4611F6E5EF5D334A88C96B00DA085799681C46B64CB6D41B337F23BE13A17ED769744E640D677C87678FE65DEB89081E20EF2F5EF656987C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl5ATPwKw4QcBIFDeeNQA4=?alt=proto
Preview:	Cg4KDA3njUAOGgUImgEYAg==

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12770), with no line terminators
Category:	downloaded
Size (bytes):	12770
Entropy (8bit):	4.76490154468131
Encrypted:	false
SSDEEP:	384:lKCLjP/q1lKhE+ccCH6fFM3kSU+1y96T/5W:c1lKKmCHeFM3kSU+1y9YxW
MD5:	7044F2412A22AD8523175B3275896FDE
SHA1:	4FC8D613AD5AEB64C1AB25C501EF22BB8809B78A
SHA-256:	9943E6EF8AFEDFB7CC1E3AC4084CE7DABAB536B4C2EAC21FCAB95EC9295331D1
SHA-512:	CC3E1E68988B72DF1656F6F9BEE2FE59809A286CBEE1D3B076BC46A29069FD1BEE49CD77447673D3F7C7B0F08C34754B78E04DFB1B9E96BAC09FD0B28DDD3A6A
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/js/translations/de.js?v=3.6.0.117
Preview:	window.BABEL_CATALOG_de = {"domain": "C:\\Users\\vboxx\\Documents\\GitHub\\update-script\\common\\translations\\de\\LC_MESSAGES\\messages_js", "locale": "de", "messages": {"": "Project-Id-Version: PROJECT VERSION\nReport-Msgid-Bugs-To: EMAIL@ADDRESS\nPOT-Creation-Date: 2021-02-09 13:54-0600\nPO-Revision-Date: 2023-10-23 13:06+0200\nLast-Translator: \nLanguage: de\nLanguage-Team: de <LL@li.org>\nPlural-Forms: nplurals=2; plural=(n != 1)\nMIME-Version: 1.0\nContent-Type: text/plain; charset=utf-8\nContent-Transfer-Encoding: 8bit\nGenerated-By: Babel 2.9.1\n", " Online": " Online", "A file with the same name already exists.": "Eine Datei mit diesem Namen existiert bereits.", "Account": "Konto", "Action Not Allowed: Insufficient Permission": "Aktion nicht erlaubt: Unzureichende Berechtigung", "Activity": "Aktivit\u00e4t", "All files in this folder have been permanently deleted.": "Alle Dateien in diesem Ordner wurden endg\u00fcltig gel\u00f6scht.", "All files were locked successfully.": "A

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	279770
Entropy (8bit):	5.262974604432418
Encrypted:	false
SSDEEP:	3072:9JUqijBmwwvPSIoPa/rwk+mjityt3thxF5nTbM46bO:92jBmwwvPSIoPa/rCkhT5Pb6i
MD5:	C6AEE329EBF74D83F225A130C92EC8D3
SHA1:	7566B7A9EF41D7B300439F67465D537B1D85AD3B
SHA-256:	9835B8CEB7AEAEE0BDC165468C7DD94BBE5E4F7328601A66B06F375666C63051
SHA-512:	7723AFA37E39C77AECC183238F3C0907E0C48F75E554380C79D238F9322C89F8D3BDCAC8D014FCB8FB2F3F67A852FBF57D62870CEF52E741DF496AD0331126E4
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/themes/default/images/svg/lottie.js
Preview:	"undefined"!=typeof navigator&&function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).lottie=e()}(this,(function(){"use strict";var svgNS="http://www.w3.org/2000/svg",locationHref="",_useWebWorker=!1,initialDefaultFrame=-999999,setWebWorker=function(t){_useWebWorker=!!t},getWebWorker=function(){return _useWebWorker},setLocationHref=function(t){locationHref=t},getLocationHref=function(){return locationHref};function createTag(t){return document.createElement(t)}function extendPrototype(t,e){var r,i,s=t.length;for(r=0;r<s;r+=1)for(var a in i=t[r].prototype)Object.prototype.hasOwnProperty.call(i,a)&&(e.prototype[a]=i[a])}function getDescriptor(t,e){return Object.getOwnPropertyDescriptor(t,e)}function createProxyFunction(t){function e(){}return e.prototype=t,e}var audioControllerFactory=function(){function t(t){this.audios=[],this.audioFactory=t,this._volume=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, axcient-iconfont
Category:	downloaded
Size (bytes):	49916
Entropy (8bit):	6.283675881307332
Encrypted:	false
SSDEEP:	768:rQHew0pmCQWQLVRN4hzxml5ehnsv8w0TyynUinUrdAZVUfHQKkuaEFeOfa:OLrBTcns0woioVUTZaEQO
MD5:	E6E668676E49C885A4F55B4F4D81FDAD
SHA1:	A61BE22B94CF07524D47AACBC9861BC8FA76A7E2
SHA-256:	52F6798A9D2E06F28CFE9BD75AB8BA5F815B65383E00955A51B0FE453BC6EBFF
SHA-512:	FF6FB2551EFA6BFBEB41FA1962C35C6894D649F7F3741B555BD2F5ED6E699DD84C815F4D2EF45A8CBD144D565200A4449C23E48E03562F77C63C69E068093458
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c
Preview:	...........0OS/2...........`cmap...........dgasp............glyf1..........head...........6hhea...........$hmtx8X<........Dloca......$....maxp........... name[.B.........post........... ...........................3...................................@.........@...@............... .................................H............. .;.b........... ...=.d......................................................79..................79..................79.......).........,.;.J...2..1...#"&51.!"&54631.2..1.!2....#1!"&51.463..62......"'&47..."'&47.62.......##..$...$$....$...##....$$......2......3........2......2.....#....$$...$..#..#...$..$$..W.#.......2......2........2......2.......f........."...B.I...54632...12.....#!"&=.4631;.54&#"...2654&#"......!.!.3...#!"&5.463!1.!"&5..fRHHR..........gf....3.......{.g.fg<+..+<<+...4......3HQQH3..........3................g...3..<<.3+<.........f.........2.9.......#"&54632...%...#"&54632..5..!.!.3...#!"&5.463!1.!"&5....- -- ....3- -- ...4.g.fg<+..+<<+...4...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 88732, version 3.393
Category:	downloaded
Size (bytes):	88732
Entropy (8bit):	7.997616633042295
Encrypted:	true
SSDEEP:	1536:Tx3a1kdd0uT/BP56bLhhn79lBt9aGhrzSVEUQe+pnK4vTKNY:hdd0uTJP5W7nHBtUGFSVz+pK4OY
MD5:	7DB69E930FFF9EBA1E8EB6FDD41C826E
SHA1:	D8F87055238130980D4E4F82425135FD77C4471D
SHA-256:	324D48E48389C06F3DCD0A1E54F8B921ABED9B64E1CEC3085B4CC23442BB2ED9
SHA-512:	500550415B1E08AD33AC4D7668E7717BDFC607CC6FCFDE1C30F7982902A0EF1A7CD73B2BF1979C088CE2DBC25A38D3D1B73A5362876C2BE08A55195DF460754F
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-light.woff2
Preview:	wOF2......Z.......l...Z=.........................F..p.........`.."...D..9..&..6.$..H. .."....[.......o..C..I...l.l~b...K..4}..tC$C.../.....6.i..c.3.....^A...._...=....................o63.y..M._..A. "~.GE+.b..Z..zGPr.....K.u^J...!.cU..X..........9.v}..Z.5.....J...X...........jZ...4..{&..N..9A.Q.b..].t%^.n@._...Z..j.u.J.1).r=.....>..........P.gg._.sJ/..&=-^<..We.X.%._..=/.Z.....T..Br.r}.....[.U'.@..";.........M#...Zt..r.T.s.9'." .......m.#...J.{..J^.Y.o.Jg" .).q4.o....(..{...\|..dmo.3G..=."2e.T...Yp~...O......E._.....\..CJ..<.?..z..6.../....7J.-...tG"`......I...[..P....WI...._..yr..%.Oq\.l...WM'9...(..p.(T.@../......dS.=.....u.FO.............t...8T....[B.t+(.V....&..w....=M.%..h.j=.y1(..0.h<.J.3...........$.7..X.g..#.1........S...T....Z....+...<..tw.F.Q..iuqL.iK\|..!z/.!..<o...;xG5.]\;..=.....s" .C_R5(fQ....6.....y{..[.`...?Y....E.9....-.tGS.\|+#:sq~6..9.=9...<1........... &0.Y..O{...s.R8>....K..4.......S...D...y}........Qt2...o..N.J.7...]y..A..9D."...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2393
Entropy (8bit):	7.876651288737464
Encrypted:	false
SSDEEP:	48:i+DZNMosiXVbX/SYUVx2HvNoJe/l/FmlX4offO0vM7/3Emm:ikt/lLu42e/BoWof20vM7/3jm
MD5:	5E8D6501FB6FC6A034A1484B24E9B6DE
SHA1:	0AADD566F53CA433D47CF33AD4D67DD4B7EE8C29
SHA-256:	2628777FADB685F1F92F373EE6ED898D62794659D468E52C430347B6D320EA99
SHA-512:	BCD9A8A97A33410A32DEC3FA240A20E8753529D266381D274235A1DDDF081D8D97D9B4C4DE94E81E6875238F362609174E752047077FD9B2F3F30AC570FD9158
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W...... IDATx..}p........]..%.@.#...Db..........H9`..".)."......d.E...b.0.P.(.u.L.hu...B... ...rI.w{/....G^H ...b...ng...........9.>..1...<\|../ -.. n.;sdS_.b.,..i.+.+ub.0.8.`..2.....C...(........3.N.S....Y...$Y.\.W.0...u..@..u.#............E#v......o)..KL2..\.q..7..`..9....cP..(...<..Z..d\[.m..~.H....[E.d'..s.3.Wa0%.9.D. @.%0&Q.W.\|.s..\ M...cZQy..... -o..<.71I.....Z..:..@.=. ...Ao.....zk....XbW.<..>.......m.$y<..t........-2. .."........0...ox..XyeT...3.<.x..4.` .....Zj .{.v......:.MW....!.....$..+_.q...>zf6o..L.0...H...u.[d.F#L....z...J..+...!Q.6'd.z.......1?E../..O....."2.S.vC..&...........=~I...v..6.X....2.'.5.E.B.d.u..{.Pa/.[..!.....4^...V.....t....Z[..Q2............"A.%...\|...6W..&..g..........l..@T.......,.6..........a.Z.S\jv..y..$. F...y.......+>@.(Q...1.A.`.%.$.. *.4.b. .q ......G....U..l.ct.... +............Kn4zT..a.ED..j..:x.g....c.t...n.6<.../.s.}HJJ.r\|..:...1..w... ..bz.?.\v.c........xt....%..uk..2........e(-H

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37649)
Category:	downloaded
Size (bytes):	475032
Entropy (8bit):	5.386458786367992
Encrypted:	false
SSDEEP:	6144:dxqJUOlGAUR1xUruO0StGwIoJuqcssQK31xsNfDf:zdOlURvWuOtGAvBCspDf
MD5:	52B569418D62BE50EE0AFF92F7BA9A06
SHA1:	EC703714C628A661B90D30FAB808049A62ECA912
SHA-256:	00169AAAD294F2D5BE6039A00FEE63D54E5B5A21672FB5AE47A492E772E1AF9F
SHA-512:	97D66F7A0960852544EE1320A6EB054B17EB7677DDA6960271602998E24E5A3821474B5C13977FB4D59E905F3286BEDA80CD0DBA043CEA01FB717D35A37064A3
Malicious:	false
Reputation:	low
URL:	https://web.leitz-cloud.com/static/gen/main.52b56941.min.js
Preview:	(function($,undefined){$.support.htmlMenuitem=('HTMLMenuItemElement'in window);$.support.htmlCommand=('HTMLCommandElement'in window);$.support.eventSelectstart=("onselectstart"in document.documentElement);if(!$.ui\|\|!$.ui.widget){var _cleanData=$.cleanData;$.cleanData=function(elems){for(var i=0,elem;(elem=elems[i])!=null;i++){try{$(elem).triggerHandler("remove");}catch(e){}}._cleanData(elems);};}.var.$currentTrigger=null,initialized=false,$win=$(window),counter=0,namespaces={},menus={},types={},defaults={selector:null,appendTo:null,trigger:"right",autoHide:false,delay:200,reposition:true,determinePosition:function($menu){if($.ui&&$.ui.position){$menu.css('display','block').position({my:"center top",at:"center bottom",of:this,offset:"0 5",collision:"fit"}).css('display','none');}else{var offset=this.offset();offset.top+=this.outerHeight();offset.left+=this.outerWidth()/2-$menu.outerWidth()/2;$menu.css(offset);}},position:function(opt,x,y){var $this=this,offset;if(!x&&!y){opt.determinePo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 08:22:42.335561991 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 25, 2024 08:22:44.132344961 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 08:22:53.742073059 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 08:22:54.603998899 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.604080915 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:54.604152918 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.605720997 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.605767012 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:54.605833054 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.612718105 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.612755060 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:54.613029957 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:54.613084078 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:54.803144932 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:54.803226948 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:54.803325891 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:54.840970039 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:54.841016054 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.080715895 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.081357956 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:55.081388950 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.083024979 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.083101034 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:55.088334084 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:55.088428020 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.107232094 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.107773066 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.107805967 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.108802080 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.108875036 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.110960007 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.111040115 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.111166954 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.111200094 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.132345915 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:55.132379055 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:22:55.134721994 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.135024071 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.135039091 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.138637066 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.138722897 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.139329910 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.139527082 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.163358927 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.180978060 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.180979013 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:22:55.180998087 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.224792004 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.571263075 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.573710918 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.573805094 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.608233929 CEST	49737	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.608277082 CEST	443	49737	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.611237049 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.652122021 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.937342882 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.937403917 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.937423944 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.937463045 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.937504053 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.937532902 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.937556028 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.938807964 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.938956022 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:55.939035892 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.941006899 CEST	49738	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:55.941030979 CEST	443	49738	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.011127949 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.011200905 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.011271954 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.011595011 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.011642933 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.011698008 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.011956930 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.012001038 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.012532949 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.012610912 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.012696028 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.012873888 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.012939930 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.013010979 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013245106 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013264894 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.013360977 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013555050 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013575077 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.013767004 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013969898 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.013983965 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.014147043 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.014178991 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.014328957 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.014358997 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.014525890 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.014549017 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.014673948 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.014698029 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.202179909 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.202260017 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.202438116 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.204272985 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.204307079 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.433557987 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.433648109 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.442164898 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.442183971 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.442461014 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.493659019 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.496881962 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.497991085 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.498040915 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.499085903 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.499149084 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.499495029 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.499557018 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.499771118 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.499788046 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.516498089 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.517199993 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.517220974 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.520850897 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.520936012 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.521692038 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.526817083 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.529099941 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.529463053 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.529602051 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.529700994 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.529856920 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.529890060 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.530488968 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.530499935 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.530555964 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.530596972 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.530698061 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.530730963 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.530939102 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.531332970 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.531407118 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.531547070 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.531637907 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.531693935 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.532191992 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.532275915 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.532835960 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.532881975 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.533066034 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.533174038 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.533189058 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.533224106 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.553246975 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.565520048 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.565989017 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.566009045 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.567437887 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.567503929 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.568362951 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.568444967 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.568629026 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.568640947 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.571532011 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.572120905 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.576113939 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.576122999 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:56.587481976 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.615189075 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:56.647593021 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.647654057 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.648159027 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.660315990 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.660342932 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.660373926 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.660391092 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.687907934 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.687942982 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.687999964 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.688812971 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.688831091 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.911680937 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.911768913 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.936930895 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.936965942 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.937222958 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:56.938692093 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:56.980165958 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:57.017266035 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.017288923 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.017296076 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.017338037 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.017357111 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.017401934 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.017417908 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.017419100 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.033482075 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.033551931 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.033564091 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036554098 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036583900 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036593914 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036631107 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036660910 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.036714077 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.036748886 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.050786018 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.050797939 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.050844908 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.050863028 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.050889015 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.052882910 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.052937984 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.052972078 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.052997112 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.052998066 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.053023100 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.053040028 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.053241014 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.053301096 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.053308964 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.053939104 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.060738087 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.075244904 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.075417995 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.075757027 CEST	49741	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.075773954 CEST	443	49741	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.084053993 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.085372925 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.085401058 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.085436106 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.085445881 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.085464954 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.085494995 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.085520983 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.090188980 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.090256929 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.090276003 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.093281031 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.093302965 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.093339920 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.093359947 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.093413115 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.093446016 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.100768089 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.100840092 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.100858927 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.101207972 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.101253986 CEST	443	49740	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.101304054 CEST	49740	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.102534056 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.129734993 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:57.129863977 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:57.130003929 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:57.130954027 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.133074999 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:57.133074999 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 25, 2024 08:22:57.133121014 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:57.133147955 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 25, 2024 08:22:57.230055094 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.230065107 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.230124950 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.230129957 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.230187893 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.230187893 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.230221987 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.230228901 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.230272055 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.230295897 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.230315924 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246187925 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246218920 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246242046 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.246248960 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246274948 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.246625900 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246633053 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.246676922 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.246682882 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249321938 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249361038 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249377012 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249411106 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.249444962 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.249463081 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249536991 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249555111 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249589920 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.249608040 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.249633074 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.263434887 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263468981 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263497114 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.263510942 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263537884 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.263603926 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263638020 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263659000 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.263672113 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.263700008 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.267668009 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.267699957 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.267745972 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.267795086 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.267800093 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.267879963 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.267935038 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.267940044 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.267997980 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.268049002 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.268054008 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.268184900 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.268235922 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.268665075 CEST	49744	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.268681049 CEST	443	49744	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.276037931 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.276084900 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.276288986 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.276681900 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.276712894 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.288677931 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.298181057 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298207998 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298242092 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298275948 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.298317909 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.298331022 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298398018 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298415899 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298458099 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.298475027 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.298496962 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.303030968 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.303101063 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.303113937 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.303288937 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.303354025 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.303364992 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.304313898 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.334654093 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.334696054 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.334825039 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.337796926 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.337826014 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.350802898 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.442857981 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.442869902 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.442920923 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.442924976 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.442970991 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.442995071 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.443265915 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443274975 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443334103 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.443351984 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443547964 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443598986 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443622112 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.443635941 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443662882 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.443780899 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.443842888 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.443855047 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.458959103 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459026098 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.459038973 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459327936 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459359884 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459399939 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.459399939 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.459415913 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459728003 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.459781885 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.459794998 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.460124016 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.460179090 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.460190058 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462368965 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462398052 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462446928 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.462517977 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.462544918 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462716103 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462734938 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462771893 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.462794065 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.462821007 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.463114977 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.463197947 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.463211060 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.463342905 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.463397980 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.463409901 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476054907 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476140976 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.476157904 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476407051 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476465940 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.476479053 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476633072 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.476696014 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.476722002 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.477005005 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.477077961 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.477088928 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.508088112 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511101961 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511122942 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511136055 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511161089 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511209965 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511384964 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511394024 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511436939 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511464119 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511476040 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511718035 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511753082 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511764050 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511775970 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.511800051 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.511955023 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.512000084 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.512022018 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.515743017 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.515800953 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.515813112 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516024113 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516077995 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.516091108 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516360044 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516406059 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.516417980 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516720057 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.516771078 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.516782045 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.523237944 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.570605993 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.655551910 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.655561924 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.655595064 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.655632019 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.655677080 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.655911922 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.655919075 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.655966997 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.655988932 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.656599998 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.656634092 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.656661034 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.656681061 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.656704903 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.657332897 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.657387018 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.657397032 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.657813072 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.657874107 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.657886028 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.657991886 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658046007 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.658058882 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658313990 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658375978 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.658387899 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658504963 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658557892 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.658569098 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658790112 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.658839941 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.658849955 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.671802998 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.671869993 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.671880960 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672061920 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672107935 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.672120094 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672146082 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.672511101 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672566891 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.672576904 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672869921 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.672925949 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.672935963 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673218966 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673280001 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.673291922 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673531055 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673585892 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.673595905 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673907042 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.673954964 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.673964977 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.674228907 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.674273014 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.674283981 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.674992085 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675021887 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675060987 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675086021 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675096035 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675153971 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675200939 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675203085 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675221920 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675240993 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675525904 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675578117 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675582886 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675924063 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.675971031 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.675976038 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676299095 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676347971 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.676354885 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676654100 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676707029 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.676712990 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676913977 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.676973104 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.676979065 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.677150011 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.677197933 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.677202940 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.677345037 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.677392006 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.677397966 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.688931942 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.688998938 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.689007044 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.689244986 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.689300060 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.689306021 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.689625978 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.689682007 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.689687967 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690023899 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690076113 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.690080881 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690453053 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690510988 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.690515995 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690542936 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.690818071 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.690867901 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.690872908 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.691010952 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.691059113 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.691063881 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.691328049 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.691381931 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.691386938 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725163937 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725203991 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725219965 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725243092 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725306034 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725306034 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725338936 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725384951 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725421906 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725447893 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725469112 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725492954 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725519896 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725574970 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725586891 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725646019 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725703955 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725716114 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725790977 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725851059 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.725864887 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725936890 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.725994110 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.726006031 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.726048946 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.726104975 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.726115942 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.726470947 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.726535082 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.726546049 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.728399992 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.728419065 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.728487968 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.728501081 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.728846073 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.728908062 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.728919029 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.732587099 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.732661009 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.732671976 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.735635996 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.735697985 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.735708952 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.744431019 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.761157990 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.761241913 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.761260986 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.763851881 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.763993979 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.764005899 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.770064116 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.770137072 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.770148039 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.779323101 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.779511929 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.779539108 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.779845953 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.780154943 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.780241966 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.780252934 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.824136972 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.824717999 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.824719906 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.846393108 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.846600056 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.846626043 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.850169897 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.850253105 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.850558043 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.850663900 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.850754976 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868388891 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868396997 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868467093 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.868510008 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868707895 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868714094 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.868771076 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.868786097 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.869088888 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.869118929 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.869141102 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.869160891 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.869185925 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.869697094 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.869751930 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.869764090 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.870188951 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.870251894 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.870265961 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.870420933 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.870488882 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.870500088 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.870949984 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.871002913 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.871015072 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.871226072 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.871279001 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.871289968 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.874237061 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.874293089 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.874305964 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.874547958 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.874603033 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.874614000 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.874982119 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875036001 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.875061035 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875281096 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875327110 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.875338078 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875544071 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875595093 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.875607014 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875929117 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.875987053 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.875998020 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.876178026 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.876230955 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.876241922 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.876430988 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.876496077 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.876506090 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.878710985 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.878783941 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.878796101 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.883963108 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.884022951 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.884035110 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.884437084 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.884495020 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.884506941 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885392904 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885447025 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.885457993 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885787964 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885840893 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.885853052 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885891914 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885943890 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.885953903 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.885971069 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.886012077 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.886323929 CEST	49743	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.886368036 CEST	443	49743	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887289047 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887311935 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887447119 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.887447119 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.887480021 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887799025 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887845039 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887849092 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.887866974 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.887897015 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.888058901 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888127089 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.888139963 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888387918 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888456106 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.888468027 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888622999 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888680935 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.888695002 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888860941 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.888942957 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.888955116 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889287949 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889345884 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.889358044 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889594078 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889657021 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.889667988 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889920950 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.889981031 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.889991999 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.890244007 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.890305042 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.890316010 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.890680075 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.890724897 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.890737057 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.890767097 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.890943050 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891000986 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.891011953 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891387939 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891450882 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.891463041 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891720057 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891782045 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.891793013 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.891980886 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.892040014 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.892050982 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.892348051 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.892411947 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.892422915 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.892855883 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.892914057 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.892925978 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.899313927 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.899326086 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902105093 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902173996 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.902185917 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902367115 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902439117 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.902451038 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902698040 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902755022 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.902765036 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.902985096 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.903042078 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.903053999 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.903342962 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.903403997 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.903414965 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.903635025 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.903691053 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.903702974 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904042006 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904105902 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.904123068 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904274940 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904335022 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.904345989 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904536963 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.904593945 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.904604912 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.909454107 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.909518957 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.909529924 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.913422108 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.913492918 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.913505077 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.917924881 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.918003082 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.918015003 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.921664000 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.921739101 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.921751022 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.925441027 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.925507069 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.925518036 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.926608086 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.926671028 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.926681995 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.927354097 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.927402973 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.927412987 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.927447081 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.930402040 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.930473089 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.930484056 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.937925100 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.937952995 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.937971115 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.937993050 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938033104 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938050985 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938299894 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938319921 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938353062 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938364983 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938395023 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938720942 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938757896 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938777924 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938793898 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.938818932 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.938988924 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.939055920 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.939066887 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.939625978 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.939691067 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.939702034 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.939757109 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.939874887 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.939925909 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.970097065 CEST	49745	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:57.970132113 CEST	443	49745	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:57.976185083 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.009654045 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.009720087 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.009799957 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.010037899 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.010080099 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.100853920 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.100883007 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.100943089 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.101022005 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.101064920 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.101442099 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.101500988 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.101516008 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.101921082 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.101994038 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.102004051 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.102366924 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.102426052 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.102437019 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.102799892 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.102891922 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.102905035 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.103306055 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.103373051 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.103384018 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.103765965 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.103830099 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.103841066 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.104290962 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.104360104 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.104370117 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.104794025 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.104873896 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.104887962 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.105345011 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.105408907 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.105420113 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.105726957 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.105777979 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.105788946 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.106266022 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.106326103 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.106338024 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.106617928 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.106669903 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.106683016 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.107357979 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.107419014 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.107429981 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.107728958 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.107800961 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.107811928 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108138084 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108196020 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.108206034 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108478069 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108540058 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.108551979 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108835936 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.108901978 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.108932972 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109071016 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109132051 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.109143019 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109400034 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109462023 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.109472990 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109924078 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.109982014 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.109993935 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110313892 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110373020 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.110383987 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110415936 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110476017 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.110486984 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110637903 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.110693932 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.110707045 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111180067 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111232996 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.111243010 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111495018 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111557007 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.111567974 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111679077 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.111742973 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.111752987 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112061024 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112124920 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.112135887 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112333059 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112395048 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.112405062 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112487078 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112549067 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.112559080 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112890959 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.112951994 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.112962008 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113065004 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113125086 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.113136053 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113404989 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113465071 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.113475084 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113899946 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.113964081 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.113975048 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.114233971 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.114310026 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.114320040 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.115967989 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.116028070 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.116039991 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.116262913 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.116319895 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.116332054 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.116919041 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.116967916 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.116987944 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.117012978 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.118896008 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.118968010 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.118983984 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.121332884 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.121392965 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.121406078 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.124458075 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.124527931 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.124540091 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.128317118 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.128377914 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.128390074 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.134685993 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.134747982 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.134759903 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.146863937 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.146928072 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.146940947 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.150047064 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.150127888 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.150140047 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.151468039 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.151531935 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.151542902 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.155863047 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.155925989 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.155940056 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.160124063 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.160188913 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.160202980 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.161098957 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.161153078 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.161164045 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.165221930 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.165286064 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.165298939 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.169631958 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.169703960 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.169719934 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.171412945 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.171474934 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.171489000 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.173866987 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.173932076 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.173943043 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.176668882 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.176740885 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.176753044 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.179411888 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.179491997 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.179502964 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.182485104 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.182543039 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.182555914 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.183177948 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.183238983 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.183250904 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.190184116 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.190253973 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.190265894 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.193743944 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.201283932 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.201356888 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.201370955 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.201430082 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.206521988 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.206600904 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.206612110 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.208903074 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.208957911 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.208970070 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.213116884 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.213196993 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.213208914 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.218256950 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.218322992 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.218367100 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.222763062 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.222834110 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.222841978 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.227602005 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.227678061 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.227686882 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.232686043 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.232768059 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.232774973 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.234786987 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.234858990 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.234865904 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.244498968 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.244558096 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.269568920 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.269619942 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.280787945 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.280812025 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.280879974 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.280910969 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.283004999 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.283061981 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.298057079 CEST	49742	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.298093081 CEST	443	49742	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.322808981 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.323767900 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.323829889 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478204966 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478235006 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478261948 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.478288889 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.478348970 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478389978 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478790998 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.478859901 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.480038881 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.480048895 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.480050087 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.480082989 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.480086088 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.480596066 CEST	49748	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.480642080 CEST	443	49748	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.483376980 CEST	49749	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.483391047 CEST	443	49749	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.483856916 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.483887911 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.505059004 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.506201982 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.506239891 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.506592035 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.520437002 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.520437002 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.520478964 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.520544052 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.570468903 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:58.967468977 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.975375891 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:58.981127024 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.001975060 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.002032042 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.002041101 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.002062082 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.002468109 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.002517939 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.002578974 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.003194094 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.003259897 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.003604889 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.003663063 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.003703117 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.004138947 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.004228115 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.004313946 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.006218910 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.006407022 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.007791996 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.007791996 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.007838964 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008269072 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008471966 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008492947 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008500099 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008522987 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008558989 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.008593082 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.008627892 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.020935059 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.020982027 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.021022081 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.021045923 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.021073103 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.044162035 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.048125982 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.055006981 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.055013895 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.055027008 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.055042982 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.055042982 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.071100950 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.103012085 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.103024960 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.222987890 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.222996950 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.223046064 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.223057032 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.223145962 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.223239899 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.223246098 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.223356009 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.223375082 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.235656977 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.235665083 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.235832930 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.235851049 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.236016035 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.236025095 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.236236095 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.236252069 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.279176950 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.437664986 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.437676907 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.437727928 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.437743902 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.437804937 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.437805891 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.437880993 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.437889099 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.437942982 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.437959909 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.438267946 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.438302040 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.438319921 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.438342094 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.438366890 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.438446045 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.438498974 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.438512087 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450213909 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450279951 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.450311899 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450350046 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450401068 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.450417042 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450437069 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.450460911 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.450484037 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.451951981 CEST	49750	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.451981068 CEST	443	49750	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.462568998 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.470112085 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.470164061 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.482403040 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.482433081 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.482441902 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.482495070 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.482506037 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.482553959 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.482572079 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.484939098 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.484947920 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.484983921 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.484996080 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.485035896 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.485065937 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.532428980 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.532514095 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.532599926 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.534049034 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.534085035 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.535239935 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.535264969 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.535324097 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.535963058 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.535975933 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.537231922 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.537305117 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.537374020 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.538467884 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.539777040 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.539805889 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.541105986 CEST	49751	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.541147947 CEST	443	49751	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.589267015 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.589293003 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.589299917 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.589340925 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.589353085 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.589390993 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.595006943 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.595068932 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.595102072 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.698966980 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.698981047 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.699029922 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.699045897 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.699095964 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.699095964 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.699141979 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.699151039 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.699182034 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.699208021 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.699219942 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.701458931 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.701503992 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.701510906 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.701524019 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.701545000 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.701720953 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.701771021 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.701776981 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.726177931 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.726201057 CEST	443	49752	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.726210117 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.726242065 CEST	49752	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.742083073 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.748488903 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.748518944 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.748569012 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.748920918 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.748929977 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915309906 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915322065 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915373087 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.915410042 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.915419102 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915544033 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915553093 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.915587902 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.915595055 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.916011095 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.916057110 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.916059971 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.916079044 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.916105032 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.916271925 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.916342974 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.916348934 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.917741060 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.917803049 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.917809963 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918066025 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918117046 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.918123007 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918324947 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918371916 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.918378115 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918606997 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.918653965 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:22:59.918659925 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:22:59.961368084 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.016688108 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.023791075 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.030831099 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.057378054 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.066001892 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.066057920 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.066356897 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.066417933 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.066499949 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.066520929 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.066956043 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.067416906 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.067501068 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.067547083 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.068087101 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.069358110 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.069555998 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.069878101 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.069957018 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.072719097 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.072913885 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.073050022 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.073137999 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.073156118 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.107393980 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.107420921 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.116146088 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.116559029 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132134914 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132158041 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132215977 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132267952 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132283926 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132471085 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132508993 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132531881 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132550001 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132572889 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132703066 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132764101 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.132776022 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.132962942 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133027077 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.133038044 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133220911 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133280993 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.133292913 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133464098 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133541107 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.133552074 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133759022 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133812904 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.133821964 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.133985043 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.134038925 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.134048939 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.134257078 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.134325981 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.134337902 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.134704113 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.134995937 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.135057926 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.135067940 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.135118961 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.139916897 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.139981031 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.139991999 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.145184994 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.145245075 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.145256042 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.153934956 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.154000998 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.154011965 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.160965919 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.161031961 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.161042929 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.162009954 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.162070036 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.162081003 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.164252043 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.164310932 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.164323092 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.209680080 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.242281914 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.244313002 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.244330883 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.244677067 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.245436907 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.245501041 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.245587111 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.288117886 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.348683119 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.348696947 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.348731995 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.348778009 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.348793030 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.349174976 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.349221945 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.349237919 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.349278927 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.349293947 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.349442005 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.349488020 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.349493980 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350126982 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350186110 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.350192070 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350461960 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350505114 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.350512028 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350680113 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350723028 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.350728035 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350944996 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.350991011 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.350996971 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351145983 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351183891 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.351190090 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351413965 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351471901 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.351476908 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351829052 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.351871014 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.351876974 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352000952 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352113008 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352163076 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352166891 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352200985 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352391005 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352437019 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352441072 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352638960 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352680922 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352685928 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352932930 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.352977037 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.352982044 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353269100 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353307009 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.353312969 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353543043 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353586912 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.353593111 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353821993 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.353869915 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.353874922 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354034901 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354079962 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.354085922 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354316950 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354362965 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.354370117 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354540110 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.354587078 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.354593039 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.355391979 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.357728004 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.357785940 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.357790947 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.357825041 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.357898951 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.357944965 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.357949972 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.361709118 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.361766100 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.361772060 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.364192009 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.364243031 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.364248037 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.371222973 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.371284962 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.371292114 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.371519089 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.371572971 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.371578932 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.377482891 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.377542973 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.377548933 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.379774094 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.379857063 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.379863024 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.380631924 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.380707979 CEST	443	49753	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.380830050 CEST	49753	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.466686010 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.466784954 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.466835976 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.466856956 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.466912985 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.466944933 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.467071056 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.467165947 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.467181921 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.467231989 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.475136995 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475157976 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475163937 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475233078 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.475243092 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475275993 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475322008 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.475635052 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475642920 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.475703955 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.475728035 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.477160931 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.479466915 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479523897 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479542971 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479598999 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.479608059 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479661942 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479692936 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.479720116 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.479732990 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479780912 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.479947090 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.479965925 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.480012894 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.480026960 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.522100925 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.525837898 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.525902033 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.525980949 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.532489061 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.532521963 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678067923 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678093910 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678170919 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.678170919 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.678208113 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678286076 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678348064 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.678363085 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678495884 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678555965 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.678570032 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678730011 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.678788900 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.678802013 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.679043055 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.679101944 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.686806917 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.686815977 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.686980963 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.686991930 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.687021971 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.687045097 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.687072992 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.687407017 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.687474012 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.687489986 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.687764883 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.687815905 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.687829018 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.688750982 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.688770056 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.688834906 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.688846111 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.688914061 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.693871021 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.693901062 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.693934917 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.693960905 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694001913 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694093943 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694112062 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694156885 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694197893 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694210052 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694441080 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694493055 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694515944 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694530010 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694556952 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694716930 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.694782972 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.694794893 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.734919071 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.734919071 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.750587940 CEST	49754	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.750622988 CEST	443	49754	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.764251947 CEST	49757	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.764309883 CEST	443	49757	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.898624897 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.898633957 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.898689985 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.898706913 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.898897886 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.898956060 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.898968935 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.899322033 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.899384022 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.899394989 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.899769068 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.899836063 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.899847031 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.900015116 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.900073051 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.900085926 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.900119066 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.900306940 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.901460886 CEST	49755	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.901504993 CEST	443	49755	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908643007 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908665895 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908708096 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908719063 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.908765078 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.908791065 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908807993 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.908844948 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.908865929 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.908895969 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909176111 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909233093 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909240961 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.909259081 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909286976 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.909446955 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909529924 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.909543037 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909652948 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909725904 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.909739017 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909796000 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:00.909909964 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.923866034 CEST	49756	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:00.923898935 CEST	443	49756	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.041908979 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.093076944 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.253360033 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.253412962 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.254122019 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.255955935 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.256062031 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.259414911 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.300123930 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.511601925 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.517544031 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:01.517613888 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.518482924 CEST	49758	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:01.518533945 CEST	443	49758	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:03.203660011 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.203759909 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.203824043 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.204377890 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.204456091 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.204540968 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.204971075 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.205003977 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.205122948 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.205152988 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.656131029 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.656342983 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.656362057 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.657332897 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.657390118 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.658351898 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.658411026 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.658618927 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.658624887 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.667979002 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.668164968 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.668199062 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.671731949 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.671811104 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.672198057 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.672360897 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.770688057 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.770718098 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:03.799282074 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:03.960906029 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.081793070 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082005024 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082050085 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.082062006 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082072020 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082103014 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.082221031 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082227945 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.082272053 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294439077 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294462919 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294487000 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294503927 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294532061 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294538975 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294553041 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294563055 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294573069 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294595003 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294601917 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294608116 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294641972 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294655085 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294660091 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.294692039 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.294701099 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.396553993 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.504789114 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.504797935 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.504926920 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505188942 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505214930 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505227089 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505242109 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505242109 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505249977 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505281925 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505299091 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505338907 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505522013 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505528927 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505568981 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505588055 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505615950 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505618095 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505626917 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505629063 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505681992 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505681992 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505702019 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505743027 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505816936 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.505827904 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.505990982 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.506231070 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.506247044 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.506534100 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.506546021 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.506938934 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.715573072 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.715636969 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.715675116 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.715698004 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.715725899 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.715730906 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.715958118 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.715970039 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716221094 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716275930 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716306925 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716336966 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716346979 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716392040 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716620922 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716660976 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716700077 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716710091 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716731071 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.716742039 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716844082 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.716852903 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717016935 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717173100 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717200994 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717231035 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717242956 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717272997 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717467070 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717510939 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717518091 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717526913 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717545986 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717631102 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717633963 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717653036 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.717689991 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.717834949 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926367044 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926400900 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926497936 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926497936 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926522970 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926762104 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926805019 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926840067 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926851034 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926877975 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926881075 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.926953077 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.926964045 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.927000046 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.927032948 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.927045107 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.927071095 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.927130938 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.927189112 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.930604935 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.933672905 CEST	49760	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.933706045 CEST	443	49760	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.951581001 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.951639891 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.955965996 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:04.956022024 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:04.956160069 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:04.957784891 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:04.957813025 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:04.960386038 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.960460901 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:04.960880995 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.960880995 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:04.960967064 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.063290119 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:05.063354015 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:05.063488007 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:05.401746988 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.402446985 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.402483940 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.403616905 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.403992891 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.404144049 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.404171944 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.440483093 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.440726042 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.440761089 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.441152096 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.441462994 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.441538095 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.441590071 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.444133043 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.444161892 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.446152925 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.446309090 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.446371078 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.448990107 CEST	49761	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.449033022 CEST	443	49761	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.484152079 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.490724087 CEST	49739	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:05.490745068 CEST	443	49739	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:05.491051912 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.818825960 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.819175959 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.819329023 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.819686890 CEST	49763	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:05.819719076 CEST	443	49763	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:05.931308985 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.931332111 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.931411028 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.931452990 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.932182074 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.932245016 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.933455944 CEST	49762	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.933481932 CEST	443	49762	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.938421011 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.938507080 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:05.938591003 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.938798904 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:05.938836098 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.423331022 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.423579931 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.423628092 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.423974037 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.424319983 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.424391985 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.424448967 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.472111940 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.951086044 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.951105118 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.951175928 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.951235056 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.951838017 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.951896906 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.953474998 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.953505993 CEST	443	49765	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:06.953619957 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:06.953643084 CEST	49765	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:08.982990026 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:08.983078957 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:08.983160019 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:08.983824015 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:08.983876944 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.424669027 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.425010920 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.425050974 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.425403118 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.426012039 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.426083088 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.426836967 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.426949024 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.426985025 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.876578093 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.876653910 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:09.876708984 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.877057076 CEST	49771	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:09.877089977 CEST	443	49771	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:13.757397890 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.757436991 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:13.757548094 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.758508921 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.758527994 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:13.758524895 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.758606911 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:13.758781910 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.759325981 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:13.759360075 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.259413958 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.259743929 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.259763002 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.260065079 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.260533094 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.260608912 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.260798931 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.260942936 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.261203051 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.261238098 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.262861967 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.263339996 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.263437033 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.305156946 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.308115005 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.757159948 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.757199049 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.757251978 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.757262945 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.757277012 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.757339001 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.758769989 CEST	49772	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.758789062 CEST	443	49772	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:14.826194048 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:14.868196964 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.000319958 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.000430107 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.000524044 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.000737906 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.000772953 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.025382996 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.025475979 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.025626898 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.025830030 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.025861025 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.084862947 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.084939957 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.084988117 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.085012913 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.085059881 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.085110903 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.085134029 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.085182905 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.089047909 CEST	49773	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.089078903 CEST	443	49773	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.090289116 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.090331078 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.090409040 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.090671062 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.090697050 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.091444969 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.091487885 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.091619015 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.092019081 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.092041969 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.093220949 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.093244076 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.093399048 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.093607903 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.093621016 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.496957064 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.497200966 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.497246981 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.497598886 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.498100042 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.498168945 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.498255014 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.507241964 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.507467985 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.507509947 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.508704901 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.509007931 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.509115934 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.509128094 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.509185076 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.531276941 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.531480074 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.531502008 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.531845093 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.532149076 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.532212973 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.532241106 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.544115067 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.548348904 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.553204060 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.553792953 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.553852081 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.554970980 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.555295944 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.555474043 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.555653095 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.564261913 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.576136112 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.579487085 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.581559896 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.586733103 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.586747885 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.587224960 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.587765932 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.587841988 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.587961912 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.596160889 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.628143072 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.930078983 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.931372881 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.931467056 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.943552971 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943589926 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943649054 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943655968 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.943689108 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943711996 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943746090 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943761110 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.943803072 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943829060 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.943856001 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.943856001 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.949558973 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.949692011 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.949745893 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.969194889 CEST	49776	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:15.969235897 CEST	443	49776	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:15.984198093 CEST	49778	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:15.984240055 CEST	443	49778	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:15.990818024 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.021212101 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:16.021385908 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:16.021450996 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:16.027568102 CEST	49777	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:16.027607918 CEST	443	49777	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:16.037766933 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.037826061 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.037938118 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.037947893 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.038084984 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.038088083 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.038238049 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.040399075 CEST	49779	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.040410042 CEST	443	49779	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158207893 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158222914 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158266068 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158277035 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158325911 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158330917 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158333063 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158374071 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158381939 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158428907 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158483982 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158490896 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158533096 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158555984 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158691883 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.158757925 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.158771038 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.209484100 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.372900009 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.372911930 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.372966051 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.372978926 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.373029947 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.373030901 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.373533010 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.373539925 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.373601913 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.373624086 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374103069 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374115944 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374161005 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.374172926 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374407053 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374448061 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374458075 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.374492884 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374515057 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.374697924 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374758005 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.374769926 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374787092 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:16.374819040 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.374854088 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.375689030 CEST	49774	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:16.375736952 CEST	443	49774	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:17.755767107 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.755795002 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:17.755873919 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.756120920 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.756196976 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:17.756275892 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.757211924 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.757249117 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:17.757777929 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:17.757791996 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:17.807570934 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:17.807600975 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:17.807676077 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:17.808010101 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:17.808037043 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.247143984 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.247497082 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.247556925 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.247912884 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.248318911 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.248394966 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.248589993 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.251827002 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.254004002 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.254061937 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.254565954 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.254940033 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.255026102 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.255453110 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.255620956 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.255656004 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.266216040 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.266407013 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.266429901 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.267538071 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.268259048 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.268431902 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.292140007 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.313433886 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.692682981 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.692766905 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.693130016 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.699259996 CEST	49780	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.699295044 CEST	443	49780	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:18.705241919 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.705319881 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.705579042 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.708247900 CEST	49782	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:18.708283901 CEST	443	49782	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:18.776632071 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:18.824148893 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.039935112 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.039992094 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.040031910 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.040074110 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.040122032 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.040198088 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.040258884 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.071929932 CEST	49781	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.071957111 CEST	443	49781	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.175606012 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.175632000 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.175905943 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.177172899 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.177192926 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.443787098 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.443881989 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.443955898 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.444670916 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.444721937 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.662954092 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.663269043 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.663284063 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.663621902 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.663995028 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.664057016 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.664128065 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.708141088 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.881329060 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.881432056 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:19.881504059 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.882083893 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.882117987 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:19.923620939 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.923650980 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:19.923707008 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.924793959 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:19.924803972 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:19.931546926 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.934521914 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.934545040 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.935028076 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.939469099 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.939549923 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:19.940700054 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:19.984162092 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.104727030 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.105967045 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.106013060 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.110421896 CEST	49783	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.110433102 CEST	443	49783	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.340010881 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.340998888 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.341041088 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.341538906 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.343549013 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.343635082 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.344193935 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.377219915 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.378149986 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.378227949 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.378309011 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.378360033 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.378422976 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.378967047 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.379098892 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.379149914 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.391995907 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.392005920 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.392121077 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.393263102 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.394642115 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.394815922 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.402046919 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.411097050 CEST	49784	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.411125898 CEST	443	49784	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.435733080 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.435826063 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.439302921 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.443092108 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.443146944 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.444143057 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.780041933 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.780272961 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.780739069 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.787096024 CEST	49785	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.787137032 CEST	443	49785	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.837555885 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.837728024 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.837896109 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.837960958 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.837960958 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.837975025 CEST	443	49786	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:20.843605042 CEST	49786	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:20.953118086 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.953778982 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.953800917 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.954269886 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.955849886 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.955925941 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:20.956048965 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:20.996124029 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408624887 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408660889 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408730030 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:21.408787966 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408843040 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:21.408857107 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408895016 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:21.408937931 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:21.410017014 CEST	49787	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:21.410048962 CEST	443	49787	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:23.899420977 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:23.899493933 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:23.899651051 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:23.900053978 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:23.900089979 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.349281073 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.349575996 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.349608898 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.349927902 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.350328922 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.350404024 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.350703955 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.350811958 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.350846052 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.810830116 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.810908079 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.811048031 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.811230898 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.811230898 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:24.811268091 CEST	443	49788	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:24.811328888 CEST	49788	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:29.816982985 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817018032 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:29.817121983 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817173958 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817217112 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:29.817276001 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817522049 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817545891 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:29.817831039 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:29.817847967 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.310935020 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.324840069 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.325506926 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.325567961 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.325658083 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.325720072 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.325987101 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.326873064 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.326951981 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.327028990 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.327678919 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.327868938 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.328178883 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.368326902 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.372148037 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.808832884 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.808855057 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.808916092 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.808924913 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:30.808983088 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.812225103 CEST	49789	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:30.812278032 CEST	443	49789	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.108846903 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.152158022 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.350965977 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.350990057 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.351160049 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.351506948 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.351522923 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.353229046 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.353288889 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.353341103 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.353360891 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.353404045 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.353462934 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.366405010 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.366539001 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.366599083 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.375098944 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.375185966 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.375288963 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.375828028 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.375878096 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.378882885 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.378920078 CEST	443	49790	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.378946066 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.378985882 CEST	49790	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.449034929 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.449105024 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.449198961 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.449417114 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.449449062 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.471524954 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.471558094 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.471617937 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.471885920 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.471908092 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.827775002 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.828022957 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.828046083 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.829157114 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.829616070 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.829750061 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.829756021 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.829782009 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.876311064 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.876503944 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.876523018 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.877003908 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.877486944 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.877572060 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.877619028 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.881630898 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.909460068 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.909745932 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.909805059 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.910290956 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.910729885 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.910830021 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.911245108 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:31.920137882 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.927819967 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.952142954 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:31.961934090 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.962167025 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.962188959 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.963336945 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.963844061 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:31.963953018 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:31.963970900 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.008121967 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.017427921 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.258665085 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.259006023 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.259090900 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:32.259227991 CEST	49792	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:32.259262085 CEST	443	49792	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.319597006 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.319793940 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.319849014 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.320893049 CEST	49791	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.320909023 CEST	443	49791	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.388333082 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.388452053 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.388669014 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:32.388741016 CEST	443	49793	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:32.388775110 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:32.388813019 CEST	49793	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:32.413935900 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.413997889 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.414020061 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.414060116 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.414083958 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.414115906 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.414165974 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:32.414213896 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.414849043 CEST	49794	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:32.414872885 CEST	443	49794	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:33.751023054 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.751126051 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:33.751198053 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.751368046 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.751468897 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:33.751530886 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.752238035 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.752274990 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:33.752453089 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:33.752485037 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:33.765654087 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:33.765696049 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:33.765808105 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:33.766259909 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:33.766278028 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.215078115 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.228869915 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.243614912 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.243644953 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.243839025 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.243895054 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.244263887 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.244431019 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.244923115 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.245023966 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.245553970 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.245651960 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.245687962 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.246340036 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.246521950 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.246556044 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.253750086 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.253974915 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.254031897 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.254355907 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.254686117 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.254751921 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.288126945 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.295809984 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.673871040 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.674103022 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.674159050 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.675554037 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.675597906 CEST	443	49795	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.675633907 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.675657034 CEST	49795	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.676090956 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.681740999 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.681811094 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.681971073 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.682113886 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.682162046 CEST	443	49797	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:34.682269096 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.682269096 CEST	49797	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:34.720163107 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925126076 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925164938 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925221920 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925232887 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.925273895 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925290108 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:34.925339937 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.961333990 CEST	49796	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:34.961354971 CEST	443	49796	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.224558115 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.224602938 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.224714994 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.230047941 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.230067015 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.539441109 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.539479971 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.539539099 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.539843082 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.539860964 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.561708927 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.561738968 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:35.561795950 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.562251091 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.562266111 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:35.575162888 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.575246096 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:35.575315952 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.575606108 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:35.575637102 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:35.715667963 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.720451117 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.720470905 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.720943928 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.722165108 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.722249985 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:35.722908020 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:35.768122911 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.020728111 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.021351099 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.021373987 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.021847010 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.023319960 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.023397923 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.024852991 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.031888962 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.032535076 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.032598019 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.033776999 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.035197020 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.035296917 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.036166906 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.040071964 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.040353060 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.040378094 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.041534901 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.042200089 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.042375088 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.042650938 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.068162918 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.080147982 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.088155985 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.153943062 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.154594898 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.154668093 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.157305002 CEST	49798	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.157341003 CEST	443	49798	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.461289883 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.461436987 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.461544991 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.466095924 CEST	49800	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.466114998 CEST	443	49800	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.486890078 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.486948013 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.487011909 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.487034082 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.487086058 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.487117052 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.487162113 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.492088079 CEST	49799	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.492104053 CEST	443	49799	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.496115923 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.496309042 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.496464968 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.497502089 CEST	49801	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:36.497536898 CEST	443	49801	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:36.555706978 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.555777073 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:36.555855989 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.556152105 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:36.556171894 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.030945063 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.031258106 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.031279087 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.031750917 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.032160997 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.032237053 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.032330036 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.080115080 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.084353924 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.469938040 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.469969034 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.469979048 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.470032930 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.470052958 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:37.470063925 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.470087051 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.624423027 CEST	49802	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:37.624495983 CEST	443	49802	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:39.598516941 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:39.598613024 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:39.598696947 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:39.599411964 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:39.599447012 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.059520960 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.060211897 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.060237885 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.060729027 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.061321974 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.061400890 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.062082052 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.062297106 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.062323093 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.528783083 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.528868914 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.529073954 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.529241085 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.529285908 CEST	443	49803	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:40.529314041 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:40.529397964 CEST	49803	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:45.793803930 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.793847084 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:45.793940067 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.794414043 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.794516087 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:45.794593096 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.796603918 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.796623945 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:45.797127962 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:45.797163010 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.283859968 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.284765005 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.284796953 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.285185099 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.286091089 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.286132097 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.286156893 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.286811113 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.286847115 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.287105083 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.287348032 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.290750980 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.290859938 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.328125954 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.333657026 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.739140987 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.739200115 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.739270926 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.739295959 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.739341021 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.739360094 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:46.739403009 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.740287066 CEST	49806	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:46.740303993 CEST	443	49806	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.234415054 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.280119896 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.475848913 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.475872993 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.475908041 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.475953102 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.475976944 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.476052999 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.477272987 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.477336884 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.477410078 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.624888897 CEST	49805	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.624933004 CEST	443	49805	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.763936043 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.763987064 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.764156103 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.764972925 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.764988899 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.866692066 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.866750956 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:47.866825104 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.867352009 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.867367983 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:47.876157999 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.876203060 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:47.876948118 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.877314091 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:47.877327919 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:47.907803059 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.907845020 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:47.907912970 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.908236980 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:47.908252954 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.247853041 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.248262882 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.248306036 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.249424934 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.250022888 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.250200033 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.250294924 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.296161890 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.317459106 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.317790031 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.317831039 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.318177938 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.318726063 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.318785906 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.318980932 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.329293966 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.329572916 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.329631090 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.329986095 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.330473900 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.330545902 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.330902100 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.360131979 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.376121044 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.405621052 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.405935049 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.405993938 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.406481981 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.407011032 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.407105923 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.407216072 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.452114105 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.680566072 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.680735111 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.680798054 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.681315899 CEST	49808	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.681335926 CEST	443	49808	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.750794888 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.750962019 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.751116037 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.752274036 CEST	49809	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.752298117 CEST	443	49809	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.794462919 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.794645071 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.794758081 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.795135975 CEST	49810	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:48.795176029 CEST	443	49810	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:48.851521969 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.851552010 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.851619959 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.851655006 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.851682901 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:48.851700068 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.851728916 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.867640018 CEST	49811	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:48.867688894 CEST	443	49811	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:51.917715073 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:51.917814970 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:51.917926073 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:51.918380022 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:51.918414116 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.375955105 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.376353025 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.376411915 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.376780987 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.377279043 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.377343893 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.378341913 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.378469944 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.378521919 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.849869967 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.849946022 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.851217985 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.851274967 CEST	443	49814	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:52.851310968 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:52.851401091 CEST	49814	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:54.738200903 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:54.738265038 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:54.738348007 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:54.738574982 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:54.738595963 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:54.964025974 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:54.964329004 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:54.964371920 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:54.964732885 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:54.965066910 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:54.965138912 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:23:55.018119097 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:23:57.787269115 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.787300110 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:57.787760019 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.791232109 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.791266918 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:57.795320034 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.795320034 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.795331001 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:57.796183109 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:57.796195984 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.283447981 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.283919096 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.283943892 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.284425974 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.284985065 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.284985065 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.284998894 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.285063028 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.286068916 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.286274910 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.286287069 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.287414074 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.287790060 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.287956953 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.340941906 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.340946913 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.747951031 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.748017073 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.748055935 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.748085976 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.748111963 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.748141050 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.748215914 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.748271942 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.750210047 CEST	49817	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.750221968 CEST	443	49817	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:58.929258108 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:58.976120949 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168344975 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168370962 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168380022 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168425083 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.168433905 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168473005 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.168478966 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.168513060 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.347174883 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.347203016 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.347278118 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.347840071 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.347856045 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.459182024 CEST	49816	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.459198952 CEST	443	49816	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.578655958 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.578679085 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:59.578743935 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.584163904 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.584178925 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:59.589845896 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.589936018 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:59.590039015 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.608381033 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:23:59.608414888 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:23:59.855393887 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.855451107 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.855518103 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.855957031 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.855977058 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.860351086 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.860752106 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.860780001 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.861121893 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.862354040 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.862413883 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:23:59.862700939 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:23:59.908107996 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.046866894 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.047307014 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.047322989 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.048502922 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.048856020 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.048985958 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.048990011 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.049022913 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.053282976 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.053623915 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.053684950 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.054061890 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.054404974 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.054472923 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.054800034 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.095412016 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.096129894 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.304008961 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.304438114 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.304521084 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.304662943 CEST	49818	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.304697990 CEST	443	49818	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.357517958 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.373012066 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.373059988 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.373613119 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.374068022 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.374161005 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.374460936 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.416155100 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.485022068 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.485375881 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.488029957 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.489845991 CEST	49819	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.489859104 CEST	443	49819	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.514617920 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.514698982 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.514780998 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.542815924 CEST	49820	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:00.542871952 CEST	443	49820	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:00.822566032 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.822596073 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.822696924 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:00.822721958 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.822756052 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.841125965 CEST	49821	443	192.168.2.4	2.58.164.9
Apr 25, 2024 08:24:00.841165066 CEST	443	49821	2.58.164.9	192.168.2.4
Apr 25, 2024 08:24:01.288501978 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 25, 2024 08:24:01.288547039 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 25, 2024 08:24:01.397761106 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 25, 2024 08:24:01.397775888 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 25, 2024 08:24:01.397881985 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 25, 2024 08:24:01.398030043 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 25, 2024 08:24:01.398062944 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 25, 2024 08:24:01.399310112 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 25, 2024 08:24:03.744652033 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:03.744699001 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:03.744863033 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:03.745210886 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:03.745234013 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.208311081 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.208606005 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.208625078 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.209791899 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.210131884 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.210305929 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.210576057 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.210696936 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.210742950 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.677238941 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.677387953 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.677458048 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.677706957 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.677736998 CEST	443	49822	2.58.165.70	192.168.2.4
Apr 25, 2024 08:24:04.677767038 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.677787066 CEST	49822	443	192.168.2.4	2.58.165.70
Apr 25, 2024 08:24:04.996239901 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:24:04.996310949 CEST	443	49815	142.250.105.103	192.168.2.4
Apr 25, 2024 08:24:04.996371031 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:24:05.743468046 CEST	49815	443	192.168.2.4	142.250.105.103
Apr 25, 2024 08:24:05.743498087 CEST	443	49815	142.250.105.103	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 08:22:51.143090010 CEST	53	61350	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:51.145504951 CEST	53	50866	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:52.011223078 CEST	53	57426	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:53.600781918 CEST	55178	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:53.600929022 CEST	53478	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:54.539617062 CEST	53	55178	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:54.683533907 CEST	50812	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:54.683774948 CEST	61217	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:54.759474993 CEST	53	53478	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:54.795509100 CEST	53	61217	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:54.796166897 CEST	53	50812	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:57.084862947 CEST	49332	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:57.085417032 CEST	58443	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:22:57.288292885 CEST	53	49332	1.1.1.1	192.168.2.4
Apr 25, 2024 08:22:58.325504065 CEST	53	58443	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:00.634469032 CEST	53	58625	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:00.923233986 CEST	61739	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:23:00.923470974 CEST	65342	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:23:02.599941969 CEST	53	65342	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:02.705095053 CEST	53	61739	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:09.276997089 CEST	53	49602	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:12.862684965 CEST	138	138	192.168.2.4	192.168.2.255
Apr 25, 2024 08:23:32.212567091 CEST	53	57187	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:50.862659931 CEST	53	57932	1.1.1.1	192.168.2.4
Apr 25, 2024 08:23:58.660455942 CEST	53	60581	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 25, 2024 08:22:54.759572983 CEST	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:22:58.325582981 CEST	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 08:22:53.600781918 CEST	192.168.2.4	1.1.1.1	0x4fe5	Standard query (0)	web.leitz-cloud.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:53.600929022 CEST	192.168.2.4	1.1.1.1	0x6da4	Standard query (0)	web.leitz-cloud.com	65	IN (0x0001)	false
Apr 25, 2024 08:22:54.683533907 CEST	192.168.2.4	1.1.1.1	0x545d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.683774948 CEST	192.168.2.4	1.1.1.1	0xaa4b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 08:22:57.084862947 CEST	192.168.2.4	1.1.1.1	0xff	Standard query (0)	web.leitz-cloud.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:57.085417032 CEST	192.168.2.4	1.1.1.1	0x5409	Standard query (0)	web.leitz-cloud.com	65	IN (0x0001)	false
Apr 25, 2024 08:23:00.923233986 CEST	192.168.2.4	1.1.1.1	0x9a1e	Standard query (0)	analytics.vboxx.eu	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:23:00.923470974 CEST	192.168.2.4	1.1.1.1	0x98b1	Standard query (0)	analytics.vboxx.eu	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 08:22:54.539617062 CEST	1.1.1.1	192.168.2.4	0x4fe5	No error (0)	web.leitz-cloud.com		2.58.164.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.795509100 CEST	1.1.1.1	192.168.2.4	0xaa4b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:54.796166897 CEST	1.1.1.1	192.168.2.4	0x545d	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:22:57.288292885 CEST	1.1.1.1	192.168.2.4	0xff	No error (0)	web.leitz-cloud.com		2.58.164.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:23:02.705095053 CEST	1.1.1.1	192.168.2.4	0x9a1e	No error (0)	analytics.vboxx.eu		2.58.165.70	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:23:06.447345018 CEST	1.1.1.1	192.168.2.4	0x6f04	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:23:06.447345018 CEST	1.1.1.1	192.168.2.4	0x6f04	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:23:19.218401909 CEST	1.1.1.1	192.168.2.4	0x10b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:23:19.218401909 CEST	1.1.1.1	192.168.2.4	0x10b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:23:51.307756901 CEST	1.1.1.1	192.168.2.4	0x947c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:23:51.307756901 CEST	1.1.1.1	192.168.2.4	0x947c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:24:04.025603056 CEST	1.1.1.1	192.168.2.4	0x5c37	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:24:04.025603056 CEST	1.1.1.1	192.168.2.4	0x5c37	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:24:17.711112022 CEST	1.1.1.1	192.168.2.4	0xba07	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:24:17.711112022 CEST	1.1.1.1	192.168.2.4	0xba07	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

web.leitz-cloud.com

https:

analytics.vboxx.eu

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:55 UTC	688	OUT	GET /shares/folder/k11NnLCmDNb/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:22:55 UTC	802	IN	HTTP/1.1 302 FOUND Date: Thu, 25 Apr 2024 06:22:55 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 383 Location: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Set-Cookie: logged_in=0; Path=/ X-Request-Id: 767edf9f-5538-45b3-9ddb-0862d5329d31 Last-Modified: 2024-04-25 08:22:55.445858 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: text/html; charset=utf-8
2024-04-25 06:22:55 UTC	383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 3f 64 6f 6d 61 69 6e 3d 61 62 74 61 78 2d 53 74 65 75 65 72 62 65 72 61 74 75 6e 67 26 61 6d 70 3b 6e 65 78 74 3d 25 32 46 73 68 61 72 65 73 25 32 46 66 6f 6c 64 65 72 25 32 46 6b 31 31 4e 6e 4c 43 6d Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:55 UTC	766	OUT	GET /auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0
2024-04-25 06:22:55 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:55 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6806 Set-Cookie: logged_in=0; Path=/ X-Request-Id: 9c11e761-3934-4981-8a62-5ca2d2cde1b1 Last-Modified: 2024-04-25 08:22:55.805269 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:55 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:22:55 UTC	6806	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	791	OUT	GET /static/gen/main.ed99ea6b.min.css HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 428244 Last-Modified: Sat, 25 Mar 2023 07:08:19 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1679728099.0-428244-186652598" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: text/css; charset=utf-8
2024-04-25 06:22:57 UTC	7325	IN	Data Raw: 2e 63 74 2d 6c 61 62 65 6c 7b 66 69 6c 6c 3a 23 33 63 33 63 34 36 3b 63 6f 6c 6f 72 3a 23 33 63 33 63 34 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 63 74 2d 63 68 61 72 74 2d 6c 69 6e 65 20 2e 63 74 2d 6c 61 62 65 6c 2c 2e 63 74 2d 63 68 61 72 74 2d 62 61 72 20 2e 63 74 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 63 74 2d 63 68 61 72 74 2d 70 69 65 20 2e 63 74 2d 6c 61 62 65 6c 2c 2e 63 74 2d 63 68 61 72 74 Data Ascii: .ct-label{fill:#3c3c46;color:#3c3c46;font-size:.75rem;line-height:1}.ct-chart-line .ct-label,.ct-chart-bar .ct-label{display:block;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex}.ct-chart-pie .ct-label,.ct-chart
2024-04-25 06:22:57 UTC	867	IN	Data Raw: 6f 74 74 6f 6d 3a 38 38 2e 38 38 38 38 38 38 38 38 38 39 25 7d 2e 63 74 2d 6d 61 6a 6f 72 2d 73 65 63 6f 6e 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 74 2d 6d 61 6a 6f 72 2d 73 65 63 6f 6e 64 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 7d 2e 63 74 2d 6d 69 6e 6f 72 2d 74 68 69 72 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 74 2d 6d 69 6e 6f 72 2d 74 68 69 72 64 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6f Data Ascii: ottom:88.8888888889%}.ct-major-second:after{content:"";display:table;clear:both}.ct-major-second>svg{display:block;position:absolute;top:0;left:0}.ct-minor-third{display:block;position:relative;width:100%}.ct-minor-third:before{display:block;float:left;co
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 37 35 25 7d 2e 63 74 2d 70 65 72 66 65 63 74 2d 66 6f 75 72 74 68 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 74 2d 70 65 72 66 65 63 74 2d 66 6f 75 72 74 68 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 7d 2e 63 74 2d 70 65 72 66 65 63 74 2d 66 69 66 74 68 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 74 2d 70 65 72 66 65 63 74 2d 66 69 66 74 68 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b Data Ascii: 75%}.ct-perfect-fourth:after{content:"";display:table;clear:both}.ct-perfect-fourth>svg{display:block;position:absolute;top:0;left:0}.ct-perfect-fifth{display:block;position:relative;width:100%}.ct-perfect-fifth:before{display:block;float:left;content:"";
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 20 62 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 38 38 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 35 70 78 20 34 70 78 20 30 20 34 70 78 3b 68 65 69 67 68 74 3a 30 3b 6c 65 66 74 3a Data Ascii: eight:26px;position:absolute;top:1px;right:1px;width:20px}.select2-container--default .select2-selection--single .select2-selection__arrow b{border-color:#888 transparent transparent transparent;border-style:solid;border-width:5px 4px 0 4px;height:0;left:
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 66 66 20 30 2c 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 66 66 20 30 2c 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 66 66 66 20 30 2c 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e Data Ascii: border-top:none;border-top-left-radius:0;border-top-right-radius:0;background-image:-webkit-linear-gradient(top,#fff 0,#eee 50%);background-image:-o-linear-gradient(top,#fff 0,#eee 50%);background-image:linear-gradient(to bottom,#fff 0,#eee 50%);backgroun
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 62 61 63 6b 73 70 61 63 65 2d 72 65 76 65 72 73 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 38 22 7d 2e 62 69 2d 62 61 63 6b 73 70 61 63 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 39 22 7d 2e 62 69 2d 62 61 64 67 65 2d 33 64 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 61 22 7d 2e 62 69 2d 62 61 64 67 65 2d 33 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 62 22 7d 2e 62 69 2d 62 61 64 67 65 2d 34 6b 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 63 22 7d 2e 62 69 2d 62 61 64 67 65 2d 34 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 64 22 7d 2e 62 69 2d 62 61 64 67 65 2d 38 6b 2d 66 69 6c 6c Data Ascii: backspace-reverse::before{content:"\f158"}.bi-backspace::before{content:"\f159"}.bi-badge-3d-fill::before{content:"\f15a"}.bi-badge-3d::before{content:"\f15b"}.bi-badge-4k-fill::before{content:"\f15c"}.bi-badge-4k::before{content:"\f15d"}.bi-badge-8k-fill
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 61 22 7d 2e 62 69 2d 63 61 6d 65 72 61 2d 72 65 65 6c 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 62 22 7d 2e 62 69 2d 63 61 6d 65 72 61 2d 76 69 64 65 6f 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 63 22 7d 2e 62 69 2d 63 61 6d 65 72 61 2d 76 69 64 65 6f 2d 6f 66 66 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 64 22 7d 2e 62 69 2d 63 61 6d 65 72 61 2d 76 69 64 65 6f 2d 6f 66 66 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 65 22 7d 2e 62 69 2d 63 61 6d 65 72 61 2d 76 69 64 65 6f 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 66 22 7d 2e 62 69 2d 63 61 6d 65 72 61 3a 3a 62 65 66 6f Data Ascii: content:"\f21a"}.bi-camera-reels::before{content:"\f21b"}.bi-camera-video-fill::before{content:"\f21c"}.bi-camera-video-off-fill::before{content:"\f21d"}.bi-camera-video-off::before{content:"\f21e"}.bi-camera-video::before{content:"\f21f"}.bi-camera::befo
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 69 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 63 22 7d 2e 62 69 2d 63 72 6f 70 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 64 22 7d 2e 62 69 2d 63 75 70 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 65 22 7d 2e 62 69 2d 63 75 70 2d 73 74 72 61 77 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 66 22 7d 2e 62 69 2d 63 75 70 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 30 22 7d 2e 62 69 2d 63 75 72 73 6f 72 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 31 22 7d 2e 62 69 2d 63 75 72 73 6f 72 2d 74 65 78 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 Data Ascii: i-credit-card::before{content:"\f2dc"}.bi-crop::before{content:"\f2dd"}.bi-cup-fill::before{content:"\f2de"}.bi-cup-straw::before{content:"\f2df"}.bi-cup::before{content:"\f2e0"}.bi-cursor-fill::before{content:"\f2e1"}.bi-cursor-text::before{content:"\f2e
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 65 6c 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 35 22 7d 2e 62 69 2d 66 69 6c 65 2d 65 78 63 65 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 36 22 7d 2e 62 69 2d 66 69 6c 65 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 37 22 7d 2e 62 69 2d 66 69 6c 65 2d 66 6f 6e 74 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 38 22 7d 2e 62 69 2d 66 69 6c 65 2d 66 6f 6e 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 39 22 7d 2e 62 69 2d 66 69 6c 65 2d 69 6d 61 67 65 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 61 22 7d 2e 62 69 2d 66 69 6c 65 2d 69 6d 61 67 65 3a 3a 62 65 66 6f 72 Data Ascii: el-fill::before{content:"\f395"}.bi-file-excel::before{content:"\f396"}.bi-file-fill::before{content:"\f397"}.bi-file-font-fill::before{content:"\f398"}.bi-file-font::before{content:"\f399"}.bi-file-image-fill::before{content:"\f39a"}.bi-file-image::befor
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 75 74 2d 74 65 78 74 2d 73 69 64 65 62 61 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 32 22 7d 2e 62 69 2d 6c 61 79 6f 75 74 2d 74 65 78 74 2d 77 69 6e 64 6f 77 2d 72 65 76 65 72 73 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 33 22 7d 2e 62 69 2d 6c 61 79 6f 75 74 2d 74 65 78 74 2d 77 69 6e 64 6f 77 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 34 22 7d 2e 62 69 2d 6c 61 79 6f 75 74 2d 74 68 72 65 65 2d 63 6f 6c 75 6d 6e 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 35 22 7d 2e 62 69 2d 6c 61 79 6f 75 74 2d 77 74 66 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 36 22 7d 2e 62 69 2d 6c 69 66 65 2d 70 72 65 73 65 72 76 65 72 3a 3a 62 65 66 6f 72 Data Ascii: ut-text-sidebar::before{content:"\f462"}.bi-layout-text-window-reverse::before{content:"\f463"}.bi-layout-text-window::before{content:"\f464"}.bi-layout-three-columns::before{content:"\f465"}.bi-layout-wtf::before{content:"\f466"}.bi-life-preserver::befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:22:56 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=175239 Date: Thu, 25 Apr 2024 06:22:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	788	OUT	GET /custom/styles.css?v=3.6.0.117 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	871	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 38187 Last-Modified: Thu, 21 Mar 2024 22:15:43 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1711059343.0484192-38187-333516455" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: text/css; charset=utf-8
2024-04-25 06:22:57 UTC	7321	IN	Data Raw: 2f 2a 4c 65 69 74 7a 43 6c 6f 75 64 2a 2f 0a 2f 2a 47 6c 6f 62 61 6c 20 76 61 72 69 61 62 6c 65 73 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 32 62 34 64 38 61 3b 0a 20 20 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 31 36 32 37 34 35 3b 0a 20 20 20 20 2d 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 32 39 35 65 62 34 3b 0a 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 31 36 32 37 34 35 3b 0a 20 20 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 32 62 34 64 38 61 3b 0a 20 20 20 20 2d 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 32 39 35 65 62 34 3b 0a 0a 20 20 20 20 Data Ascii: /LeitzCloud//Global variables /:root { --primary-color: #2b4d8a; --secondary-color: #162745; --tertiary-color: #295eb4; --primary-color-hover: #162745; --secondary-color-hover: #2b4d8a; --tertiary-color-hover: #295eb4;
2024-04-25 06:22:57 UTC	871	IN	Data Raw: 20 73 70 61 6e 5b 63 6c 61 73 73 2a 3d 22 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 70 78 3b 0a 7d 0a 73 70 61 6e 2e 66 69 6c 65 6e 61 76 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2e 6d 72 2d 31 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 70 78 3b 0a 7d 0a 61 2e 64 2d 62 6c 6f 63 6b 2e 70 2d 32 2e 70 79 2d 73 6d 2d 35 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 63 33 63 34 36 3b 0a 7d 0a 61 2e 64 2d 62 6c 6f 63 6b 2e 70 2d 32 2e 70 79 2d 73 6d 2d 35 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 64 69 76 2e Data Ascii: span[class*="icon-"] { padding-right: 4px;}span.filenav-icon.icon-folder.mr-1 { padding-right: 4px;}a.d-block.p-2.py-sm-5 { color: #3c3c46;}a.d-block.p-2.py-sm-5:hover { color: var(--primary-color); text-decoration: none;}div.
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 74 2d 66 6f 6c 64 65 72 2d 73 68 61 72 65 64 2d 74 65 61 6d 73 68 61 72 65 73 2e 73 76 67 22 29 0a 7d 0a 2e 69 63 6f 6e 2d 63 6c 6f 73 65 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 37 22 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 73 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 64 65 66 61 75 6c 74 2f 69 6d 61 67 65 73 2f 73 76 67 2f 63 6f 6e 74 65 78 74 2d 74 72 61 73 68 2e 73 76 67 29 3b 0a 7d 0a 73 70 61 6e 2e 6d 61 69 6e 2d 6d 65 6e 75 2d 6c 69 6e 6b 5f 5f 69 63 6f 6e 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 73 68 61 72 65 64 2d 62 79 2d 6d 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 Data Ascii: t-folder-shared-teamshares.svg")}.icon-close-circle:before { content: "\e927"; color: transparent; background-image: url(/static/themes/default/images/svg/context-trash.svg);}span.main-menu-link__icon.icon-folder-shared-by-me:before {
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 64 65 66 61 75 6c 74 2f 69 6d 61 67 65 73 2f 73 76 67 2f 69 63 6f 6e 73 65 74 2d 66 69 6c 65 74 79 70 65 2d 69 6d 61 67 65 2e 73 76 67 22 29 3b 0a 7d 0a 0a 2e 69 63 6f 6e 2d 66 69 6c 65 74 79 70 65 2d 7a 69 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 64 65 66 61 75 6c 74 2f 69 6d 61 67 65 73 2f 73 76 67 2f 69 63 6f 6e 73 65 74 2d 66 69 6c 65 74 79 70 65 2d 7a 69 70 2e 73 76 67 22 29 3b 0a 7d 0a 0a Data Ascii: or: transparent; background-image: url("/static/themes/default/images/svg/iconset-filetype-image.svg");}.icon-filetype-zip:before { color: transparent; background-image: url("/static/themes/default/images/svg/iconset-filetype-zip.svg");}
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 2d 67 65 6e 65 72 69 63 2e 6d 72 2d 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 65 78 74 2d 74 6f 70 3b 0a 7d 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 20 3e 20 73 70 61 6e 2e 69 63 6f 6e 2d 75 73 65 72 2e 6d 72 2d 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 65 78 74 2d 74 6f 70 3b 0a 7d 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 20 3e 20 73 70 61 6e 2e 69 63 6f 6e 2d 73 65 6c 65 63 74 2d 6f 6e 2d 71 75 65 72 79 2e 6d 72 2d 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e Data Ascii: -generic.mr-1 { font-size: 1.25rem; vertical-align: text-top;}.card-header > span.icon-user.mr-1 { font-size: 1.25rem; vertical-align: text-top;}.card-header > span.icon-select-on-query.mr-1 { font-size: 1.25rem; vertical-align
2024-04-25 06:22:57 UTC	5419	IN	Data Raw: 65 76 5f 63 6f 6e 74 20 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 33 73 2c 20 6d 61 72 67 69 6e 2d 74 6f 70 20 2e 33 73 3b 0a 7d 0a 0a 2e 70 72 65 76 5f 63 6f 6e 74 20 3e 20 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 30 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 30 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 39 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 Data Ascii: ev_cont { z-index: 2; opacity: 1; margin-top: 6px; transition: opacity .3s, margin-top .3s;}.prev_cont > img { border: none; -webkit-transform-origin: 0 0; transform-origin: 0 0; max-width: 290px !important; max-heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	785	OUT	GET /static/js/translations/de.js?v=3.6.0.117 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 12770 Last-Modified: Thu, 21 Mar 2024 22:15:41 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1711059341.7521856-12770-3111982889" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:57 UTC	7306	IN	Data Raw: 77 69 6e 64 6f 77 2e 42 41 42 45 4c 5f 43 41 54 41 4c 4f 47 5f 64 65 20 3d 20 7b 22 64 6f 6d 61 69 6e 22 3a 20 22 43 3a 5c 5c 55 73 65 72 73 5c 5c 76 62 6f 78 78 5c 5c 44 6f 63 75 6d 65 6e 74 73 5c 5c 47 69 74 48 75 62 5c 5c 75 70 64 61 74 65 2d 73 63 72 69 70 74 5c 5c 63 6f 6d 6d 6f 6e 5c 5c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5c 5c 64 65 5c 5c 4c 43 5f 4d 45 53 53 41 47 45 53 5c 5c 6d 65 73 73 61 67 65 73 5f 6a 73 22 2c 20 22 6c 6f 63 61 6c 65 22 3a 20 22 64 65 22 2c 20 22 6d 65 73 73 61 67 65 73 22 3a 20 7b 22 22 3a 20 22 50 72 6f 6a 65 63 74 2d 49 64 2d 56 65 72 73 69 6f 6e 3a 20 50 52 4f 4a 45 43 54 20 56 45 52 53 49 4f 4e 5c 6e 52 65 70 6f 72 74 2d 4d 73 67 69 64 2d 42 75 67 73 2d 54 6f 3a 20 45 4d 41 49 4c 40 41 44 44 52 45 53 53 5c 6e 50 4f 54 2d Data Ascii: window.BABEL_CATALOG_de = {"domain": "C:\\Users\\vboxx\\Documents\\GitHub\\update-script\\common\\translations\\de\\LC_MESSAGES\\messages_js", "locale": "de", "messages": {"": "Project-Id-Version: PROJECT VERSION\nReport-Msgid-Bugs-To: EMAIL@ADDRESS\nPOT-
2024-04-25 06:22:57 UTC	886	IN	Data Raw: 64 65 6c 65 74 65 64 20 66 6f 6c 64 65 72 20 3c 61 20 68 72 65 66 3d 5c 22 25 28 75 72 6c 29 73 5c 22 3e 25 28 6e 61 6d 65 29 73 3c 2f 61 3e 22 3a 20 22 57 69 65 64 65 72 68 65 72 73 74 65 6c 6c 65 6e 20 76 6f 6e 20 67 65 6c 5c 75 30 30 66 36 73 63 68 74 65 6d 20 4f 72 64 6e 65 72 20 3c 61 20 68 72 65 66 3d 5c 22 25 28 75 72 6c 29 73 5c 22 3e 25 28 6e 61 6d 65 29 73 3c 2f 61 3e 22 2c 20 22 52 65 76 69 73 69 6f 6e 73 22 3a 20 22 52 65 76 69 73 69 6f 6e 65 6e 22 2c 20 22 52 65 76 69 73 69 6f 6e 73 20 77 65 72 65 20 65 72 61 73 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 2e 22 3a 20 22 52 65 76 69 73 69 6f 6e 65 6e 20 77 75 72 64 65 6e 20 65 72 66 6f 6c 67 72 65 69 63 68 20 65 6e 74 66 65 72 6e 74 2e 22 2c 20 22 53 68 61 72 65 22 3a 20 22 46 72 65 69 67 61 Data Ascii: deleted folder <a href=\"%(url)s\">%(name)s</a>": "Wiederherstellen von gel\u00f6schtem Ordner <a href=\"%(url)s\">%(name)s</a>", "Revisions": "Revisionen", "Revisions were erased successfully.": "Revisionen wurden erfolgreich entfernt.", "Share": "Freiga
2024-04-25 06:22:57 UTC	4578	IN	Data Raw: 63 6f 70 79 20 74 68 69 73 20 54 65 61 6d 20 53 68 61 72 65 27 73 20 64 61 74 61 20 69 6e 74 6f 20 61 20 6e 65 77 20 54 65 61 6d 20 53 68 61 72 65 2c 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 6f 6e 6c 79 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 73 20 69 74 20 65 78 69 73 74 65 64 20 75 70 20 74 6f 20 61 20 63 65 72 74 61 69 6e 20 70 6f 69 6e 74 20 69 6e 20 74 69 6d 65 2e 22 3a 20 22 44 69 65 73 65 20 46 75 6e 6b 74 69 6f 6e 20 6b 6f 70 69 65 72 74 20 64 65 6e 20 49 6e 68 61 6c 74 20 64 69 65 73 65 73 20 54 65 61 6d 20 53 68 61 72 65 73 20 69 6e 20 65 69 6e 65 6e 20 6e 65 75 65 6e 20 54 65 61 6d 20 53 68 61 72 65 2c 20 6f 70 74 69 6f 6e 61 6c 20 62 69 73 20 7a 75 20 65 69 6e 65 6d 20 62 65 73 74 69 6d 6d 74 65 6e 20 5a 65 69 74 70 75 6e 6b Data Ascii: copy this Team Share's data into a new Team Share, optionally only including the data as it existed up to a certain point in time.": "Diese Funktion kopiert den Inhalt dieses Team Shares in einen neuen Team Share, optional bis zu einem bestimmten Zeitpunk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	783	OUT	GET /static/gen/main_header.cf07ee37.min.js HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 1074952 Last-Modified: Thu, 10 Nov 2022 08:08:11 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1668067691.0-1074952-2805340637" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:57 UTC	7308	IN	Data Raw: 76 61 72 20 62 61 62 65 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 65 66 61 75 6c 74 50 6c 75 72 61 6c 45 78 70 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 31 3f 30 3a 31 3b 7d 3b 76 61 72 20 66 6f 72 6d 61 74 52 65 67 65 78 3d 2f 25 3f 25 28 3f 3a 5c 28 28 5b 5e 5c 29 5d 2b 29 5c 29 29 3f 28 5b 64 69 73 72 5d 29 2f 67 3b 76 61 72 20 54 72 61 6e 73 6c 61 74 69 6f 6e 73 3d 74 68 69 73 2e 54 72 61 6e 73 6c 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 6f 63 61 6c 65 2c 64 6f 6d 61 69 6e 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 73 3d 7b 7d 3b 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 6c 6f 63 61 6c 65 7c 7c 27 75 6e 6b 6e 6f 77 6e 27 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 64 6f 6d 61 69 6e 7c 7c 27 6d 65 73 Data Ascii: var babel=new function(){var defaultPluralExpr=function(n){return n==1?0:1;};var formatRegex=/%?%(?:$([^$]+)\))?([disr])/g;var Translations=this.Translations=function(locale,domain){this.messages={};this.locale=locale\|\|'unknown';this.domain=domain\|\|'mes
2024-04-25 06:22:57 UTC	884	IN	Data Raw: 6f 6e 20 62 28 61 2c 62 29 7b 69 66 28 21 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 73 77 69 74 63 68 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3a 72 65 74 75 72 6e 20 6a 61 2e 63 61 6c 6c 28 61 2c 62 29 3b 63 61 73 65 20 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 3a 72 65 74 75 72 6e 20 65 61 2e 63 61 6c 6c 28 61 2c 62 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 76 2e 63 61 6c 6c 28 61 2c 62 29 7d 7d 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 48 54 4d 4c 54 65 6d 70 6c 61 74 65 45 6c 65 6d 65 6e 74 2c 64 3d 21 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f Data Ascii: on b(a,b){if(!a.childNodes.length)return[];switch(a.nodeType){case Node.DOCUMENT_NODE:return ja.call(a,b);case Node.DOCUMENT_FRAGMENT_NODE:return ea.call(a,b);default:return v.call(a,b)}}var c="undefined"===typeof HTMLTemplateElement,d=!(document.createDo
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 2c 6c 6f 63 61 6c 4e 61 6d 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 23 64 6f 63 75 6d 65 6e 74 2d 66 72 61 67 6d 65 6e 74 22 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 76 61 72 20 63 3d 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 3b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 3d 61 3b 76 61 72 20 64 Data Ascii: {get:function(){return Node.DOCUMENT_FRAGMENT_NODE},configurable:!0},localName:{get:function(){},configurable:!0},nodeName:{get:function(){return"#document-fragment"},configurable:!0}});var c=Node.prototype.insertBefore;Node.prototype.insertBefore=a;var d
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 62 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 66 3d 65 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 64 28 67 2c 65 5b 67 5d 29 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 72 3f 61 3a 6e 65 77 20 72 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 28 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 63 28 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 Data Ascii: .prototype.slice.call(a);if(0===e.length)return b([]);for(var f=e.length,g=0;g<e.length;g++)d(g,e[g])})}function Qa(a){return a&&"object"===typeof a&&a.constructor===r?a:new r(function(b){b(a)})}function Sa(a){return new r(function(b,c){c(a)})}function T
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 72 6f 6d 28 61 2e 61 64 64 65 64 4e 6f 64 65 73 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 3d 3d 3d 61 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 7d 29 2c 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 61 64 64 65 64 4e 6f 64 65 73 22 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 61 7d 65 6c 73 65 20 69 66 28 62 29 72 65 74 75 72 6e 20 61 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 7d 3b 76 61 72 20 4e 62 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 Data Ascii: rom(a.addedNodes).filter(function(a){return c===a.getRootNode()}),b.length)return a=Object.create(a),Object.defineProperty(a,"addedNodes",{value:b,configurable:!0}),a}else if(b)return a}).filter(function(a){return a})};var Nb=Element.prototype.insertBefor
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 3d 7a 28 74 68 69 73 29 3b 69 66 28 21 61 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7b 61 2e 63 68 69 6c 64 4e 6f 64 65 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 62 3d 74 68 69 73 2e 66 69 72 73 74 43 68 69 6c 64 3b 62 3b 62 3d 62 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 70 75 73 68 28 62 29 7d 76 61 72 20 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7d 65 6c 73 65 20 63 3d 4d 2e 63 68 69 6c 64 4e 6f 64 65 73 28 74 68 69 73 29 3b 63 2e 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 5b 61 5d 7d 3b 72 65 74 75 72 6e 20 63 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 2c 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: =z(this);if(!a.childNodes){a.childNodes=[];for(var b=this.firstChild;b;b=b.nextSibling)a.childNodes.push(b)}var c=a.childNodes}else c=M.childNodes(this);c.item=function(a){return c[a]};return c},configurable:!0},childElementCount:{get:function(){return th
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 63 75 72 72 65 6e 74 53 63 6f 70 65 46 6f 72 4e 6f 64 65 28 61 29 3a 22 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 5a 63 28 61 2c 62 29 7b 69 66 28 61 29 7b 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 62 28 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3b 63 3c 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 64 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 63 5d 2c 64 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 5a 63 28 64 2c 62 29 7d 7d 3b 76 61 72 20 72 64 3d 22 5f 5f 65 76 65 6e 74 57 72 61 70 70 65 72 73 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2c 73 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 Data Ascii: currentScopeForNode(a):""}function Zc(a,b){if(a){a.nodeType===Node.ELEMENT_NODE&&b(a);for(var c=0,d;c<a.childNodes.length;c++)d=a.childNodes[c],d.nodeType===Node.ELEMENT_NODE&&Zc(d,b)}};var rd="__eventWrappers"+Date.now(),sd=function(){var a=Object.getOw
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 74 53 69 62 6c 69 6e 67 29 57 64 28 74 68 69 73 2c 62 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 74 68 69 73 2e 6f 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 63 3d 74 68 69 73 2e 6f 5b 62 5d 3b 65 3d 7a 28 63 29 3b 69 66 28 21 65 2e 61 73 73 69 67 6e 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 64 3d 63 2e 66 69 72 73 74 43 68 69 6c 64 3b 64 3b 64 3d 64 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 57 64 28 74 68 69 73 2c 64 2c 63 29 3b 28 64 3d 28 64 3d 7a 28 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 29 26 26 64 2e 72 6f 6f 74 29 26 26 67 64 28 64 29 26 26 64 2e 5f 72 65 6e 64 65 72 52 6f 6f 74 28 29 3b 58 64 28 74 68 69 73 2c 65 2e 4e 2c 65 2e 61 73 73 69 67 6e 65 64 4e 6f 64 65 73 29 3b 69 66 28 64 3d 65 2e 6f 61 29 7b 66 6f 72 28 66 3d 30 3b 66 3c 64 2e 6c 65 Data Ascii: tSibling)Wd(this,b);for(b=0;b<this.o.length;b++){c=this.o[b];e=z(c);if(!e.assignedNodes.length)for(d=c.firstChild;d;d=d.nextSibling)Wd(this,d,c);(d=(d=z(c.parentNode))&&d.root)&&gd(d)&&d._renderRoot();Xd(this,e.N,e.assignedNodes);if(d=e.oa){for(f=0;f<d.le
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 2e 30 2d 39 5f 61 2d 7a 5d 2a 24 2f 2e 74 65 73 74 28 61 29 3b 72 65 74 75 72 6e 21 62 26 26 61 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 7b 76 61 72 20 62 3d 61 2e 69 73 43 6f 6e 6e 65 63 74 65 64 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 66 6f 72 28 3b 61 26 26 21 28 61 2e 5f 5f 43 45 5f 69 73 49 6d 70 6f 72 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 29 3b 29 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 28 77 69 6e 64 6f 77 2e 53 68 61 64 6f 77 52 6f 6f 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 3f 61 2e 68 6f 73 74 3a 76 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 21 28 21 61 7c 7c 21 28 61 2e 5f 5f 43 45 5f 69 73 49 6d 70 6f 72 74 44 6f Data Ascii: .0-9_a-z]*$/.test(a);return!b&&a}function O(a){var b=a.isConnected;if(void 0!==b)return b;for(;a&&!(a.__CE_isImportDocument\|\|a instanceof Document);)a=a.parentNode\|\|(window.ShadowRoot&&a instanceof ShadowRoot?a.host:void 0);return!(!a\|\|!(a.__CE_isImportDo
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 65 3a 62 7d 29 3b 72 65 74 75 72 6e 20 62 7d 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 66 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 64 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 66 3d 5b 5d 2c 6c 3d 30 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 6e 3d 64 5b 6c 5d 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 4f 28 6e 29 26 26 66 2e 70 75 73 68 28 6e 29 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 29 66 6f 72 28 6e 3d Data Ascii: e:b});return b}()};function of(a,b,c){function d(b){return function(c){for(var d=[],e=0;e<arguments.length;++e)d[e]=arguments[e];e=[];for(var f=[],l=0;l<d.length;l++){var n=d[l];n instanceof Element&&O(n)&&f.push(n);if(n instanceof DocumentFragment)for(n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	853	OUT	GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	854	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 1332 Last-Modified: Thu, 21 Mar 2024 22:15:40 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1711059340.78296-1332-3604487886" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:22:57 UTC	1332	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 04 00 00 00 da eb 5d df 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 00 aa 8d 23 32 00 00 00 07 74 49 4d 45 07 e4 08 0b 04 24 14 4a 4b a2 f3 00 00 04 3c 49 44 41 54 78 da ed db cd 6b 1c 65 00 c7 f1 ef b3 bb d9 04 b4 ad 78 d0 d6 b8 15 ed 6c 36 b3 b1 c5 52 28 f8 d2 43 c5 17 b0 2c ee c4 83 e0 3f 20 d5 08 f6 e8 1f 50 10 bc 15 b6 85 1c 0a 5e da 43 d5 4d 85 f6 a2 97 92 25 5e 04 51 5b 33 cd 6e 29 a8 09 b5 08 91 a9 12 da 64 67 3c 6c a8 55 1a 33 cf db 64 0a cf ef b8 fb 3c bb fb c9 33 cf db e4 19 70 71 71 71 71 71 71 71 71 b1 15 61 Data Ascii: PNGIHDRdd]gAMAa cHRMz&u0`:pQ<bKGD#2tIME$JK<IDATxkexl6R(C,? P^CM%^Q[3n)dg<lU3d<3pqqqqqqqqa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	787	OUT	GET /static/themes/default/images/svg/lottie.js HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:57 UTC	887	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:56 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 279770 Last-Modified: Thu, 21 Mar 2024 22:15:40 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:56 GMT ETag: "1711059340.4709365-279770-612375681" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:56 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:57 UTC	7305	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 6c 6f 74 74 69 65 3d 65 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 Data Ascii: "undefined"!=typeof navigator&&function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).lottie=e()}(this,(function(){"use st
2024-04-25 06:22:57 UTC	887	IN	Data Raw: 7b 69 66 28 6e 2e 63 6f 6d 70 6c 65 74 65 64 3d 21 30 2c 6e 2e 74 74 26 26 28 73 5b 6f 2d 31 5d 2e 74 64 3d 6e 2e 74 74 29 2c 6e 2e 68 61 73 4d 61 73 6b 29 7b 76 61 72 20 64 3d 6e 2e 6d 61 73 6b 73 50 72 6f 70 65 72 74 69 65 73 3b 66 6f 72 28 6c 3d 64 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 6c 3b 68 2b 3d 31 29 69 66 28 64 5b 68 5d 2e 70 74 2e 6b 2e 69 29 69 28 64 5b 68 5d 2e 70 74 2e 6b 29 3b 65 6c 73 65 20 66 6f 72 28 6d 3d 64 5b 68 5d 2e 70 74 2e 6b 2e 6c 65 6e 67 74 68 2c 70 3d 30 3b 70 3c 6d 3b 70 2b 3d 31 29 64 5b 68 5d 2e 70 74 2e 6b 5b 70 5d 2e 73 26 26 69 28 64 5b 68 5d 2e 70 74 2e 6b 5b 70 5d 2e 73 5b 30 5d 29 2c 64 5b 68 5d 2e 70 74 2e 6b 5b 70 5d 2e 65 26 26 69 28 64 5b 68 5d 2e 70 74 2e 6b 5b 70 5d 2e 65 5b 30 5d 29 7d 30 3d 3d 3d 6e 2e 74 Data Ascii: {if(n.completed=!0,n.tt&&(s[o-1].td=n.tt),n.hasMask){var d=n.masksProperties;for(l=d.length,h=0;h<l;h+=1)if(d[h].pt.k.i)i(d[h].pt.k);else for(m=d[h].pt.k.length,p=0;p<m;p+=1)d[h].pt.k[p].s&&i(d[h].pt.k[p].s[0]),d[h].pt.k[p].e&&i(d[h].pt.k[p].e[0])}0===n.t
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 5d 2b 3d 74 2e 76 5b 65 5d 5b 30 5d 2c 74 2e 6f 5b 65 5d 5b 31 5d 2b 3d 74 2e 76 5b 65 5d 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 72 3d 65 3f 65 2e 73 70 6c 69 74 28 22 2e 22 29 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 3b 72 65 74 75 72 6e 20 74 5b 30 5d 3e 72 5b 30 5d 7c 7c 21 28 72 5b 30 5d 3e 74 5b 30 5d 29 26 26 28 74 5b 31 5d 3e 72 5b 31 5d 7c 7c 21 28 72 5b 31 5d 3e 74 5b 31 5d 29 26 26 28 74 5b 32 5d 3e 72 5b 32 5d 7c 7c 21 28 72 5b 32 5d 3e 74 5b 32 5d 29 26 26 6e 75 6c 6c 29 29 7d 76 61 72 20 61 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 34 2c 34 2c 31 34 5d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 65 2c 72 2c 69 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 3d 30 3b 65 3c Data Ascii: ]+=t.v[e][0],t.o[e][1]+=t.v[e][1]}function s(t,e){var r=e?e.split("."):[100,100,100];return t[0]>r[0]\|\|!(r[0]>t[0])&&(t[1]>r[1]\|\|!(r[1]>t[1])&&(t[2]>r[2]\|\|!(r[2]>t[2])&&null))}var a,n=function(){var t=[4,4,14];function e(t){var e,r,i,s=t.length;for(e=0;e<
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 5f 63 62 73 5b 74 5d 7c 7c 28 74 68 69 73 2e 5f 63 62 73 5b 74 5d 3d 5b 5d 29 2c 74 68 69 73 2e 5f 63 62 73 5b 74 5d 2e 70 75 73 68 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 7d 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 63 62 73 5b 74 5d 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 68 69 73 2e 5f 63 62 73 5b 74 5d 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 29 74 68 69 73 2e 5f 63 62 73 5b 74 5d 5b 72 5d 3d 3d 3d 65 26 26 28 74 68 69 73 2e 5f 63 62 73 5b 74 5d 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 72 2d 3d 31 2c 69 2d 3d 31 29 Data Ascii: _cbs[t]\|\|(this._cbs[t]=[]),this._cbs[t].push(e),function(){this.removeEventListener(t,e)}.bind(this)},removeEventListener:function(t,e){if(e){if(this._cbs[t]){for(var r=0,i=this._cbs[t].length;r<i;)this._cbs[t][r]===e&&(this._cbs[t].splice(r,1),r-=1,i-=1)
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 74 29 7d 7d 2c 41 6e 69 6d 61 74 69 6f 6e 49 74 65 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 69 74 46 6f 72 46 6f 6e 74 73 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6e 64 65 72 65 72 26 26 28 74 68 69 73 2e 72 65 6e 64 65 72 65 72 2e 67 6c 6f 62 61 6c 44 61 74 61 2e 66 6f 6e 74 4d 61 6e 61 67 65 72 2e 69 73 4c 6f 61 64 65 64 3f 74 68 69 73 2e 63 68 65 63 6b 4c 6f 61 64 65 64 28 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 77 61 69 74 46 6f 72 46 6f 6e 74 73 4c 6f 61 64 65 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 32 30 29 29 7d 2c 41 6e 69 6d 61 74 69 6f 6e 49 74 65 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 69 73 4c 6f 61 64 65 Data Ascii: t)}},AnimationItem.prototype.waitForFontsLoaded=function(){this.renderer&&(this.renderer.globalData.fontManager.isLoaded?this.checkLoaded():setTimeout(this.waitForFontsLoaded.bind(this),20))},AnimationItem.prototype.checkLoaded=function(){if(!this.isLoade
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 26 26 74 68 69 73 2e 6f 6e 53 65 67 6d 65 6e 74 53 74 61 72 74 26 26 74 68 69 73 2e 6f 6e 53 65 67 6d 65 6e 74 53 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 65 77 20 42 4d 53 65 67 6d 65 6e 74 53 74 61 72 74 45 76 65 6e 74 28 74 2c 74 68 69 73 2e 66 69 72 73 74 46 72 61 6d 65 2c 74 68 69 73 2e 74 6f 74 61 6c 46 72 61 6d 65 73 29 29 2c 22 64 65 73 74 72 6f 79 22 3d 3d 3d 74 26 26 74 68 69 73 2e 6f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 6f 6e 44 65 73 74 72 6f 79 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 65 77 20 42 4d 44 65 73 74 72 6f 79 45 76 65 6e 74 28 74 2c 74 68 69 73 29 29 7d 2c 41 6e 69 6d 61 74 69 6f 6e 49 74 65 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 52 65 6e 64 65 72 46 72 61 6d 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: &&this.onSegmentStart&&this.onSegmentStart.call(this,new BMSegmentStartEvent(t,this.firstFrame,this.totalFrames)),"destroy"===t&&this.onDestroy&&this.onDestroy.call(this,new BMDestroyEvent(t,this))},AnimationItem.prototype.triggerRenderFrameError=function
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 65 6e 73 69 6f 6e 61 6c 22 3d 3d 3d 74 68 69 73 2e 70 72 6f 70 54 79 70 65 26 26 28 72 3d 63 72 65 61 74 65 54 79 70 65 64 41 72 72 61 79 28 22 66 6c 6f 61 74 33 32 22 2c 74 68 69 73 2e 70 76 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 61 2c 6e 2c 6f 2c 68 2c 6c 2c 70 2c 66 2c 6d 2c 63 2c 64 3d 65 2e 6c 61 73 74 49 6e 64 65 78 2c 75 3d 64 2c 79 3d 74 68 69 73 2e 6b 65 79 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 2d 31 2c 67 3d 21 30 3b 67 3b 29 7b 69 66 28 61 3d 74 68 69 73 2e 6b 65 79 66 72 61 6d 65 73 5b 75 5d 2c 6e 3d 74 68 69 73 2e 6b 65 79 66 72 61 6d 65 73 5b 75 2b 31 5d 2c 75 3d 3d 3d 79 2d 31 26 26 74 3e 3d 6e 2e 74 2d 73 29 7b 61 2e 68 26 26 28 61 3d 6e 29 2c 64 3d 30 3b 62 72 65 61 6b 7d 69 66 28 6e 2e 74 2d 73 3e 74 29 7b 64 3d 75 3b 62 Data Ascii: ensional"===this.propType&&(r=createTypedArray("float32",this.pv.length));for(var a,n,o,h,l,p,f,m,c,d=e.lastIndex,u=d,y=this.keyframes.length-1,g=!0;g;){if(a=this.keyframes[u],n=this.keyframes[u+1],u===y-1&&t>=n.t-s){a.h&&(a=n),d=0;break}if(n.t-s>t){d=u;b
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 68 69 73 2e 5f 6c 65 6e 67 74 68 3e 3d 74 68 69 73 2e 5f 6d 61 78 4c 65 6e 67 74 68 26 26 74 68 69 73 2e 64 6f 75 62 6c 65 41 72 72 61 79 4c 65 6e 67 74 68 28 29 2c 72 29 7b 63 61 73 65 22 76 22 3a 61 3d 74 68 69 73 2e 76 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 22 3a 61 3d 74 68 69 73 2e 69 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 22 3a 61 3d 74 68 69 73 2e 6f 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 5b 5d 7d 28 21 61 5b 69 5d 7c 7c 61 5b 69 5d 26 26 21 73 29 26 26 28 61 5b 69 5d 3d 70 6f 69 6e 74 50 6f 6f 6c 2e 6e 65 77 45 6c 65 6d 65 6e 74 28 29 29 2c 61 5b 69 5d 5b 30 5d 3d 74 2c 61 5b 69 5d 5b 31 5d 3d 65 7d 2c 53 68 61 70 65 50 61 74 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 54 72 69 70 6c 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: his._length>=this._maxLength&&this.doubleArrayLength(),r){case"v":a=this.v;break;case"i":a=this.i;break;case"o":a=this.o;break;default:a=[]}(!a[i]\|\|a[i]&&!s)&&(a[i]=pointPool.newElement()),a[i][0]=t,a[i][1]=e},ShapePath.prototype.setTripleAt=function(t,e,
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 61 74 68 2e 73 71 72 74 28 75 2a 75 2b 79 2a 79 29 2c 76 3d 30 3d 3d 3d 75 26 26 30 3d 3d 3d 79 3f 30 3a 2d 75 2f 4d 61 74 68 2e 73 71 72 74 28 75 2a 75 2b 79 2a 79 29 3b 75 2b 3d 2b 74 68 69 73 2e 70 2e 76 5b 30 5d 2c 79 2b 3d 2b 74 68 69 73 2e 70 2e 76 5b 31 5d 2c 74 68 69 73 2e 76 2e 73 65 74 54 72 69 70 6c 65 41 74 28 75 2c 79 2c 75 2d 67 2a 69 2a 72 2a 64 2c 79 2d 76 2a 69 2a 72 2a 64 2c 75 2b 67 2a 69 2a 72 2a 64 2c 79 2b 76 2a 69 2a 72 2a 64 2c 74 2c 21 30 29 2c 6e 3d 21 6e 2c 63 2b 3d 61 2a 64 7d 7d 2c 63 6f 6e 76 65 72 74 50 6f 6c 79 67 6f 6e 54 6f 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 70 74 2e 76 29 2c 72 3d 32 2a 4d 61 74 68 2e 50 49 2f 65 2c 69 3d 74 68 69 73 2e Data Ascii: ath.sqrt(uu+yy),v=0===u&&0===y?0:-u/Math.sqrt(uu+yy);u+=+this.p.v[0],y+=+this.p.v[1],this.v.setTripleAt(u,y,u-gird,y-vird,u+gird,y+vird,t,!0),n=!n,c+=ad}},convertPolygonToPath:function(){var t,e=Math.floor(this.pt.v),r=2Math.PI/e,i=this.
2024-04-25 06:22:57 UTC	8192	IN	Data Raw: 73 2e 72 6f 74 61 74 65 3d 61 2c 74 68 69 73 2e 72 6f 74 61 74 65 58 3d 6e 2c 74 68 69 73 2e 72 6f 74 61 74 65 59 3d 6f 2c 74 68 69 73 2e 72 6f 74 61 74 65 5a 3d 68 2c 74 68 69 73 2e 73 6b 65 77 3d 70 2c 74 68 69 73 2e 73 6b 65 77 46 72 6f 6d 41 78 69 73 3d 66 2c 74 68 69 73 2e 73 68 65 61 72 3d 6c 2c 74 68 69 73 2e 73 63 61 6c 65 3d 6d 2c 74 68 69 73 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 3d 63 2c 74 68 69 73 2e 74 72 61 6e 73 6c 61 74 65 3d 64 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 3d 75 2c 74 68 69 73 2e 61 70 70 6c 79 54 6f 50 6f 69 6e 74 3d 50 2c 74 68 69 73 2e 61 70 70 6c 79 54 6f 58 3d 45 2c 74 68 69 73 2e 61 70 70 6c 79 54 6f 59 3d 78 2c 74 68 69 73 2e 61 70 70 6c 79 54 6f 5a 3d 53 2c 74 68 69 73 2e 61 70 70 6c 79 54 6f 50 6f 69 6e 74 41 72 Data Ascii: s.rotate=a,this.rotateX=n,this.rotateY=o,this.rotateZ=h,this.skew=p,this.skewFromAxis=f,this.shear=l,this.scale=m,this.setTransform=c,this.translate=d,this.transform=u,this.applyToPoint=P,this.applyToX=E,this.applyToY=x,this.applyToZ=S,this.applyToPointAr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:22:57 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=175238 Date: Thu, 25 Apr 2024 06:22:57 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 06:22:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:57 UTC	794	OUT	GET /static/themes/default/images/svg/custom_script.js HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:58 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:58 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 4724 Last-Modified: Thu, 21 Mar 2024 22:15:43 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:58 GMT ETag: "1711059343.2359624-4724-4186120063" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:58 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:58 UTC	4724	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6f 2c 6e 2c 69 3d 77 69 6e 64 6f 77 2e 5f 70 61 71 3d 77 69 6e 64 6f 77 2e 5f 70 61 71 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 2f 73 68 61 72 65 73 2f 66 6f 6c 64 65 72 2f 22 29 3e 2d 31 26 26 28 24 28 22 69 6d 67 5b 73 72 63 3d 27 2f 73 69 74 65 73 2f 33 33 37 30 2f 62 72 61 6e 64 69 6e 67 2f 6c 6f 67 6f 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 24 28 22 69 6d 67 5b 73 72 63 3d 27 2f 73 69 74 65 73 2f 34 33 34 39 2f 62 72 61 6e 64 69 6e 67 2f 6c 6f 67 6f 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 24 28 22 69 6d 67 5b 73 72 63 3d 27 2f 73 69 74 65 73 Data Ascii: $(document).ready(function(){var t,e,o,n,i=window._paq=window._paq\|\|[];function r(){window.location.href.indexOf("/shares/folder/")>-1&&($("img[src='/sites/3370/branding/logo']").length\|\|$("img[src='/sites/4349/branding/logo']").length\|\|$("img[src='/sites

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:57 UTC	530	OUT	GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:58 UTC	854	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:58 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 1332 Last-Modified: Thu, 21 Mar 2024 22:15:40 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:58 GMT ETag: "1711059340.78296-1332-3604487886" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:58 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:22:58 UTC	1332	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 04 00 00 00 da eb 5d df 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 00 aa 8d 23 32 00 00 00 07 74 49 4d 45 07 e4 08 0b 04 24 14 4a 4b a2 f3 00 00 04 3c 49 44 41 54 78 da ed db cd 6b 1c 65 00 c7 f1 ef b3 bb d9 04 b4 ad 78 d0 d6 b8 15 ed 6c 36 b3 b1 c5 52 28 f8 d2 43 c5 17 b0 2c ee c4 83 e0 3f 20 d5 08 f6 e8 1f 50 10 bc 15 b6 85 1c 0a 5e da 43 d5 4d 85 f6 a2 97 92 25 5e 04 51 5b 33 cd 6e 29 a8 09 b5 08 91 a9 12 da 64 67 3c 6c a8 55 1a 33 cf db 64 0a cf ef b8 fb 3c bb fb c9 33 cf db e4 19 70 71 71 71 71 71 71 71 71 b1 15 61 Data Ascii: PNGIHDRdd]gAMAa cHRMz&u0`:pQ<bKGD#2tIME$JK<IDATxkexl6R(C,? P^CM%^Q[3n)dg<lU3d<3pqqqqqqqqa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:58 UTC	788	OUT	GET /static/themes/default/images/svg/sidebar.js HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:59 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:58 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 93924 Last-Modified: Thu, 21 Mar 2024 22:15:40 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:58 GMT ETag: "1711059340.9238029-93924-1084693706" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:58 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:59 UTC	7306	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3d 3d 61 74 6f 62 28 22 5a 47 6c 6a 62 33 5a 68 64 57 78 30 4c 6d 52 70 59 32 38 75 59 57 5a 79 61 57 4e 68 22 29 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 66 69 6c 65 73 2f 64 6f 77 6e 6c 6f 61 64 2f 61 67 65 6e 74 2f 22 29 26 26 28 24 28 22 2e 63 6f 6c 2d 6d 64 2d 36 2e 63 6f 6c 2d 78 6c 2d 34 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 22 29 2e 72 65 6d 6f 76 65 28 29 2c 24 28 22 2e 63 6f 6c 2d 6d 64 2d 36 2e 63 6f 6c 2d 78 6c 2d 34 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 22 29 2e 72 65 6d 6f 76 65 28 29 2c 24 28 22 2e 63 6f 6c 2d 6d Data Ascii: $(document).ready(function(){window.location.hostname==atob("ZGljb3ZhdWx0LmRpY28uYWZyaWNh")&&window.location.pathname.includes("files/download/agent/")&&($(".col-md-6.col-xl-4:nth-child(9)").remove(),$(".col-md-6.col-xl-4:nth-child(8)").remove(),$(".col-m
2024-04-25 06:22:59 UTC	886	IN	Data Raw: 63 3d 22 5c 2f 73 74 61 74 69 63 5c 2f 6a 73 2e 2e 2a 3e 3c 5c 2f 73 63 72 69 70 74 3e 5c 6e 2e 2a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 5c 2f 73 74 61 74 69 63 5c 2f 6a 73 2e 2e 2a 3e 3c 5c 2f 73 63 72 69 70 74 3e 5c 6e 2e 2a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 5c 6e 2e 2a 3c 5c 2f 73 63 72 69 70 74 3e 2f 2c 77 69 6e 64 6f 77 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 45 78 70 72 65 73 73 69 6f 6e 3d 2f 5c 2f 73 69 Data Ascii: c="\/static\/js..><\/script>\n.<script type="text\/javascript" src="\/static\/js..><\/script>\n.<script type="text\/javascript">\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.\n.*<\/script>/,window.organizationExpression=/\/si
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 72 65 6d 3b 0a 09 09 09 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 09 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 0a 09 09 09 09 09 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2e 6c 65 66 74 2d 6d 65 6e 75 2d 64 69 76 69 64 65 72 20 7b 0a 09 09 09 09 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 09 09 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 09 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 0a 09 09 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 09 09 09 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 Data Ascii: rem;padding-left: 20px;font-weight: bold;color: rgba(0,0,0,0.8);}.left-menu-divider {height: 1px;width: 100%;border-top: 1px solid rgba(0,0,0,0.1);margin-top: 5px;margin-bottom: 20px;}
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 65 3a 20 30 2e 38 72 65 6d 3b 0a 09 09 09 09 09 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2e 73 62 2d 63 6f 6d 6d 65 6e 74 73 2d 63 68 61 74 2d 65 6e 74 72 79 3a 68 6f 76 65 72 20 7b 0a 09 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 32 29 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2e 73 62 2d 63 6f 6d 6d 65 6e 74 73 2d 63 68 61 74 2d 65 6e 74 72 79 2e 64 65 6c 65 74 65 64 20 7b 0a 09 09 09 09 09 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 09 09 09 09 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2e 73 62 2d 63 6f 6d 6d 65 6e 74 73 2d 63 68 61 74 2d 74 69 74 6c 65 20 7b 0a 09 09 09 09 09 64 Data Ascii: e: 0.8rem;word-wrap: break-word;}.sb-comments-chat-entry:hover {background-color: rgba(0,0,0,0.02);}.sb-comments-chat-entry.deleted {opacity: 0.6;font-style: italic;}.sb-comments-chat-title {d
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 09 09 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 69 66 28 24 28 27 2e 73 62 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 74 6e 27 29 2e 68 61 73 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 24 28 27 2e 73 62 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 74 6e 27 29 2e 63 6c 69 63 6b 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 69 66 28 21 24 28 65 2e 74 61 72 67 65 74 29 2e 69 73 28 27 61 27 29 20 7c 7c 20 28 24 28 65 2e 74 61 72 67 65 74 29 2e 69 73 28 27 61 27 29 20 26 26 20 24 28 65 2e 74 61 72 67 65 74 29 2e 70 61 72 65 6e 74 73 28 27 74 72 27 29 2e 66 69 72 73 74 28 29 2e 64 61 74 61 28 27 74 79 Data Ascii: } if($('.sb-notification-btn').hasClass('active')) { $('.sb-notification-btn').click(); } if(!$(e.target).is('a') \|\| ($(e.target).is('a') && $(e.target).parents('tr').first().data('ty
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 2e 63 68 69 6c 64 72 65 6e 28 27 74 64 27 29 5b 33 5d 29 2e 66 69 6e 64 28 27 61 27 29 2e 66 69 72 73 74 28 29 2e 68 74 6d 6c 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 63 6f 6e 20 69 63 6f 6e 2d 6d 6f 76 65 22 3e 3c 2f 73 70 61 6e 3e 27 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 24 28 24 28 69 74 65 6d 29 2e 63 68 69 6c 64 72 65 6e 28 27 74 64 27 29 5b 30 5d 29 2e 74 65 78 74 28 28 24 28 24 28 69 74 65 6d 29 2e 63 68 69 6c 64 72 65 6e 28 27 74 64 27 29 5b 30 5d 29 2e 74 65 78 74 28 29 2e 74 72 69 6d 28 29 29 29 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 24 28 24 28 69 74 65 6d 29 2e 63 68 69 6c 64 72 65 6e 28 27 74 64 27 29 5b 31 5d 29 2e 72 65 6d 6f 76 Data Ascii: .children('td')[3]).find('a').first().html('<span class="menu-icon icon-move"></span>'); } $($(item).children('td')[0]).text(($($(item).children('td')[0]).text().trim())) $($(item).children('td')[1]).remov
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 0a 09 09 20 20 20 20 20 20 20 20 09 09 09 75 72 6c 3a 20 77 69 6e 64 6f 77 2e 61 70 69 45 6e 64 70 6f 69 6e 74 20 2b 20 27 74 61 67 73 2f 65 6e 64 70 6f 69 6e 74 73 2f 63 6f 6d 6d 65 6e 74 73 2f 27 20 2b 20 28 63 6f 75 6e 74 20 3f 20 27 63 6f 75 6e 74 27 20 3a 20 27 67 65 74 41 6c 6c 27 29 2c 0a 09 09 20 20 20 20 20 20 20 20 09 09 09 64 61 74 61 3a 20 63 6f 6d 70 75 74 65 50 61 63 6b 65 74 28 67 65 74 43 75 72 72 65 6e 74 46 69 6c 65 52 6f 6f 74 49 64 28 29 2c 20 63 75 72 72 65 6e 74 46 69 6c 65 49 64 2c 20 69 73 43 75 72 72 65 6e 74 46 69 6c 65 41 46 6f 6c 64 65 72 28 29 29 2c 0a 09 09 20 20 20 20 20 20 20 20 09 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 20 20 20 20 20 20 20 20 09 09 09 09 27 58 2d 41 75 74 68 27 3a 20 68 61 73 68 0a 09 09 20 20 20 20 Data Ascii: url: window.apiEndpoint + 'tags/endpoints/comments/' + (count ? 'count' : 'getAll'), data: computePacket(getCurrentFileRootId(), currentFileId, isCurrentFileAFolder()), headers: { 'X-Auth': hash
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 2e 68 74 6d 6c 28 24 28 6e 61 6d 65 49 6e 66 6f 29 2e 66 69 6e 64 28 27 73 70 61 6e 27 29 5b 30 5d 2e 6f 75 74 65 72 48 54 4d 4c 29 3b 0a 09 20 20 20 20 20 20 20 20 09 09 09 7d 0a 09 20 20 20 20 09 09 09 7d 0a 0a 09 20 20 20 20 09 09 09 2f 2f 20 68 65 61 64 65 72 20 73 74 75 66 66 0a 09 20 20 20 20 09 09 09 24 28 27 2e 73 62 2d 70 72 65 76 69 65 77 2d 74 69 74 6c 65 27 29 2e 68 74 6d 6c 28 24 28 6e 61 6d 65 49 6e 66 6f 29 2e 66 69 6e 64 28 27 61 27 29 2e 66 69 72 73 74 28 29 2e 74 65 78 74 28 29 29 3b 0a 0a 09 20 20 20 20 09 09 09 69 66 28 63 75 72 72 65 6e 74 46 69 6c 65 54 79 70 65 20 3d 3d 20 27 72 6f 6f 74 27 29 20 7b 0a 09 20 20 20 20 09 09 09 09 24 28 27 2e 73 62 2d 70 72 65 76 69 65 77 2d 64 65 73 63 72 69 70 74 69 6f 6e 27 29 2e 68 74 6d 6c 28 27 Data Ascii: .html($(nameInfo).find('span')[0].outerHTML); } } // header stuff $('.sb-preview-title').html($(nameInfo).find('a').first().text()); if(currentFileType == 'root') { $('.sb-preview-description').html('
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 2e 69 6e 73 74 61 6e 63 65 2e 64 75 72 61 74 69 6f 6e 20 2a 20 61 75 64 69 6f 43 61 63 68 65 5b 63 75 72 72 65 6e 74 46 69 6c 65 49 64 5d 2e 69 6e 73 74 61 6e 63 65 2e 63 75 72 72 65 6e 74 54 69 6d 65 3b 0a 0a 09 09 09 09 09 09 09 24 28 27 2e 73 62 2d 70 72 65 76 69 65 77 2d 70 72 6f 67 72 65 73 73 2d 63 6f 75 6e 74 27 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 20 70 65 72 63 65 6e 74 61 67 65 20 2b 20 27 25 27 29 3b 0a 0a 09 09 09 09 09 09 09 69 66 28 70 65 72 63 65 6e 74 61 67 65 20 3e 3d 20 31 30 30 29 20 7b 0a 09 09 09 09 09 09 09 09 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 75 64 69 6f 43 61 63 68 65 5b 63 75 72 72 65 6e 74 46 69 6c 65 49 64 5d 2e 74 69 6d 65 72 29 3b 0a 09 09 09 09 09 09 09 09 24 28 27 2e 73 62 2d 70 72 65 76 69 65 77 2d 63 6f 6e Data Ascii: .instance.duration * audioCache[currentFileId].instance.currentTime;$('.sb-preview-progress-count').css('width', percentage + '%');if(percentage >= 100) {clearInterval(audioCache[currentFileId].timer);$('.sb-preview-con
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 62 2d 70 6c 61 79 65 72 2d 69 63 6f 6e 2d 70 6c 61 79 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 3b 22 3e 3c 2f 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 3c 2f 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 62 2d 70 72 65 76 69 65 77 2d 74 69 74 6c 65 22 3e 3c 2f 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 62 2d 70 72 65 76 69 65 77 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 2f 64 69 76 3e 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 62 2d 70 Data Ascii: <div class="sb-player-icon-play" style="margin-top: -5px;"></div> </div> <div class="sb-preview-title"></div> <div class="sb-preview-description"></div> <div class="sb-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:58 UTC	826	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:59 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:59 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:22:59 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:59 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:22:59 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:59 UTC	776	OUT	GET /static/gen/main.52b56941.min.js HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:59 UTC	882	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:59 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 475032 Last-Modified: Mon, 03 Jul 2023 20:26:01 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:59 GMT ETag: "1688415961.0-475032-3935508099" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:59 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:59 UTC	7310	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 2c 75 6e 64 65 66 69 6e 65 64 29 7b 24 2e 73 75 70 70 6f 72 74 2e 68 74 6d 6c 4d 65 6e 75 69 74 65 6d 3d 28 27 48 54 4d 4c 4d 65 6e 75 49 74 65 6d 45 6c 65 6d 65 6e 74 27 69 6e 20 77 69 6e 64 6f 77 29 3b 24 2e 73 75 70 70 6f 72 74 2e 68 74 6d 6c 43 6f 6d 6d 61 6e 64 3d 28 27 48 54 4d 4c 43 6f 6d 6d 61 6e 64 45 6c 65 6d 65 6e 74 27 69 6e 20 77 69 6e 64 6f 77 29 3b 24 2e 73 75 70 70 6f 72 74 2e 65 76 65 6e 74 53 65 6c 65 63 74 73 74 61 72 74 3d 28 22 6f 6e 73 65 6c 65 63 74 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 24 2e 75 69 7c 7c 21 24 2e 75 69 2e 77 69 64 67 65 74 29 7b 76 61 72 20 5f 63 6c 65 61 6e 44 61 74 61 3d 24 2e 63 6c 65 61 6e 44 61 74 61 Data Ascii: (function($,undefined){$.support.htmlMenuitem=('HTMLMenuItemElement'in window);$.support.htmlCommand=('HTMLCommandElement'in window);$.support.eventSelectstart=("onselectstart"in document.documentElement);if(!$.ui\|\|!$.ui.widget){var _cleanData=$.cleanData
2024-04-25 06:22:59 UTC	882	IN	Data Raw: 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 2e 70 61 72 65 6e 74 28 29 7c 7c 6f 70 74 2e 24 6d 65 6e 75 29 2e 63 68 69 6c 64 72 65 6e 28 27 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 2c 20 2e 6e 6f 74 2d 73 65 6c 65 63 74 61 62 6c 65 29 27 29 5b 65 2e 6b 65 79 43 6f 64 65 3d 3d 33 36 3f 27 66 69 72 73 74 27 3a 27 6c 61 73 74 27 5d 28 29 2e 74 72 69 67 67 65 72 28 27 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 66 6f 63 75 73 27 29 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 72 65 74 75 72 6e 3b 7d 0a 62 72 65 61 6b 3b 63 61 73 65 20 31 33 3a 68 61 6e 64 6c 65 2e 6b 65 79 53 74 6f 70 28 65 2c 6f 70 74 29 3b 69 66 28 6f 70 74 2e 69 73 49 6e 70 75 74 29 7b 69 66 28 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 26 26 21 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 2e 69 Data Ascii: opt.$selected.parent()\|\|opt.$menu).children(':not(.disabled, .not-selectable)')[e.keyCode==36?'first':'last']().trigger('contextmenu:focus');e.preventDefault();return;}break;case 13:handle.keyStop(e,opt);if(opt.isInput){if(opt.$selected&&!opt.$selected.i
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 64 2e 70 61 72 65 6e 74 28 29 2e 64 61 74 61 28 27 63 6f 6e 74 65 78 74 4d 65 6e 75 27 29 7c 7c 7b 7d 3b 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 3d 24 73 3b 7d 0a 76 61 72 20 24 63 68 69 6c 64 72 65 6e 3d 6f 70 74 2e 24 6d 65 6e 75 2e 63 68 69 6c 64 72 65 6e 28 29 2c 24 70 72 65 76 3d 21 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 7c 7c 21 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 2e 70 72 65 76 28 29 2e 6c 65 6e 67 74 68 3f 24 63 68 69 6c 64 72 65 6e 2e 6c 61 73 74 28 29 3a 6f 70 74 2e 24 73 65 6c 65 63 74 65 64 2e 70 72 65 76 28 29 2c 24 72 6f 75 6e 64 3d 24 70 72 65 76 3b 77 68 69 6c 65 28 24 70 72 65 76 2e 68 61 73 43 6c 61 73 73 28 27 64 69 73 61 62 6c 65 64 27 29 7c 7c 24 70 72 65 76 2e 68 61 73 43 6c 61 73 73 28 27 6e 6f 74 2d 73 65 6c 65 63 74 61 62 6c 65 Data Ascii: d.parent().data('contextMenu')\|\|{};opt.$selected=$s;}var $children=opt.$menu.children(),$prev=!opt.$selected\|\|!opt.$selected.prev().length?$children.last():opt.$selected.prev(),$round=$prev;while($prev.hasClass('disabled')\|\|$prev.hasClass('not-selectable
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 65 6c 29 3b 69 66 28 69 74 65 6d 2e 6f 70 74 69 6f 6e 73 29 7b 24 2e 65 61 63 68 28 69 74 65 6d 2e 6f 70 74 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 74 65 78 74 29 7b 24 28 27 3c 6f 70 74 69 6f 6e 3e 3c 2f 6f 70 74 69 6f 6e 3e 27 29 2e 76 61 6c 28 76 61 6c 75 65 29 2e 74 65 78 74 28 74 65 78 74 29 2e 61 70 70 65 6e 64 54 6f 28 24 69 6e 70 75 74 29 3b 7d 29 3b 24 69 6e 70 75 74 2e 76 61 6c 28 69 74 65 6d 2e 73 65 6c 65 63 74 65 64 29 3b 7d 0a 62 72 65 61 6b 3b 63 61 73 65 27 73 75 62 27 3a 24 28 27 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 27 29 2e 68 74 6d 6c 28 69 74 65 6d 2e 5f 6e 61 6d 65 7c 7c 69 74 65 6d 2e 6e 61 6d 65 29 2e 61 70 70 65 6e 64 54 6f 28 24 74 29 3b 69 74 65 6d 2e 61 70 70 65 6e 64 54 6f 3d 69 74 65 6d 2e 24 6e 6f 64 65 Data Ascii: el);if(item.options){$.each(item.options,function(value,text){$('<option></option>').val(value).text(text).appendTo($input);});$input.val(item.selected);}break;case'sub':$('<span></span>').html(item._name\|\|item.name).appendTo($t);item.appendTo=item.$node
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 65 6e 67 74 68 29 7b 6c 61 62 65 6c 3d 24 6e 6f 64 65 2e 74 65 78 74 28 29 3b 24 6e 6f 64 65 3d 24 6e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 28 29 2e 66 69 72 73 74 28 29 3b 6e 6f 64 65 3d 24 6e 6f 64 65 2e 67 65 74 28 30 29 3b 6e 6f 64 65 4e 61 6d 65 3d 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 7d 0a 73 77 69 74 63 68 28 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 6d 65 6e 75 27 3a 69 74 65 6d 3d 7b 6e 61 6d 65 3a 24 6e 6f 64 65 2e 61 74 74 72 28 27 6c 61 62 65 6c 27 29 2c 69 74 65 6d 73 3a 7b 7d 7d 3b 63 6f 75 6e 74 65 72 3d 6d 65 6e 75 43 68 69 6c 64 72 65 6e 28 69 74 65 6d 2e 69 74 65 6d 73 2c 24 6e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 28 29 2c 63 6f 75 6e 74 65 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 27 61 27 3a Data Ascii: ength){label=$node.text();$node=$node.children().first();node=$node.get(0);nodeName=node.nodeName.toLowerCase();}switch(nodeName){case'menu':item={name:$node.attr('label'),items:{}};counter=menuChildren(item.items,$node.children(),counter);break;case'a':
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 64 3d 61 28 29 3b 61 2e 6d 61 70 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 64 2e 61 64 64 28 61 29 7d 29 2c 63 3d 64 7d 62 2e 61 70 70 65 6e 64 28 63 29 7d 2c 63 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 72 65 73 75 6c 74 73 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 75 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 2c 64 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 2c 74 68 69 73 2e 64 61 74 61 3d 64 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2c 63 2e 5f 5f 73 75 70 65 72 5f 5f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 7d 72 65 74 75 72 6e 20 62 2e 45 78 74 65 Data Ascii: jquery.substr(0,3)){var d=a();a.map(c,function(a){d=d.add(a)}),c=d}b.append(c)},c}),b.define("select2/results",["jquery","./utils"],function(a,b){function c(a,b,d){this.$element=a,this.data=d,this.options=b,c.__super__.constructor.call(this)}return b.Exte
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 63 74 69 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 2c 64 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 6f 77 6e 73 22 2c 65 29 2c 64 2e 5f 61 74 74 61 63 68 43 6c 6f 73 65 48 61 6e 64 6c 65 72 28 61 29 7d 29 2c 61 2e 6f 6e 28 22 63 6c 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 64 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 61 63 74 69 76 65 64 65 73 63 65 6e 64 61 6e 74 22 29 2c 64 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 6f 77 6e 73 22 29 2c 64 2e 24 73 65 6c 65 Data Ascii: ction.attr("aria-expanded","true"),d.$selection.attr("aria-owns",e),d._attachCloseHandler(a)}),a.on("close",function(){d.$selection.attr("aria-expanded","false"),d.$selection.removeAttr("aria-activedescendant"),d.$selection.removeAttr("aria-owns"),d.$sele
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 68 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 29 29 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 73 65 61 72 63 68 2e 61 74 74 72 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 62 2e 74 65 78 74 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 24 73 65 61 72 63 68 5b 30 5d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3b Data Ascii: h.attr("tabindex",this.$selection.attr("tabindex")),this.$selection.attr("tabindex","-1")},d.prototype.createPlaceholder=function(a,b){this.$search.attr("placeholder",b.text)},d.prototype.update=function(a,b){var c=this.$search[0]==document.activeElement;
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 22 6f 22 2c 22 e1 bb 9f 22 3a 22 6f 22 2c 22 e1 bb a3 22 3a 22 6f 22 2c 22 e1 bb 8d 22 3a 22 6f 22 2c 22 e1 bb 99 22 3a 22 6f 22 2c 22 c7 ab 22 3a 22 6f 22 2c 22 c7 ad 22 3a 22 6f 22 2c 22 c3 b8 22 3a 22 6f 22 2c 22 c7 bf 22 3a 22 6f 22 2c 22 c9 94 22 3a 22 6f 22 2c 22 ea 9d 8b 22 3a 22 6f 22 2c 22 ea 9d 8d 22 3a 22 6f 22 2c 22 c9 b5 22 3a 22 6f 22 2c 22 c6 a3 22 3a 22 6f 69 22 2c 22 c8 a3 22 3a 22 6f 75 22 2c 22 ea 9d 8f 22 3a 22 6f 6f 22 2c 22 e2 93 9f 22 3a 22 70 22 2c 22 ef bd 90 22 3a 22 70 22 2c 22 e1 b9 95 22 3a 22 70 22 2c 22 e1 b9 97 22 3a 22 70 22 2c 22 c6 a5 22 3a 22 70 22 2c 22 e1 b5 bd 22 3a 22 70 22 2c 22 ea 9d 91 22 3a 22 70 22 2c 22 ea 9d 93 22 3a 22 70 22 2c 22 ea 9d 95 22 3a 22 70 22 2c 22 e2 93 a0 22 3a 22 71 22 2c 22 ef bd 91 22 3a 22 Data Ascii: "o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"o","":"oi","":"ou","":"oo","":"p","":"p","":"p","":"p","":"p","":"p","":"p","":"p","":"p","":"q","":"
2024-04-25 06:22:59 UTC	8192	IN	Data Raw: 54 61 67 28 62 29 3b 69 66 28 6e 75 6c 6c 21 3d 6c 29 7b 76 61 72 20 6d 3d 65 2e 6f 70 74 69 6f 6e 28 6c 29 3b 6d 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 6c 65 63 74 32 2d 74 61 67 22 2c 21 30 29 2c 65 2e 61 64 64 4f 70 74 69 6f 6e 73 28 5b 6d 5d 29 2c 65 2e 69 6e 73 65 72 74 54 61 67 28 67 2c 6c 29 7d 61 2e 72 65 73 75 6c 74 73 3d 67 2c 63 28 61 29 7d 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4f 6c 64 54 61 67 73 28 29 2c 6e 75 6c 6c 3d 3d 62 2e 74 65 72 6d 7c 7c 6e 75 6c 6c 21 3d 62 2e 70 61 67 65 3f 76 6f 69 64 20 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 29 3a 76 6f 69 64 20 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 64 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 54 61 67 3d 66 75 Data Ascii: Tag(b);if(null!=l){var m=e.option(l);m.attr("data-select2-tag",!0),e.addOptions([m]),e.insertTag(g,l)}a.results=g,c(a)}var e=this;return this._removeOldTags(),null==b.term\|\|null!=b.page?void a.call(this,b,c):void a.call(this,b,d)},b.prototype.createTag=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49751	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:22:59 UTC	803	OUT	GET /static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:22:59 UTC	876	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:22:59 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 775 Last-Modified: Sat, 23 Apr 2022 06:08:31 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:22:59 GMT ETag: "1650694111.0-775-1989876712" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:52:59 GMT; Secure; HttpOnly; Path=/ Content-Type: application/javascript; charset=utf-8
2024-04-25 06:22:59 UTC	775	IN	Data Raw: 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 33 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 2e 66 6e 26 26 6a 51 75 65 72 79 2e 66 6e 2e 73 65 6c 65 63 74 32 26 26 6a 51 75 65 72 79 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 29 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 72 65 74 75 72 6e 20 65 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 69 31 38 6e 2f 64 65 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 70 75 74 54 6f 6f 4c 6f 6e 67 3a 66 75 Data Ascii: /! Select2 4.0.3 \| https://github.com/select2/select2/blob/master/LICENSE.md /(function(){if(jQuery&&jQuery.fn&&jQuery.fn.select2&&jQuery.fn.select2.amd)var e=jQuery.fn.select2.amd;return e.define("select2/i18n/de",[],function(){return{inputTooLong:fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:00 UTC	782	OUT	GET /static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.leitz-cloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:23:00 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 89668 Last-Modified: Sat, 23 Apr 2022 06:08:48 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:23:00 GMT ETag: "1650694128.0-89668-4006683238" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:00 GMT; Secure; HttpOnly; Path=/ Content-Type: application/octet-stream
2024-04-25 06:23:00 UTC	7325	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 5e 44 00 0e 00 00 00 04 71 24 00 01 5d e4 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 1a 88 70 1b 85 d7 32 1c 82 83 1c 06 60 00 f6 22 0a 86 bf 6c 85 ad 75 0b a2 26 00 01 36 02 24 03 c4 48 04 20 05 b5 3a 07 81 a8 17 5b 0d 16 b4 d9 4a 6c db bd 8b b5 e9 25 d6 26 b6 10 08 a8 83 58 05 11 c5 79 75 0e a9 e4 27 58 a0 a0 e2 96 cb 27 4b 87 ff 3a c4 de 1f 6b 0b b4 3a c9 91 4e 26 c7 c6 21 7d d7 95 0a 86 ed 8d 37 14 37 4c c7 3c 82 77 db 00 98 dd aa ac 5f 42 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff 5d 24 7b 1e db ec bd f9 c9 fc 23 37 04 92 90 80 a8 20 20 a8 78 54 eb b1 d5 6a 8f dd 15 42 d2 3a 2a eb 25 48 92 66 de 33 e4 be 28 43 42 56 a3 74 1c 74 a8 13 a7 27 7e da b4 61 c4 1c 8c 33 36 8d b2 9d f5 5e 52 Data Ascii: wOF2^Dq$]Fp2`"lu&6$H :[Jl%&Xyu'X'K:k:N&!}77L<w_B]${#7 xTjB:*%Hf3(CBVtt'~a36^R
2024-04-25 06:23:00 UTC	867	IN	Data Raw: 76 fe 75 9f 7f 8d 31 e3 9f df fc dd d7 1f 4e f0 fa 7a 9e 8c a1 61 98 18 ce 97 e6 4d b9 b9 37 ac 1b c2 c3 12 b1 1c ac 5c 55 6a 53 a7 7a 14 54 4d 1d 9d ab a6 99 09 1b f5 ab c4 b4 66 30 97 85 2d b6 f5 e6 5a e4 ef c2 19 dc e7 53 3f e8 c8 69 1b c1 d2 35 77 d3 f1 dd 76 7c 77 35 93 2d 99 df 55 b2 74 13 bb e9 62 d8 c5 a8 89 dd 37 b1 87 0e ef 31 39 f6 a9 78 c9 ea 5d 57 ef a6 fb 61 f5 ee aa 77 5f bd 87 ea d0 a5 c8 49 de 71 db 1b 2b 65 f1 05 c3 d9 91 ac 6e eb 78 ce 9f cf 45 65 b8 73 8e e7 e8 7e 18 33 2e b5 0e 23 37 65 a2 26 d4 3b 72 da 91 d6 9b f1 36 bb b3 26 3d 82 7a 9c 27 dd 53 cf 3c f7 c2 cb ac 29 eb d9 6c c8 a6 ad 6c 63 c7 ae 3d fb ed 60 e7 6c e0 4c 8d 4d 8e cd e1 9a 34 34 f9 7c dc 27 da 27 7b 46 c1 2d e0 2d 4b ad d7 e2 02 3c e0 f8 ba aa e4 fb 6e f0 be b7 bd ef Data Ascii: vu1NzaM7\UjSzTMf0-ZS?i5wv\|w5-Utb719x]Waw_Iq+enxEes~3.#7e&;r6&=z'S<)llc=`lLM44\|''{F--K<n
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: a6 89 67 4d ba 53 2c d3 b8 56 8b e7 ae 06 20 14 fe ff 57 30 69 15 af 1a 87 a7 f1 b0 18 16 fb df b0 97 36 9b cd 66 77 88 04 72 5a 01 00 17 d0 2a 8e 36 aa fa f9 47 93 8b f3 4a f2 f2 09 ac 36 11 c1 93 89 96 eb 73 46 64 f8 8b 23 27 01 4b ca 1c eb ae 10 a3 05 1f 14 7e 02 04 f7 24 3c d1 42 7e ec 4e ce 2e ae 6e 94 71 a1 50 aa d4 1a ad 4e 6f 30 9a cc 16 ab 74 ff a2 89 e3 eb 38 e2 f2 f8 09 04 ba 5f b2 da ef 19 bd 25 e4 b0 b0 b0 b0 e6 78 67 31 6a cc 38 e6 6d 96 33 cd 7a 12 a8 b1 13 32 ac 69 76 95 6c 86 bd 03 c8 75 12 de d6 78 f0 c3 32 e1 10 24 45 33 2c 27 10 8a c4 12 a9 4c ae 50 aa d4 1a ad 4e af 4a 35 f4 c2 59 6b d2 9b c5 c2 74 f5 22 42 2d 99 d5 f2 c0 0a 73 77 5e 55 76 dd a4 36 b3 3c 9f 69 00 08 14 f8 ff f7 5d 81 dc 9f 5b c1 6e 2b c1 7a 19 e1 61 9a cd 3f 04 56 75 Data Ascii: gMS,V W0i6fwrZ*6GJ6sFd#'K~$<B~N.nqPNo0t8_%xg1j8m3z2ivlux2$E3,'LPNJ5Ykt"B-sw^Uv6<i][n+za?Vu
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 46 80 04 1a a0 65 cd 01 e7 44 53 c0 03 d6 9c 13 89 88 b2 ce 03 76 35 d2 4d ce 56 0d 69 e8 e7 0c cb 31 4e 4e 58 ab 79 95 45 45 c0 02 11 f0 45 5b cd 76 72 00 ab a2 88 62 13 32 fd c8 e6 e0 3c 9c c7 34 6f c1 bc 05 16 cb 18 8a a2 96 5d fb e8 47 b6 1f d9 28 8a 62 2c a6 7a fb 56 6b e9 ff bf 03 fa ad 89 e1 2c f4 7a 65 f8 aa 57 b2 ea 0c a8 57 4a 46 7b 21 fc 7a 77 86 bf bd c1 9c ac a9 5f f6 78 e8 7b fa d3 80 ec 6f ba 91 89 67 b7 89 11 4b c6 f5 6d 6e f6 3a e9 c8 ac 86 96 a8 57 ab ec 5b 55 43 26 1e f0 01 9a 0e 10 05 5a 40 4b 0c a7 8e 01 6e 20 06 74 80 36 10 03 5a 6a 40 53 14 88 01 1c 90 d2 d2 00 34 1d 20 06 b4 1c 60 dc 80 76 f3 a4 0a 80 16 8e 06 f0 ea 00 0f 68 40 8c e6 08 9a 33 6e 41 52 55 75 b2 f7 bc cf 35 c4 f3 80 fd 92 18 e7 6d 8c 6b 2c b5 04 a1 b9 39 a4 d9 86 da Data Ascii: FeDSv5MVi1NNXyEEE[vrb2<4o]G(b,zVk,zeWWJF{!zw_x{ogKmn:W[UC&Z@Kn t6Zj@S4 `vh@3nARUu5mk,9
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 6e 3e da 86 b9 87 41 44 c7 21 24 a3 61 62 e3 16 38 c1 7f f0 1f e4 a4 ac 92 86 9e b1 85 dd 5c fa 07 0c 12 0e 05 8b 80 8c 26 a6 65 fc 61 17 94 54 d0 32 b6 99 6b 29 48 24 1c 32 06 4e 61 29 a5 74 f6 27 65 62 61 e3 30 97 fe 09 75 0b 09 83 80 82 81 43 40 42 41 13 c3 32 ff b4 70 f0 0a 89 7a 96 55 54 d3 d6 f7 6e 61 3b a7 52 21 6e f3 b0 bf a8 38 64 0c 5c 22 72 1a 46 56 2e 7e 11 71 69 39 65 8d 74 97 45 1d 7a 37 b3 b4 b1 77 9a 8f 7e 87 82 43 78 80 81 47 42 c5 08 7b ff fa ce 23 22 a3 a2 63 62 e5 e4 15 04 8a 4b c9 2a a8 68 a4 b3 ec ef 7d 23 13 73 2b 5b 07 e7 b9 96 76 e3 d6 3d 14 2c 02 32 5a 98 fb 9b c6 c1 27 22 a5 a0 a6 63 64 61 e3 e4 e1 17 02 8a 49 3e d2 5f a3 74 5a 56 5e 49 55 43 5b cf c0 d8 d4 c2 da ce 71 2e fd 27 04 ec 7f e0 ff ac 42 23 24 34 1c 22 0a 3a 16 2e 01 Data Ascii: n>AD!$ab8\&eaT2k)H$2Na)t'eba0uC@BA2pzUTna;R!n8d\"rFV.~qi9etEz7w~CxGB{#"cbK*h}#s+[v=,2Z'"cdaI>_tZV^IUC[q.'B#$4":.
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: d5 19 da 7f 0a 20 fb d3 10 e9 09 52 65 e8 4c ee 05 97 a2 0e 47 b3 0e 83 16 1c 68 32 82 89 65 51 40 4c b9 72 0d bc 85 8a 92 ad 48 89 1a 0c 85 23 d3 18 7a 32 23 53 ab c9 00 78 1b 44 1d 20 c4 ec 3f a4 4a 93 e9 6f 05 1f 23 e1 80 81 e3 0e fa 1f ff 6b ce ff d9 72 70 5b 12 a4 fb e8 19 b2 f7 94 35 87 05 56 c1 e9 40 ff 6f d4 a2 55 bb ce 3c 5e 03 31 e8 ee 1f 92 5c 02 01 8d 84 af a6 73 cc 61 0b 17 08 a1 13 bd 58 82 8d 2c 59 e2 45 5c 8a 27 f4 d0 77 6b aa 95 73 4c b9 9a 1a 4d c6 5c 2f b1 4a 5e a2 a6 35 47 ad 6a 23 16 d3 b0 c6 e1 1c a5 ca 80 ee 53 fb 8a 95 f7 af c1 33 08 11 5b 89 60 39 ac 69 78 72 9b a5 63 26 d5 89 1e ff cb 1d 0f 7d 0c 1b 10 c0 37 0f 5a 4b db 43 3a 52 2f fc 62 98 4d d6 08 a1 50 14 ec 10 a0 ec 4b 24 19 f5 ff d7 06 fc ff 6f fd 03 6c 94 65 0b c6 56 be 4c Data Ascii: ReLGh2eQ@LrH#z2#SxD ?Jo#krp[5V@oU<^1\saX,YE\'wksLM\/J^5Gj#S3[`9ixrc&}7ZKC:R/bMPK$oleVL
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 95 ca bd 2e 33 19 25 8c c4 6c b4 bc 8a 4d d7 09 83 7e cf 6d 7e 87 1b df 7b 0b e7 74 c0 00 76 86 68 80 87 24 89 7f 4b 20 00 0e 8b e5 79 5c cc 92 c9 50 21 5f 0b 1c a8 2d 6f 1c d9 dc 55 93 32 67 04 59 8a a0 53 b2 87 41 de 65 f1 9e 0b 19 6d 3a 66 ba 03 0a d1 8d 1d a5 6d 7d 6c 93 3c bb 2b b6 22 a8 f9 50 56 6f 21 cd 77 b9 fa 72 ed aa b1 54 ed bf 58 79 d4 44 41 ce 50 61 8b 85 a5 71 74 3b 4e ce 6c a1 77 d1 4d e2 02 42 0d 1d f8 0f 6f 99 aa 05 01 0c 58 84 32 c5 09 56 57 79 1a 05 71 66 27 34 fe 5a 89 86 fe b3 f9 51 fd fb 2c 72 12 b1 f0 46 68 4e 3d 5d 40 68 b3 b1 c0 a0 39 88 1b 52 bf 18 90 7f 98 6a 44 7c 4d 99 60 1a 2f 1c a1 8c c6 59 0e cf 6c c8 6a a0 bd 7b b7 64 d8 be 82 96 d8 88 2b fc 98 15 1a c6 3c 2f b9 02 1a 09 5b 9b 5c 53 d9 c7 a7 08 0e 7d 41 5a 0c ec f3 3e 53 Data Ascii: .3%lM~m~{tvh$K y\P!_-oU2gYSAem:fm}l<+"PVo!wrTXyDAPaqt;NlwMBoX2VWyqf'4ZQ,rFhN=]@h9RjD\|M`/Ylj{d+</[\S}AZ>S
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 11 e5 59 7f da a9 8c 58 7a cd 68 32 26 6f 29 5a 79 e3 9d 97 60 d4 3d ad 48 2d 9e 5a 71 f0 b3 1d 00 64 ef 3d 00 f7 1e 46 b0 54 2d 2d c2 77 df c1 06 42 e6 de 41 4e 0e 37 a8 a3 42 38 eb 98 8b 09 bd 62 fb 28 2a bd df 28 46 b8 13 66 81 1b 90 49 92 2a 14 1b ff 34 d7 50 e9 ad 75 c4 0f 37 ea 7e de a9 69 68 f7 f9 44 fe c6 77 44 46 aa 9a da 50 5d cf fe 28 46 68 9a 66 c3 c9 08 f8 02 85 d0 a4 e7 4b 34 c0 9e 5d b4 9b d9 b5 38 74 f1 97 41 52 fd 4c a5 8f 61 07 0f 20 2f 8e 81 b0 67 fe 1b f6 e4 7c db 2e 88 65 fd 6a e3 82 b5 e9 f7 b9 6e 77 0e 70 d6 1d d0 0e 69 eb 76 c7 ff a3 07 bf 01 dd a5 bf e5 58 fd 3b 5c 60 b6 43 7d 85 e6 36 f5 bf d3 da 89 ae c8 dc 07 f2 d1 a2 d2 e0 a2 db db 8c 3e 6b 43 18 87 20 77 81 71 f8 7d 3f 15 88 76 ff dc fc 0d db ac e5 40 4f 0b b4 4d 7b bb 6e cb Data Ascii: YXzh2&o)Zy`=H-Zqd=FT--wBAN7B8b((FfI4Pu7~ihDwDFP](FhfK4]8tARLa /g\|.ejnwpivX;\`C}6>kC wq}?v@OM{n
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: da e2 fe fa 40 62 cd a8 af 64 32 a4 15 09 1f e3 c5 d6 3f 8e 2c bf fd df b0 ef aa 32 9a d4 e7 70 0b bd 0d 4c a9 df 67 65 7b f8 e5 38 62 61 31 13 ec cd cc e6 1d 4f 71 8e 73 58 1c bb 47 c1 59 40 5f f1 9b 92 a2 fd fe e4 ba c9 7a 2e 4b 5e fe d9 cf ef bb b7 e4 4e 70 36 73 d2 ef 7d b3 d7 c9 55 d4 96 0d ce 40 a8 cc 21 47 7c 0b 51 82 a8 d4 12 4b 0b 51 6d 88 aa 92 56 2c a9 ba 95 4a 93 a2 40 5a 18 65 b7 bb b6 b3 2d b7 bf cd 39 0e d3 c3 06 a2 51 b8 67 60 b0 0e 71 83 0d ff 72 8c 82 4e a2 d2 62 c8 31 5e 08 9d be d7 c9 42 44 fc 54 20 32 ec 71 61 44 86 5e b9 6e 24 12 d4 8e f4 28 c1 31 cd 58 1a b6 da 7c 1c 91 50 11 b6 59 ef c3 64 ad a1 99 a1 82 64 e4 c5 a9 e3 a9 9d 66 d1 c4 54 4f 40 9b d2 a8 c6 7c 5e d5 68 4a 03 fc e6 2d 3c 19 19 23 8f ce d7 1e a4 5b 20 72 a5 c4 d8 8c 57 Data Ascii: @bd2?,2pLge{8ba1OqsXGY@_z.K^Np6s}U@!G\|QKQmV,J@Ze-9Qg`qrNb1^BDT 2qaD^n$(1X\|PYddfTO@\|^hJ-<#[ rW
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 27 34 fd f0 34 7d b0 6d 3f bc 4d c2 5c 04 27 59 fa 30 2d 70 e4 45 99 0a c2 0d 1e 21 44 65 d4 1b 5f b4 0f b5 9d b9 75 2b b4 e2 e1 5e 81 c4 c8 25 95 65 f1 7e a4 f1 27 30 60 5a b2 18 e6 75 bd da 9b 55 e5 b5 5f 6f 5b f4 6e 11 73 2c c2 4c 62 97 e9 49 89 43 a1 50 a6 01 b2 10 cf 70 28 84 14 dc 62 a7 b2 4c 59 2e ea 71 cf c5 58 06 38 ed 99 6b b3 9d 04 2f 58 56 11 99 30 8d f6 0c 8c 87 54 61 89 28 89 a2 a2 74 58 a6 b4 88 94 3e 14 53 3a 45 42 a5 13 43 99 3d 58 e4 7b 0c ed b5 a7 8d 85 af d8 95 f9 a6 bd 1f d8 b4 38 a9 ef 73 35 e0 f9 69 23 95 1f 43 55 4e a1 d0 1b 51 8c 3a e3 dc e3 4e 0c 0d 8c 16 06 c7 e2 3d fd e3 61 55 58 22 4c a2 11 d7 28 5c fa a5 5f b9 24 b5 f5 9f 95 11 31 fd 88 7e b7 be b5 e6 69 23 c1 07 89 e8 e3 6d 01 0f ea 0f bc b3 8e 20 94 ab 6c 15 58 67 e9 fa 48 Data Ascii: '44}m?M\'Y0-pE!De_u+^%e~'0`ZuU_o[ns,LbICPp(bLY.qX8k/XV0Ta(tX>S:EBC=X{8s5i#CUNQ:N=aUX"L(\_$1~i#m lXgH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49754	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:00 UTC	781	OUT	GET /static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.leitz-cloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:23:00 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 49916 Last-Modified: Sat, 23 Apr 2022 06:08:48 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:23:00 GMT ETag: "1650694128.0-49916-3766689590" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:00 GMT; Secure; HttpOnly; Path=/ Content-Type: application/octet-stream
2024-04-25 06:23:00 UTC	7325	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 f3 00 00 00 bc 00 00 00 60 63 6d 61 70 00 fd bd 0b 00 00 01 1c 00 00 00 64 67 61 73 70 00 00 00 10 00 00 01 80 00 00 00 08 67 6c 79 66 31 d2 95 ed 00 00 01 88 00 00 b9 fc 68 65 61 64 19 d6 de e9 00 00 bb 84 00 00 00 36 68 68 65 61 07 d4 04 a7 00 00 bb bc 00 00 00 24 68 6d 74 78 38 58 3c 8b 00 00 bb e0 00 00 03 44 6c 6f 63 61 ba 19 ea b4 00 00 bf 24 00 00 01 a4 6d 61 78 70 00 e0 00 dd 00 00 c0 c8 00 00 00 20 6e 61 6d 65 5b 1f 42 f3 00 00 c0 e8 00 00 01 f2 70 6f 73 74 00 03 00 00 00 00 c2 dc 00 00 00 20 00 03 03 fb 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2`cmapdgaspglyf1head6hhea$hmtx8X<Dloca$maxp name[Bpost 3@
2024-04-25 06:23:00 UTC	867	IN	Data Raw: 2f 01 37 36 34 27 26 22 07 02 00 ac 0f 2b 10 0f 0f ac ac 0f 0f 10 2b 0f ac ac 0f 2b 10 0f 0f ac ac 0f 0f 10 2b 0f 02 17 ab 10 10 0f 2b 0f ac ac 0f 2c 0f 0f 0f ac ac 0f 0f 0f 2c 0f ac ac 0f 2b 0f 10 10 00 02 00 00 00 3f 04 00 03 5b 00 1b 00 4c 00 00 01 17 16 32 37 36 34 2f 01 26 22 0f 01 06 14 17 16 32 3f 01 15 14 16 33 32 36 3d 01 25 36 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 06 07 1e 01 15 14 07 0e 01 07 06 07 15 21 22 27 2e 01 27 26 35 34 36 37 2e 01 35 34 36 33 32 16 17 02 72 10 11 2f 11 11 11 72 11 2f 10 72 11 11 11 2f 10 11 21 18 17 22 fe fd 11 1a 1a 43 28 28 2b 3b 33 34 4e 16 16 01 02 35 40 12 11 3d 2a 2a 30 fd c8 30 29 29 3e 12 12 56 43 12 15 53 3b 22 39 14 01 b5 10 11 11 10 2f 11 72 10 10 72 11 2f 10 11 11 10 cc 17 22 22 17 cc ff 25 1f 1e 2d 0c Data Ascii: /764'&"+++++,,+?[L2764/&"2?326=%67>7632!"'.'&5467.54632r/r/r/!"C((+;34N5@=**00))>VCS;"9/rr/""%-
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 15 14 16 17 1e 01 33 32 36 37 3e 01 35 34 26 27 37 36 26 27 26 06 0f 01 01 26 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 07 21 13 0e 01 15 14 16 17 1e 01 33 32 36 37 3e 01 35 34 26 27 2e 01 23 22 06 03 3e 01 35 34 26 27 2e 01 23 22 06 07 0e 01 15 14 16 17 1e 01 33 32 36 37 13 3e 01 35 34 26 27 2e 01 23 22 06 07 0e 01 15 14 16 17 1e 01 33 32 36 25 1e 01 33 32 36 37 3e 01 35 34 26 27 2e 01 23 22 06 07 0e 01 15 14 16 13 3e 01 35 34 26 27 2e 01 23 22 06 07 0e 01 15 14 16 17 1e 01 33 32 36 01 f1 10 1d 0c 0f 0f 0f 0f 0f 24 15 15 24 0f 0f 0f 0b 0b 46 08 11 14 13 27 08 46 fe ed 27 1f 20 2d 0c 0c 24 25 7d 54 54 5f 5f 54 54 7d 25 24 0c 0c 2d 20 1f 27 fd bc fe 08 07 07 08 07 12 0b 0b 12 07 08 07 07 08 07 12 0b 0b 12 f2 07 08 08 07 Data Ascii: 3267>54&'76&'&&'.'&547>7632!3267>54&'.#">54&'.#"3267>54&'.#"326%3267>54&'.#">54&'.#"326$$F'F' -$%}TT__TT}%$- '
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 1b 80 1b 25 25 1b 20 fe c0 20 1b 25 25 1b 80 1b 25 25 1b 20 fe c0 20 1b 25 25 1b 80 1b 25 25 1b 20 05 04 05 0b 07 01 60 60 1b 25 25 1b 01 00 1b 25 25 1b 60 01 60 07 0b 05 01 e3 04 0c 06 80 26 1a 80 1b 25 25 1b 80 1a 26 60 60 26 1a 80 1b 25 25 1b 80 1a 26 60 60 26 1a 80 1b 25 25 1b 80 1a 26 80 06 0c 04 05 05 60 25 1b 80 1a 26 26 1a 80 1b 25 60 05 05 00 00 00 00 02 00 33 00 00 03 cd 03 9a 00 28 00 34 00 00 01 15 23 15 23 15 23 15 23 22 26 3d 01 01 2e 01 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 23 22 26 27 37 32 36 35 34 26 23 22 06 15 14 16 02 33 99 67 66 67 12 21 01 6f 04 04 16 16 4c 34 33 3a 3b 33 33 4d 16 16 16 16 4d 33 33 3b 22 41 1d b3 20 2d 2d 20 1f 2d 2d 01 85 52 66 67 66 20 13 9a 01 6f 10 22 12 3a 34 33 4c 16 17 17 16 4c 33 34 Data Ascii: %% %%%% %%%% ``%%%%``&%%&``&%%&``&%%&`%&&%`3(4####"&=.547>7632#"&'72654&#"3gfg!oL43:;33MM33;"A -- --Rfgf o":43LL34
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 33 15 1e 1e 15 67 15 1e 1e 15 79 0f 2a 0f 0f 0f 48 0f 2b 0f 0f 0f 49 49 0f 0f 0f 2b 0f 48 0f 0f 0f 2a 02 fc 9e 40 30 30 40 10 10 10 11 37 25 26 2a 39 5e 1b 81 40 5a 01 00 10 10 40 30 30 40 3c 2a d6 10 4f 32 32 4f 10 d5 2b 3c 9e fe 9e 1e 15 15 1e 1e 15 15 1e b0 0f 0f 0f 2a 0f 49 0f 0f 0f 2b 0f fe af 48 0f 2b 0f 0f 0f 49 0e 2b 0f 0f 00 00 07 00 00 01 00 04 00 02 9a 00 11 00 1a 00 37 00 61 00 71 00 7e 00 89 00 00 13 21 32 16 1d 01 14 06 23 21 22 26 3d 01 34 36 33 31 13 33 27 23 07 33 37 33 17 37 15 33 32 36 37 3e 01 35 34 26 27 2e 01 27 35 3e 01 37 3e 01 35 34 26 27 2e 01 2b 01 05 32 16 17 1e 01 17 37 2e 01 23 22 06 07 0e 01 07 0e 01 15 14 16 17 1e 01 33 32 36 37 35 0e 01 23 22 26 35 34 36 37 3e 01 33 05 35 33 32 16 17 1e 01 15 14 06 07 0e 01 2b 01 15 33 32 Data Ascii: 3gyH+II+H@00@7%&9^@Z@00@<O22O+<*I+H+I+7aq~!2#!"&=46313'#37373267>54&'.'5>7>54&'.+27.#"32675#"&5467>3532+32
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 22 26 35 34 36 3b 01 01 11 21 11 21 05 22 26 35 34 36 33 32 16 15 14 06 23 07 34 36 33 32 16 1d 01 21 35 01 cd fe cd 2b 3c 3c 2b 02 cc 2b 3c 3c 2b fe cd 67 15 1e 1e 15 fe cc 15 1e 1e 15 67 fe cd 02 cc fd 34 01 66 24 34 34 24 24 34 34 24 9a 69 31 31 69 fe cc 9a 66 3c 2a 01 9a 2a 3c 3c 2a fe 66 2a 3c 66 1e 16 15 1e 1e 15 16 1e 02 66 fe 66 01 9a e6 34 25 25 35 35 25 25 34 56 2b 2b 2b 2b 2a 2a 00 00 05 00 00 00 00 04 00 03 cd 00 0e 00 31 00 3a 00 69 00 6e 00 00 01 11 14 16 17 3e 01 35 21 11 34 26 23 21 11 2b 01 34 37 3e 01 37 36 33 21 32 17 1e 01 17 16 15 11 33 14 07 0e 01 07 06 23 21 22 27 2e 01 27 26 35 11 01 0e 01 07 21 32 36 37 21 37 2e 01 27 33 1e 01 33 32 36 35 34 27 2e 01 27 26 35 34 36 37 35 33 15 1e 01 17 23 2e 01 23 22 06 15 14 17 1e 01 17 16 17 14 Data Ascii: "&546;!!"&54632#4632!5+<<++<<+gg4f$44$$44$i11if<*<<f<fff4%%55%%4V++++*1:in>5!4&#!+47>763!23#!"'.'&5!267!7.'332654'.'&546753#.#"
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 4b 4b fe 7e 3f 5b 5b 3f 3f 5b 5b fe c1 19 18 4c 2d 2d 29 29 2d 2d 4c 18 19 fe 00 ff 00 1a 19 4d 2d 2d 26 02 42 26 73 26 cd 04 00 cd 26 73 26 42 02 26 2d 2d 4d 19 1a 01 e6 4c 34 35 4b 4b 35 34 4c 4c 34 35 4b 4b 35 34 4c 5b 3f 3f 5b 5b 3f 3f 5b ff 00 34 27 26 33 0d 0c 0c 0d 33 26 27 34 66 66 33 67 26 1d 1c 27 0a 09 26 8d 4d 4d 8d 26 09 0a 27 1c 1d 26 00 00 00 00 04 00 66 ff cd 03 9a 03 cd 00 16 00 26 00 2c 00 49 00 00 01 33 32 16 15 14 06 23 07 22 26 27 2e 01 3d 01 34 36 33 32 16 1d 01 01 21 01 11 14 06 23 21 22 26 35 11 34 36 33 31 05 15 14 16 3b 01 01 32 37 3e 01 37 36 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 02 33 33 16 1e 1e 16 65 0c 15 07 05 07 1e 15 15 1e fe 9a 01 6e 01 5f 3c 2b fd 9a 2b 3c 3c 2b 01 66 1e 15 cd fe cd 2a 26 25 Data Ascii: KK~?[[??[[L--))--LM--&B&s&&s&B&--ML45KK54LL45KK54L[??[[??[4'&33&'4ff3g&'&MM&'&f&,I32#"&'.=4632!#!"&54631;27>7654'.'&#"333en_<++<<+f*&%
2024-04-25 06:23:00 UTC	764	IN	Data Raw: 2d 30 2d 70 2d d8 2e 68 2e f2 2f 74 30 36 30 78 30 bc 31 34 31 a0 32 26 32 aa 33 5a 33 9e 34 44 34 c2 35 6a 36 18 36 7e 36 ca 37 0e 37 7a 38 1a 38 f0 39 60 39 88 39 ce 3a b0 3a be 3b 24 3b 6c 3b 94 3c 06 3c 8a 3c f8 3d 66 3d c4 3e 16 3e b6 3f 16 3f 24 3f 7e 40 20 40 98 41 48 41 9a 42 14 42 de 43 4e 43 bc 44 12 44 8c 44 9a 44 fe 45 2e 45 a8 46 1c 46 60 46 be 47 78 47 c2 48 24 48 46 48 78 48 de 49 6e 49 c0 4a 26 4a 80 4a da 4b 3a 4b c6 4c 7a 4c d6 4d 50 4d b2 4e 42 4e fe 4f 78 4f e6 50 8e 50 bc 51 ca 52 5a 53 42 53 f0 54 e2 55 5c 56 64 57 0a 57 52 58 34 58 e6 59 62 5a 68 5a b4 5b 8c 5b f0 5c fe 00 01 00 00 00 d1 00 db 00 0e 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 ae 00 01 00 00 00 00 00 01 00 10 00 00 00 01 00 00 00 Data Ascii: -0-p-.h./t060x01412&23Z34D45j66~677z889`99::;$;l;<<<=f=>>??$?~@ @AHABBCNCDDDDE.EFF`FGxGH$HFHxHInIJ&JJK:KLzLMPMNBNOxOPPQRZSBSTU\VdWWRX4XYbZhZ[[\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:00 UTC	781	OUT	GET /static/bootstrap/dist/fonts/sourcesanspro-regular.woff2 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.leitz-cloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:23:00 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 89676 Last-Modified: Sat, 23 Apr 2022 06:08:48 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:23:00 GMT ETag: "1650694128.0-89676-3428983305" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:00 GMT; Secure; HttpOnly; Path=/ Content-Type: application/octet-stream
2024-04-25 06:23:00 UTC	7325	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 5e 4c 00 0e 00 00 00 04 72 98 00 01 5d ec 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 1a 88 70 1b 85 d7 3a 1c 82 83 1c 06 60 00 f6 22 0a 86 c3 34 85 ad 30 0b a2 26 00 01 36 02 24 03 c4 48 04 20 05 b4 5e 07 81 a8 17 5b 74 15 b4 cd 72 88 bb 9b 64 1f a0 fc d1 b4 be 95 69 54 89 33 73 51 75 8e 6d 2b 90 1f 40 c5 aa ab 54 88 35 44 1f 2f 08 14 55 cf 36 dd 66 a6 73 6c f0 43 47 d5 d4 62 8e a0 db b6 67 85 42 e9 bc 21 05 2f f5 4d 22 d9 ff ff ff ff ff ff ff ff ff ff ff f7 92 96 c8 cd 24 f7 9f e4 ee 7e 2c 1e 79 78 86 c8 d2 aa 38 71 d4 2a b6 54 ad a3 02 8b 82 05 e7 a3 98 a9 c4 20 25 7d 08 32 c8 71 01 25 54 1d e4 a1 a6 b8 1b 53 b2 47 72 70 bd 2e 21 50 49 93 29 ea f3 80 f6 24 9b b7 42 0f 4d 46 68 0c 93 08 ca Data Ascii: wOF2^Lr]Fp:`"40&6$H ^[trdiT3sQum+@T5D/U6fslCGbgB!/M"$~,yx8q*T %}2q%TSGrp.!PI)$BMFh
2024-04-25 06:23:00 UTC	867	IN	Data Raw: f2 83 7f fa 5b 48 9f 88 9f 1e dc e8 5e 4f 78 e8 9f f9 85 42 2a 81 43 d0 d0 c5 18 7d 2e f3 1a f9 33 eb b3 37 ba d1 8f 51 4c 07 7c 50 89 0c 22 9b c8 fb 52 cf c5 9c e7 32 2f 25 45 21 f1 48 8f a5 ac a7 72 94 bb e4 18 5e e9 95 5b f5 35 88 ff 39 34 15 de df ad d9 fa ed dc c1 5d da 6d 13 e6 a1 71 de e3 3d b5 33 a6 4d 6f 02 41 01 49 a5 3f f9 e4 93 cf 40 52 a8 f2 4f 28 bd d1 42 69 58 5d 7a 2c 58 2c ea 65 70 ec 3f 94 4a 86 a3 59 f2 18 24 f9 67 9a be 3a 61 2b 53 a6 4c 41 3b cd 14 b2 27 5b 43 1b 3e 2f 7c db 6b a0 0e 23 39 8a 14 b7 f2 dc f8 d7 8c b2 18 7a 1b e7 c6 8a 4e 29 16 a9 f2 88 7a b1 b4 10 7e 04 d1 c7 e9 3e 45 df fd 7a 6f 46 f3 c2 2d e0 56 b8 4e 6d da 75 e8 d4 95 73 59 7f e5 df c3 3f fc 33 ff 85 15 ab d6 ac 17 6e 77 00 48 fc 3d 3b 7d fa b1 0d 14 ce fc d5 67 50 Data Ascii: [H^OxB*C}.37QL\|P"R2/%E!Hr^[594]mq=3MoAI?@RO(BiX]z,X,ep?JY$g:a+SLA;'[C>/\|k#9zN)z~>EzoF-VNmusY?3nwH=;}gP
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 0b 66 c0 30 c2 96 5b b8 08 c7 1c 77 c2 49 a7 9c 16 29 4a b4 18 67 9c 75 ce 79 17 5c 74 49 ac 38 f1 2e 4b 28 57 f6 f1 fe ed 5f 6f d8 98 45 4b c1 85 38 02 10 04 c4 46 fa e8 7f 36 8a 98 52 7f 99 a1 21 dc d5 3f 86 dd b1 d9 6c 36 9b cd 66 63 6f 85 1d 91 db c2 30 65 8f 56 58 a9 95 f2 3c 88 f0 25 1b cc 88 c6 b9 b0 8c 90 2c 41 4b c1 80 20 3a d0 d0 2b 26 ec db 4b a1 74 80 21 20 c2 91 7a e1 75 05 09 1d 18 4e 90 14 d0 0c cb f1 82 28 c9 8a aa e9 86 69 d9 8e fb 42 cd a6 07 28 64 13 a5 49 ba 0c ef 32 53 b2 bc 97 5d 8b 20 1a 1a 5a a1 cd ad 9a a0 1f db 00 ce 9d c3 9b 68 62 5d 23 ac ce 24 68 54 ab 4a 52 d3 eb 11 4c 7f 4f 03 18 66 58 26 c3 11 e1 98 e3 4e 38 e9 94 d3 22 45 89 16 e3 8c b3 ce 39 ef 82 8b 2e 89 15 27 de 65 09 e5 ca 3e fb d9 f0 df ba c3 c6 86 b3 4e 77 ae 74 7e Data Ascii: f0[wI)Jguy\tI8.K(W_oEK8F6R!?l6fco0eVX<%,AK :+&Kt! zuN(iB(dI2S] Zhb]#$hTJRLOfX&N8"E9.'e>Nwt~
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: d2 40 04 d2 26 28 01 e1 08 c9 21 0a a9 21 7d 42 05 11 aa 3a 7a 1a 48 05 09 90 90 d0 45 ce 38 a7 88 42 84 ae 23 39 4e 96 70 8e 88 1d 98 bc 05 b6 ea b6 3a f4 83 db 0d 0b 5b 20 ac f9 bc 4a c8 72 88 40 1c a2 72 b6 9a c8 e4 08 56 39 0e c5 1e 97 e7 6f c8 5a 49 ac 24 06 36 b6 36 b6 44 44 60 02 02 02 36 fd fc 96 11 5b 46 4c 40 40 40 b0 66 48 77 e5 8e 32 b4 61 f5 0c a7 26 1c eb c3 75 1d 19 66 d6 2e e9 a9 7c 19 d5 25 9b 95 4c 85 70 d7 d9 19 fe ed 8b 4a 73 f9 54 2f 60 bc f4 15 e0 0c c9 fa aa 1b c9 b3 e7 34 e1 c2 49 6e 9d 85 5c d6 55 e9 88 a7 3a 30 54 17 36 9b a5 aa 54 92 d1 82 7b 67 69 29 70 68 85 d3 62 d1 62 89 97 8a 4e 4e 0b 4a 2b 9e 16 87 16 9b 56 3c a4 0d af 09 01 17 96 f4 80 15 04 a4 cf 6f 80 6b 52 05 a4 cb d0 0e 34 18 82 19 65 b5 f1 c5 4a 2a 99 9e f1 f7 d6 43 Data Ascii: @&(!!}B:zHE8B#9Np:[ Jr@rV9oZI$66DD`6[FL@@@fHw2a&uf.\|%LpJsT/`4In\U:0T6T{gi)phbbNNJ+V<okR4eJ*C
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 9e c4 23 25 0d 3d 13 2b 3b 17 2f bf 10 40 4c e2 91 fe 8c 6c 56 4e 41 59 15 a8 a5 ab 6f 64 0a b2 b2 75 98 73 ff 07 83 fc 1f fd 77 15 0a 58 04 64 54 0c 6c 3c 42 62 52 72 2a 5a 06 66 4f 1c 0f f7 e3 e4 13 f6 2a a3 a8 a6 6d 60 66 3d c7 06 38 0c 22 1a 0e d1 2d 9b bf 5d 83 9a 8e 91 85 8d 93 c7 b3 a0 88 a8 b8 94 ac bc 92 ca 55 9f 87 46 43 53 47 cf d0 c4 dc d2 c6 de 69 ae 8d 26 25 a0 e2 23 42 12 6b 05 7e 0b 65 00 1a 40 96 ff 45 21 14 c6 f4 8e 3d 01 81 7f 10 dd 5c 12 8a 7f 61 4e 8e b7 6d 01 c2 2b ef d1 8f d5 65 a3 51 e1 83 7c 99 52 c4 81 5a ea e2 ce 85 63 3f 6c f8 ee 1b c9 cb f2 60 59 f0 65 cf 1c 09 03 15 19 01 16 1a 72 60 d5 d9 c1 d6 0a 64 6a 74 f7 77 84 f8 25 16 07 0c d4 c0 ab 8b a3 9d b5 85 99 b1 81 0f 6d 0d 35 ef 19 ad 54 5f 57 0b a8 aa ac 20 27 2d 21 06 10 e2 Data Ascii: #%=+;/@LlVNAYoduswXdTl<BbRrZfOm`f=8"-]UFCSGi&%#Bk~e@E!=\aNm+eQ\|RZc?l`Yer`djtw%m5T_W '-!
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 9c 19 9e d9 59 ec c3 7a 66 76 20 9e aa 61 20 31 ac 0c 84 a2 b0 78 a6 40 53 6c d2 01 c4 00 bd 1d e0 13 d5 ed 51 af f7 46 2f fa a0 cf 1e a3 ae 1d 0e 9d f5 eb fd 56 7f d9 d3 7a 76 ff d9 6b 1f 75 01 72 5a ad da bc 5a 6b c9 ad 39 cc ac ef 4b 7d af 9a 6a ac be e2 d4 78 4d 03 ed e1 96 9e 5e aa 20 42 30 71 26 95 29 42 7f b1 d3 a8 88 ea 68 88 70 d2 c9 a6 98 96 a9 3b 89 c1 0b 64 70 07 83 0c 3f 62 09 9c 70 2e 97 72 33 77 f1 34 cf 97 0c 8a 0c 1f c0 e6 a3 88 ad 44 4d 46 16 35 44 30 61 5f e2 0d 4c bf 4c 36 3e e2 73 cf 20 1c 80 37 75 b5 3a 3c e4 5f 31 a2 74 29 51 55 ef 08 36 ee 59 d3 c7 36 cd e6 d8 42 58 0e 5b 21 df b2 55 ae 7e 79 cd d9 f0 b3 15 35 af 4a e7 81 d4 8f af 04 8a 1f a0 28 00 c0 ff 47 73 da ef c5 b1 b4 3b 96 45 f1 01 bc ce 54 a4 95 8a 79 71 75 30 9e ad ae 00 Data Ascii: Yzfv a 1x@SlQF/VzvkurZZk9K}jxM^ B0q&)Bhp;dp?bp.r3w4DMF5D0a_LL6>s 7u:<_1t)QU6Y6BX[!U~y5J(Gs;ETyqu0
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 46 4e c2 59 3c f8 fd 84 f2 98 dd 1d 27 da e4 ad 39 b4 96 2b d7 51 28 88 1b 2d 2c b9 2b 15 fc 69 f8 51 d4 4d de 60 89 06 38 db 3f 65 20 b6 a5 39 fc b8 b3 31 d3 d6 91 0a 1f 58 44 f8 3b 41 15 e0 71 78 57 71 77 17 4e 9b 2a 90 22 24 e5 3a 0a 56 d0 c6 8e fe 0c 05 8a 2a 1f d1 16 80 b5 54 e1 95 73 ee 7b 01 fa e4 cc ee 17 39 f7 4d fe 16 6f 34 d9 a5 cc 2a c7 f3 fa ec bf 47 d4 fb 3b eb 2b a2 b0 11 84 d7 f7 67 c0 33 0c b1 5b f5 33 d1 27 8a b7 5c 7f 0e 15 9d eb eb 63 ed 97 3b 44 13 2b b3 6a 0a d2 f0 44 99 7e 3b c5 c2 50 2e 42 85 2d 84 94 21 5d 1e 45 ea 1f 7e 70 4c 32 4b 33 81 1f 30 9d 0a e4 0d f4 94 a4 2a 3d b8 c8 39 59 f3 27 29 09 ba 5b c5 3f 8c 3c 57 6b db 6c 0a 7a 08 84 cf e9 cf 7b 8c 4f f0 d0 b4 91 ca c4 f9 81 14 0b 41 97 72 ca 59 92 e4 43 9a a9 93 5b b2 12 1f a5 Data Ascii: FNY<'9+Q(-,+iQM`8?e 91XD;AqxWqwN"$:VTs{9Mo4G;+g3[3'\c;D+jD~;P.B-!]E~pL2K30=9Y')[?<Wklz{OArYC[
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: bd f2 69 7e f5 7a 90 02 d8 23 82 ca d8 68 d5 47 a1 90 df 76 5f 3c 70 60 2a b8 1a fa 97 33 5b 95 f1 f2 b7 1d 66 58 6d 74 c7 5f 66 a7 2b 3c 5d d3 c4 11 8e 48 44 da 9e 68 ce e1 ca 08 84 b8 12 a7 5a c2 51 67 8d 01 9e ed 3c 3e 1a be 8d ca e6 ef 8f c5 fd 79 1b 45 f5 78 0c df 00 b0 a3 07 55 55 3c 84 95 aa f4 f5 5c a1 ed 00 04 f0 eb c0 08 ca a6 52 88 6b 73 07 3c 90 7e 5b 8c d5 49 99 5b 02 86 d1 dd 50 f7 45 43 59 c9 40 ed a5 77 ef b0 68 c5 f1 cb f0 08 89 7a 9d 46 dc d0 f5 5a a1 1c a7 af 70 ee e3 47 e0 14 fa 2b 33 c0 55 60 2a 12 97 17 ff c1 61 34 dc 67 b8 84 97 f0 fc 6c b9 70 33 4d ec 09 86 b4 fe e6 47 8b 07 ca f0 da 9d 89 84 fe 1f 0a 95 a2 3b 58 54 9a 3c 28 03 bf 81 60 76 c6 33 4f 27 f1 41 21 eb d4 63 43 ca a1 08 56 14 3d 62 f3 e3 50 f9 ff a0 07 d8 cd b0 4f 25 be Data Ascii: i~z#hGv_<p`3[fXmt_f+<]HDhZQg<>yExUU<\Rks<~[I[PECY@whzFZpG+3U`a4glp3MG;XT<(`v3O'A!cCV=bPO%
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: fa 2e ee 34 f6 c1 36 89 d7 7a 1f 96 3d 36 de 47 33 72 e2 61 eb 0b a7 f2 1f 48 bc 1f 8c d5 ef 86 d1 72 30 e8 fb c0 81 39 bf fc b5 c4 f3 b1 f3 ce af ad e0 c0 86 1f 3b 27 7f 98 04 45 9c 49 e5 6a e5 c4 24 b0 43 c7 20 3a 09 94 e4 ec db 3c cd 0a 2f 8e 91 86 a4 9f 8b 20 9a fd f6 fd 10 bd bf b7 21 99 b9 a2 c5 01 2f 8b 91 70 5c 4c 53 81 76 6c 3d 1c e5 33 ea 78 eb 51 5c 59 7f 2c 45 74 4b 8c d2 8a b6 30 d2 8d 57 2f 28 e3 46 ef 03 bf f9 53 9d 8f 9d 13 77 27 9c b4 4e 0a ec 32 0c e6 e2 73 fd c1 ec 16 e7 b0 e8 8a 02 8d 28 2f 5e ab e2 77 4c ec 9a b0 b9 aa 0e 17 7f bc 65 c5 47 75 53 a0 84 b3 4b f9 e1 b8 bb 7b d8 15 8e 0c 7b 52 61 bb 67 26 a3 7d 3c 47 5f 91 11 07 55 79 ab 7a 25 59 3b 9e 7e b7 44 ec f9 91 3c f6 ef 51 b0 6c 9b 3d fa 7b 8b 03 1c 01 6c bb e0 72 54 d9 3d 29 aa Data Ascii: .46z=6G3raHr09;'EIj$C :</ !/p\LSvl=3xQ\Y,EtK0W/(FSw'N2s(/^wLeGuSK{{Rag&}<G_Uyz%Y;~D<Ql={lrT=)
2024-04-25 06:23:00 UTC	8192	IN	Data Raw: 64 74 70 68 78 aa 17 d6 eb dc 89 c8 e1 51 b6 4f 1d 10 c1 17 bd 9b 05 9b 97 9f 17 7a a2 cc db 22 dc f2 39 18 84 b2 f2 13 d4 42 fa b2 26 9c 75 35 0d fd f2 90 8c cc db 26 6a 77 67 39 fd c1 da 7c 64 ef 51 97 a6 f1 c5 27 dd 7f 66 bf 74 f0 9c 3f 53 26 25 b3 0f 5c 81 98 9b 79 27 f6 b0 89 f1 5c 9a 34 35 2b cb e6 57 df b5 80 23 57 b5 73 26 d7 23 34 b3 de d3 3a b7 2e a7 6e c6 93 42 90 31 6f 9f c1 f5 31 c6 cd c3 b8 23 1f 1b f6 65 3f 4c 82 a9 d8 85 f8 b2 c0 39 86 e5 1c be ac 90 0d 55 25 5d 24 d0 50 8f 42 53 8b 78 bc 00 1d f1 5c d6 3e d5 02 b0 53 4b 80 aa 89 ef 80 fb 50 ba 0b d5 57 38 9c fa 9e 38 62 76 0d 2f 1b 74 e8 fb 13 e8 72 0b 9b 0b 86 d8 b4 05 53 a4 43 41 26 97 5b 82 0b 74 5e cc e5 cc 32 ae c0 9d f7 d4 f5 49 75 18 75 80 ef 8a 8b d2 3b 42 01 36 83 9c 2d 10 0a 2d Data Ascii: dtphxQOz"9B&u5&jwg9\|dQ'ft?S&%\y'\45+W#Ws&#4:.nB1o1#e?L9U%]$PBSx\>SKPW88bv/trSCA&[t^2Iuu;B6--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:00 UTC	503	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:23:00 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:00 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:00 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:00 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:01 UTC	787	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
2024-04-25 06:23:01 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:01 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: 41134caa-faed-4d91-b52c-e14b9ff84327 Last-Modified: 2024-04-25 08:23:01.398980 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:01 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:03 UTC	530	OUT	GET /matomo.js HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:04 UTC	323	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=2592000 Content-Type: text/javascript Date: Thu, 25 Apr 2024 06:23:03 GMT Etag: "32459-61629483520e9-gzip" Last-Modified: Mon, 15 Apr 2024 21:27:01 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:04 UTC	2372	IN	Data Raw: 38 30 30 30 0d 0a 2f 2a 21 21 0a 20 2a 20 4d 61 74 6f 6d 6f 20 2d 20 66 72 65 65 2f 6c 69 62 72 65 20 61 6e 61 6c 79 74 69 63 73 20 70 6c 61 74 66 6f 72 6d 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 6f 6d 6f 2d 6f 72 67 2f 6d 61 74 6f 6d 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 42 53 44 2d 33 20 43 6c 61 75 73 65 20 28 61 6c 73 6f Data Ascii: 8000/!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also
2024-04-25 06:23:04 UTC	1724	IN	Data Raw: 69 66 28 61 78 2e 61 74 74 61 63 68 45 76 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 78 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 61 77 2c 61 76 29 7d 61 78 5b 22 6f 6e 22 2b 61 77 5d 3d 61 76 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 75 29 7b 69 66 28 4b 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 29 7b 61 75 28 29 7d 65 6c 73 65 7b 69 66 28 58 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 58 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 61 75 2c 66 61 6c 73 65 29 7d 65 6c 73 65 7b 69 66 28 58 2e 61 74 74 61 63 68 45 76 65 6e 74 29 7b 58 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 61 75 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 78 29 7b 76 61 72 20 61 Data Ascii: if(ax.attachEvent){return ax.attachEvent("on"+aw,av)}ax["on"+aw]=av}function n(au){if(K.readyState==="complete"){au()}else{if(X.addEventListener){X.addEventListener("load",au,false)}else{if(X.attachEvent){X.attachEvent("onload",au)}}}}function r(ax){var a
2024-04-25 06:23:04 UTC	4744	IN	Data Raw: 72 6e 20 61 75 7d 66 75 6e 63 74 69 6f 6e 20 74 28 61 75 29 7b 76 61 72 20 61 77 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 5b 61 2d 7a 5d 2b 29 3a 22 29 2c 61 76 3d 61 77 2e 65 78 65 63 28 61 75 29 3b 0a 72 65 74 75 72 6e 20 61 76 3f 61 76 5b 31 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 75 29 7b 76 61 72 20 61 77 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 66 74 70 29 3a 29 2f 2a 28 3f 3a 5b 5e 40 5d 2b 40 29 3f 28 5b 5e 3a 2f 23 5d 2b 29 22 29 2c 61 76 3d 61 77 2e 65 78 65 63 28 61 75 29 3b 72 65 74 75 72 6e 20 61 76 3f 61 76 5b 31 5d 3a 61 75 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 75 29 7b 72 65 74 75 72 6e 28 2f 5e 5b 30 2d 39 5d 5b 30 2d 39 5d 2a 28 5c 2e 5b 30 2d 39 5d 2b 29 3f 24 2f 29 2e 74 65 Data Ascii: rn au}function t(au){var aw=new RegExp("^([a-z]+):"),av=aw.exec(au);return av?av[1]:null}function d(au){var aw=new RegExp("^(?:(?:https?\|ftp):)/(?:[^@]+@)?([^:/#]+)"),av=aw.exec(au);return av?av[1]:au}function H(au){return(/^[0-9][0-9](\.[0-9]+)?$/).te
2024-04-25 06:23:04 UTC	5930	IN	Data Raw: 7a 29 7b 69 66 28 58 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 29 7b 72 65 74 75 72 6e 20 4b 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 79 2c 6e 75 6c 6c 29 5b 61 7a 5d 7d 69 66 28 61 79 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 29 7b 72 65 74 75 72 6e 20 61 79 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 5b 61 7a 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 78 28 61 79 29 7b 61 79 3d 61 79 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 77 68 69 6c 65 28 61 79 29 7b 69 66 28 61 79 3d 3d 3d 4b 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 61 79 3d 61 79 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 61 76 28 61 41 2c 61 47 2c 61 79 2c 61 44 2c 61 42 2c 61 45 2c 61 43 29 7b Data Ascii: z){if(X.getComputedStyle){return K.defaultView.getComputedStyle(ay,null)[az]}if(ay.currentStyle){return ay.currentStyle[az]}}function ax(ay){ay=ay.parentNode;while(ay){if(ay===K){return true}ay=ay.parentNode}return false}function av(aA,aG,ay,aD,aB,aE,aC){
2024-04-25 06:23:04 UTC	7116	IN	Data Raw: 69 73 2e 43 4f 4e 54 45 4e 54 5f 41 54 54 52 29 29 7b 72 65 74 75 72 6e 20 61 77 7d 69 66 28 61 6a 2e 68 61 73 4e 6f 64 65 43 73 73 43 6c 61 73 73 28 61 77 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 43 4c 41 53 53 29 29 7b 72 65 74 75 72 6e 20 61 77 7d 69 66 28 61 6a 2e 68 61 73 4e 6f 64 65 43 73 73 43 6c 61 73 73 28 61 77 2c 74 68 69 73 2e 4c 45 47 41 43 59 5f 43 4f 4e 54 45 4e 54 5f 43 4c 41 53 53 29 29 7b 72 65 74 75 72 6e 20 61 77 7d 61 77 3d 61 77 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 61 75 3e 31 30 30 30 29 7b 62 72 65 61 6b 7d 61 75 2b 2b 7d 7d 2c 66 69 6e 64 50 69 65 63 65 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 76 29 7b 76 61 72 20 61 75 3b 0a 61 75 3d 61 6a 2e 66 69 6e 64 46 69 72 73 74 4e 6f 64 65 48 61 76 69 6e 67 41 74 74 72 69 62 Data Ascii: is.CONTENT_ATTR)){return aw}if(aj.hasNodeCssClass(aw,this.CONTENT_CLASS)){return aw}if(aj.hasNodeCssClass(aw,this.LEGACY_CONTENT_CLASS)){return aw}aw=aw.parentNode;if(au>1000){break}au++}},findPieceNode:function(av){var au;au=aj.findFirstNodeHavingAttrib
2024-04-25 06:23:04 UTC	8302	IN	Data Raw: 23 22 29 3b 72 65 74 75 72 6e 20 61 42 2e 6c 65 6e 67 74 68 3d 3d 3d 34 26 26 61 42 5b 30 5d 3d 3d 3d 61 43 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 61 76 2c 61 41 2c 61 77 29 7b 76 61 72 20 61 7a 3d 58 2e 6e 61 6d 65 2e 73 70 6c 69 74 28 22 23 23 23 22 29 2c 61 79 3d 61 7a 5b 31 5d 2c 61 75 3d 61 7a 5b 32 5d 2c 61 78 3d 61 7a 5b 33 5d 2c 61 42 3d 61 62 28 61 76 2c 61 41 29 3b 6f 28 61 42 2b 22 70 6c 75 67 69 6e 73 2f 4f 76 65 72 6c 61 79 2f 63 6c 69 65 6e 74 2f 63 6c 69 65 6e 74 2e 6a 73 3f 76 3d 31 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 61 74 6f 6d 6f 5f 4f 76 65 72 6c 61 79 5f 43 6c 69 65 6e 74 2e 69 6e 69 74 69 61 6c 69 7a 65 28 61 42 2c 61 77 2c 61 79 2c 61 75 2c 61 78 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 76 61 72 20 61 77 3b 74 72 79 Data Ascii: #");return aB.length===4&&aB[0]===aC}function ae(av,aA,aw){var az=X.name.split("###"),ay=az[1],au=az[2],ax=az[3],aB=ab(av,aA);o(aB+"plugins/Overlay/client/client.js?v=1",function(){Matomo_Overlay_Client.initialize(aB,aw,ay,au,ax)})}function w(){var aw;try
2024-04-25 06:23:04 UTC	2586	IN	Data Raw: 72 20 64 4d 3d 5b 5d 3b 66 6f 72 28 64 4b 3b 64 4b 3c 64 4c 3b 64 4b 2b 3d 64 4e 29 7b 64 4d 2e 70 75 73 68 28 64 4a 2e 73 6c 69 63 65 28 64 4b 2c 64 4b 2b 64 4e 29 29 7d 72 65 74 75 72 6e 20 64 4d 7d 66 75 6e 63 74 69 6f 6e 20 64 46 28 64 4b 2c 64 4a 29 7b 69 66 28 21 63 41 28 64 4b 29 29 7b 72 65 74 75 72 6e 7d 69 66 28 64 6c 26 26 21 62 79 26 26 61 76 28 29 29 7b 63 6f 2e 70 75 73 68 28 5b 64 4b 2c 6e 75 6c 6c 5d 29 3b 72 65 74 75 72 6e 7d 69 66 28 21 62 50 29 7b 63 38 2e 70 75 73 68 28 5b 64 4b 2c 6e 75 6c 6c 5d 29 3b 72 65 74 75 72 6e 7d 61 45 3d 74 72 75 65 3b 63 5a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 4e 3d 64 74 28 64 4b 2c 35 30 29 3b 76 61 72 20 64 4c 3d 30 2c 64 4d 3b 66 6f 72 28 64 4c 3b 64 4c 3c 64 4e 2e 6c 65 6e 67 74 68 3b 64 Data Ascii: r dM=[];for(dK;dK<dL;dK+=dN){dM.push(dJ.slice(dK,dK+dN))}return dM}function dF(dK,dJ){if(!cA(dK)){return}if(dl&&!by&&av()){co.push([dK,null]);return}if(!bP){c8.push([dK,null]);return}aE=true;cZ(function(){var dN=dt(dK,50);var dL=0,dM;for(dL;dL<dN.length;d
2024-04-25 06:23:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 06:23:04 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 69 66 28 21 64 4e 29 7b 72 65 74 75 72 6e 22 22 7d 64 4e 3d 53 74 72 69 6e 67 28 64 4e 29 3b 76 61 72 20 64 4c 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 2b 24 22 29 3b 69 66 28 64 4e 2e 6c 65 6e 67 74 68 3d 3d 3d 33 32 26 26 64 4c 2e 74 65 73 74 28 64 4e 29 29 7b 76 61 72 20 64 4b 3d 64 4e 2e 73 75 62 73 74 72 28 31 36 2c 33 32 29 3b 69 66 28 64 73 28 64 4b 29 29 7b 76 61 72 20 64 4d 3d 64 4e 2e 73 75 62 73 74 72 28 30 2c 31 36 29 3b 72 65 74 75 72 6e 20 64 4d 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 64 62 28 29 7b 69 66 28 21 62 30 29 7b 62 30 3d 64 47 28 62 5a 29 0a 7d 76 61 72 20 64 4c 3d 6e 65 77 20 44 61 74 65 28 29 2c 64 4a 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 64 4c 2e 67 65 74 54 Data Ascii: 8000if(!dN){return""}dN=String(dN);var dL=new RegExp("^[a-zA-Z0-9]+$");if(dN.length===32&&dL.test(dN)){var dK=dN.substr(16,32);if(ds(dK)){var dM=dN.substr(0,16);return dM}}return""}function db(){if(!b0){b0=dG(bZ)}var dL=new Date(),dJ=Math.round(dL.getT
2024-04-25 06:23:04 UTC	13046	IN	Data Raw: 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 22 66 69 6c 65 3a 22 7c 7c 64 59 2e 74 65 73 74 28 64 5a 29 29 29 7b 72 65 74 75 72 6e 22 22 7d 63 35 28 29 3b 76 61 72 20 64 52 3d 61 39 28 29 3b 76 61 72 20 64 4f 3d 4b 2e 63 68 61 72 61 63 74 65 72 53 65 74 7c 7c 4b 2e 63 68 61 72 73 65 74 3b 69 66 28 21 64 4f 7c 7c 64 4f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 75 74 66 2d 38 22 29 7b 64 4f 3d 6e 75 6c 6c 7d 64 4b 2b 3d 22 26 69 64 73 69 74 65 3d 22 2b 63 6a 2b 22 26 72 65 63 3d 31 26 72 3d 22 2b 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 2c 38 29 2b 22 26 68 3d 22 2b 64 4a 2e 67 65 74 48 6f 75 72 73 28 29 2b 22 26 6d 3d 22 2b 64 4a 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 2b 22 26 73 3d 22 2b 64 4a 2e Data Ascii: ion.protocol==="file:"\|\|dY.test(dZ))){return""}c5();var dR=a9();var dO=K.characterSet\|\|K.charset;if(!dO\|\|dO.toLowerCase()==="utf-8"){dO=null}dK+="&idsite="+cj+"&rec=1&r="+String(Math.random()).slice(2,8)+"&h="+dJ.getHours()+"&m="+dJ.getMinutes()+"&s="+dJ.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49761	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:04 UTC	1483	OUT	POST /matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:05 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:05 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49763	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:05 UTC	727	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:05 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:05 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:05 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 54 6f 79 57 46 30 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"ToyWF0"});
2024-04-25 06:23:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49762	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:05 UTC	891	OUT	GET /sites/1/branding/icon/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:05 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:05 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 2393 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:05 GMT Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:05 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:05 UTC	2393	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 09 20 49 44 41 54 78 9c cd 99 7d 70 14 e5 1d c7 bf cf ee de ed 5d 2e c9 25 97 40 92 23 04 08 86 44 62 12 2e 81 18 02 82 a0 08 95 82 48 39 60 1c a9 22 16 29 a0 22 b4 a2 82 82 84 16 64 ac 45 19 c6 d7 62 ad 30 ed 50 18 28 0e 75 90 4c e9 68 75 1c e5 c5 42 15 10 1a 20 bc e4 ed 72 49 2e 77 7b 2f bb fb fc fa 47 5e 48 20 91 bb e4 62 fa fd e3 6e 67 ef d9 e7 f7 fd ec ef f9 fd f6 d9 39 86 3e d0 c8 31 f7 a7 ba 3c 7c 0b a0 2f 20 2d a8 c0 20 6e ac 3b 73 64 53 5f c4 62 d1 9c 2c b3 c8 69 f5 2b 8d 2b 75 62 cf 30 b0 38 d1 60 86 d1 32 00 fe a6 cb d0 43 be b3 92 28 ff a6 fa fb f2 0f a3 19 33 2a 00 4e a7 53 fc f4 94 e7 59 10 ad 13 24 59 e6 5c 05 57 03 30 c4 d8 90 9c 75 0f Data Ascii: PNGIHDR00W IDATx}p].%@#Db.H9`")"dEb0P(uLhuB rI.w{/G^H bng9>1<\|/ - n;sdS_b,i++ub08`2C(3*NSY$Y\W0u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49765	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:06 UTC	568	OUT	GET /sites/1/branding/icon/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:06 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:06 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 2393 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:06 GMT Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:06 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:06 UTC	2393	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 09 20 49 44 41 54 78 9c cd 99 7d 70 14 e5 1d c7 bf cf ee de ed 5d 2e c9 25 97 40 92 23 04 08 86 44 62 12 2e 81 18 02 82 a0 08 95 82 48 39 60 1c a9 22 16 29 a0 22 b4 a2 82 82 84 16 64 ac 45 19 c6 d7 62 ad 30 ed 50 18 28 0e 75 90 4c e9 68 75 1c e5 c5 42 15 10 1a 20 bc e4 ed 72 49 2e 77 7b 2f bb fb fc fa 47 5e 48 20 91 bb e4 62 fa fd e3 6e 67 ef d9 e7 f7 fd ec ef f9 fd f6 d9 39 86 3e d0 c8 31 f7 a7 ba 3c 7c 0b a0 2f 20 2d a8 c0 20 6e ac 3b 73 64 53 5f c4 62 d1 9c 2c b3 c8 69 f5 2b 8d 2b 75 62 cf 30 b0 38 d1 60 86 d1 32 00 fe a6 cb d0 43 be b3 92 28 ff a6 fa fb f2 0f a3 19 33 2a 00 4e a7 53 fc f4 94 e7 59 10 ad 13 24 59 e6 5c 05 57 03 30 c4 d8 90 9c 75 0f Data Ascii: PNGIHDR00W IDATx}p].%@#Db.H9`")"dEb0P(uLhuB rI.w{/G^H bng9>1<\|/ - n;sdS_b,i++ub08`2C(3*NSY$Y\W0u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49771	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:09 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 2013 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:09 UTC	2013	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 57 56 6f 75 52 49 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 64 6f 6d 61 69 6e 25 33 44 61 62 74 61 78 2d 53 74 65 75 65 72 62 65 72 61 74 75 6e 67 25 32 36 6e 65 78 74 25 33 44 25 32 35 32 46 73 68 61 72 65 73 25 32 35 32 46 66 6f 6c 64 65 72 25 32 35 32 46 6b 31 31 4e 6e 4c 43 6d 44 4e 62 25 32 35 32 46 25 32 35 33 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 Data Ascii: {"requests":["?ma_id=WVouRI&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%252Fshares%252Ffolder%252Fk11NnLCmDNb%252F%253F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&
2024-04-25 06:23:09 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:09 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:14 UTC	857	OUT	GET /auth/forgot/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:14 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:14 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 5581 Set-Cookie: logged_in=0; Path=/ X-Request-Id: d3bea1aa-2207-45f3-9634-5e0964c48899 Last-Modified: 2024-04-25 08:23:14.617704 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:14 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:14 UTC	5581	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49773	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:14 UTC	871	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:15 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:14 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:14 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:14 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:15 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:15 UTC	843	OUT	GET /static/bootstrap/dist/fonts/sourcesanspro-light.woff2 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.leitz-cloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:15 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:15 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 88732 Last-Modified: Sat, 23 Apr 2022 06:08:48 GMT Cache-Control: public, max-age=43200 Expires: Thu, 25 Apr 2024 18:23:15 GMT ETag: "1650694128.0-88732-2276073775" Accept-Ranges: bytes Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:15 GMT; Secure; HttpOnly; Path=/ Content-Type: application/octet-stream
2024-04-25 06:23:15 UTC	7325	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 5a 9c 00 0e 00 00 00 04 6c b0 00 01 5a 3d 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 1a 88 70 1b 85 c4 00 1c 82 83 1c 06 60 00 f6 22 0a 86 ca 44 85 b3 39 0b a2 26 00 01 36 02 24 03 c4 48 04 20 05 b5 22 07 81 a8 17 5b 07 0f b4 18 fe eb d9 6f f7 b0 43 eb f3 49 1b f1 94 c8 6c 88 6c 7e 62 da 7f b2 4b 04 ef b6 34 7d bc 80 74 43 24 43 e9 10 bd 2f c6 14 1b 16 11 36 a9 69 16 1d 63 d4 33 06 0e d4 ca ba 0f 5e 41 8f ed a0 a2 d2 9b bd 5f fc b6 02 3d a4 ec ff ff ff ff ff ff ff ff ff ff ff ff ff ff 8e 92 1f e1 6f 36 33 bb 79 b3 9b 4d 08 5f 03 04 41 0c 20 22 7e f0 47 45 2b d0 62 b9 f3 5a b9 bb 7a 47 50 72 9e c5 8e 05 9e 90 4b 05 75 5e 4a ec c7 15 21 c9 9c 63 55 90 d6 58 bd d1 f4 9e b5 8e f2 b8 1d f3 0e 39 Data Ascii: wOF2ZlZ=Fp`"D9&6$H "[oCIll~bK4}tC$C/6ic3^A_=o63yM_A "~GE+bZzGPrKu^J!cUX9
2024-04-25 06:23:15 UTC	867	IN	Data Raw: 39 91 75 5e e0 b5 c0 45 2a 7a 31 89 5f 38 a9 88 2c 75 59 52 2a 9a 83 96 a8 4e 2d ea 55 51 97 74 03 88 f8 82 f5 97 1a 6e f8 11 07 02 0e 2a 5c f4 30 c5 06 4b d3 f3 fa e1 b5 73 df 2c 8b ae b6 79 f0 ff 7c fa a5 cb 92 bb 60 f1 c0 ca 35 eb 37 6b d9 ae 63 ff 06 e6 c2 e1 72 7b bc fe 0c cc ac 5c bc fc 42 0a ca 9a 3a 7a 86 26 e6 56 b6 6e 62 6b 94 bf 45 a6 33 97 c5 6d 68 53 db 39 44 7b 9c 86 95 b8 c9 fd 4e f9 84 2f fd 32 c4 11 0b 32 98 28 c5 4c ec c7 69 5c 27 34 03 89 27 9f 6a 8e e5 24 b7 05 2d 2c 1e c0 73 f0 7c bc b0 54 f5 52 9e 8a 56 bb fa b5 6a 58 63 1e 49 8f ec 47 5d 3b 3a d0 50 37 fb af f5 00 88 96 61 59 96 d3 8c 20 94 c5 d0 44 c6 26 31 36 99 01 5d 99 84 4d c0 2f 8b a7 89 22 9a 24 a2 c9 3c 4d e1 69 aa d0 a6 e1 ef 18 3e 8a 32 79 cb e2 6d a2 21 4d e2 6d 32 6f 53 Data Ascii: 9u^Ez1_8,uYRN-UQtn*\0Ks,y\|`57kcr{\B:z&VnbkE3mhS9D{N/22(Li\'4'j$-,s\|TRVjXcIG];:P7aY D&16]M/"$<Mi>2ym!Mm2oS
2024-04-25 06:23:15 UTC	8192	IN	Data Raw: 36 0b 2c 37 17 75 1e 99 c9 c5 be c7 ad 73 d0 9d d9 0b 47 3f 21 22 a2 96 b1 06 8b 40 6f a9 45 2a 6d 8d 13 87 77 fd 44 a1 d2 e8 0c 26 04 03 84 c5 46 39 5c 1e 5f 20 14 89 25 52 99 dc 6c 70 0d 1a 67 c7 e0 e4 ec e2 ea 96 af f3 dc 3f ef d5 5f cb 17 43 a3 08 43 91 38 e7 59 02 40 08 46 50 0c 27 48 8a 66 58 4e 22 95 c9 15 4a 95 5a a3 a0 b4 55 ad 56 2a a6 a9 a4 9a 36 da 5d ef 72 31 00 82 80 74 89 2a 8e 6e 0c dd 77 d8 44 e0 13 4d f5 5b 42 4e 6c 24 12 89 0c 54 7a ed 03 41 66 74 5b 38 4d dd 73 1f c6 a0 7d 15 5c 8b 5c 2b 28 2e a1 ad e0 77 39 fb e9 02 68 e3 c2 17 44 95 bc ad 87 d1 04 47 20 21 a3 54 d1 e4 f1 44 69 54 1a 9d c1 84 60 80 b0 d8 28 87 cb e3 0b 84 22 b1 44 2a 93 9b bd 68 d8 d4 b5 d0 78 6e 29 56 d6 36 b9 15 3b 7b 87 31 d1 88 58 d8 cb e3 38 bb b8 ba 9d 7f cd fd Data Ascii: 6,7usG?!"@oEmwD&F9\_ %Rlpg?_CC8Y@FP'HfXN"JZUV6]r1tnwDM[BNl$TzAft[8Ms}\\+(.w9hDG !TDiT`("Dhxn)V6;{1X8
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: f1 69 1d db 3d 5e 8f e8 47 f5 2a 6a 30 ba 70 a8 3a 97 8e 56 f3 40 ee 42 e9 65 ef de 37 c4 7b d8 f3 61 86 fb 93 81 7f 37 3e ad f8 d8 7e 4e b4 0f 46 ca b6 ef 43 8d b0 95 a0 ab b4 a2 56 ad ba 0e 3b 87 11 2c 23 8b d3 28 b7 5e d7 08 21 7b 0b c8 18 43 5c 54 a4 05 1f 40 b4 11 af fd f8 5a c3 cf e8 e0 ca 2e 26 50 73 c7 b8 39 7f f1 7c a2 1f 63 76 5c ab ac f6 cd b5 96 66 7f 91 e2 e9 a0 39 e7 00 c0 e7 6f df 2a 7a 04 f5 f4 83 bd 5d ac 3c 73 21 9a 4c 97 87 98 21 8b 5f 7e c2 6e c5 ea b8 e9 16 fe 2e f1 f8 fb e9 a2 e3 2e 84 3e cc b7 3e 6d e7 1c 82 b1 f8 4d ca 60 2b c6 45 c7 af 6d 0e be 05 c2 a9 35 5e 3c 03 10 ad 91 99 04 23 75 fb 19 2c c2 4b 2c 73 c8 4e 84 2b 07 03 8b 77 3f 4b b9 7b 6d cb 8b 1d 39 49 b2 0c 18 13 7a b3 c9 35 42 6d 8f f4 53 0b e7 c3 29 11 c1 ef b4 35 81 80 Data Ascii: i=^Gj0p:V@Be7{a7>~NFCV;,#(^!{C\T@Z.&Ps9\|cv\f9oz]<s!L!_~n..>>mM`+Em5^<#u,K,sN+w?K{m9Iz5BmS)5
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: 0d b0 21 e9 41 a5 a6 5e ef 73 03 2c 1a 78 59 17 77 2e 1c d9 b5 6e 49 d0 84 61 7d 3a 34 ab ed 2a ba 75 85 b8 eb 86 f5 c1 57 82 50 74 e1 00 6f ff 41 33 75 55 51 5a 61 b9 64 94 42 7c 51 85 01 34 79 40 c4 4b 92 9b cd c2 c4 40 57 53 4d 49 4e 5a 42 44 90 8f 8b 8d 59 c9 fb 8c 24 74 2c bc d4 bc 41 81 18 3e 2c a8 10 c0 80 12 34 c6 99 1d 4b 26 f4 69 f3 11 2a 2f 1b d8 f8 91 27 4d 9c 30 af b8 b0 62 44 83 02 31 7c 58 50 21 80 01 f5 27 9c b6 61 06 64 d9 f3 4b f1 1d ed ac 2d 4c 8d f4 75 b5 d4 55 95 e4 81 52 77 f2 cc bb 98 97 ae c7 58 98 9f 87 83 85 91 96 8a 8c 08 1f 1b 1d 19 00 73 f2 72 0a 15 e7 3c f6 5d 1d ed ac 2d 4c 8d f4 75 b5 d4 55 95 e4 93 db c0 32 92 e2 22 42 fc bc 5c ec 2c 4c f4 34 54 e4 24 84 11 6c 68 3c 6c 0c 54 24 00 2c 34 14 f8 40 fa 5d 1c ed ac 2d 66 2a 2b Data Ascii: !A^s,xYw.nIa}:4uWPtoA3uUQZadB\|Q4y@K@WSMINZBDY$t,A>,4K&i/'M0bD1\|XP!'adK-LuURwXsr<]-LuU2"B\,L4T$lh<lT$,4@]-f*+
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: d5 fd c2 f2 04 db 9b 20 ab 62 b5 1d ae 22 ee 4d 43 02 12 24 8f 38 83 d6 85 e1 bf 6e 7b df ff 7a a7 cd c1 c7 ec 56 ee a5 9a 43 3c e3 c8 f8 bd e7 84 af c7 5c 73 54 bf 0f 73 73 f2 ca 77 e3 e1 34 78 a5 ac 51 cf 77 a1 8b 5d 36 ee fe cf 98 eb 64 34 fd 37 a7 57 74 cf 62 09 26 60 fb 53 8d d1 f8 98 f8 3a 24 53 cd 52 10 8c ce c0 42 45 f6 ff e0 c8 53 c7 cf 1d 1c 4c 15 eb dc 99 52 1f 0d 69 0b 8c 82 98 69 08 8b a3 2c 9e aa 44 9a 12 a8 4b a2 2d 8d b1 6c 98 ab ac ae b1 b9 c3 e3 12 54 b0 90 10 61 a1 22 c2 44 45 4b 4a 70 c1 53 57 3c 77 cd 0b d7 bd 15 e8 a5 a0 aa 59 7a 75 0b 3e ff 65 90 9c 43 aa 87 52 ba 26 08 97 29 4c 8e 68 14 71 e5 ce 66 8e 66 c5 54 d0 cb 4a 24 c7 f0 ca 3c 7d 93 50 13 72 7c b9 f1 e4 d5 8a 96 c8 87 24 8a 6a 53 58 8f 8a ba 94 25 c3 4a a9 be 41 ec 32 38 65 Data Ascii: b"MC$8n{zVC<\sTssw4xQw]6d47Wtb&`S:$SRBESLRii,DK-lTa"DEKJpSW<wYzu>eCR&)LhqffTJ$<}Pr\|$jSX%JA28e
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: dd 14 7a 33 ad 74 a7 05 a7 d9 c0 fa ce 4d 19 fa 34 18 d3 4c 6c 3d 92 ca ce ce d3 38 26 d9 02 75 24 a8 48 2d 63 8a d5 e4 46 7c 98 d7 e8 e6 ce fd b0 e8 e9 1a 10 89 33 bf 62 48 c5 a5 46 e3 ea f2 8e e2 87 24 28 c0 2d 18 6a 1e 0b 91 07 33 67 80 7e 1e 13 6b 5d 83 fc f5 ac 5a e6 9b 12 ae a8 4e fb ca 1a f0 d1 cf cf a6 f9 cf 0d c2 d6 a6 cd 9d bf 6b d0 73 92 88 0d b5 d3 7b b8 7d 32 50 da 02 14 09 ae b7 58 f0 35 a9 f5 ce 2d 0e 7b 88 f5 bc de 56 28 1a 7d d2 c3 31 93 25 61 8c a7 9d d0 cb f2 5b 81 81 ac db d9 88 1a 10 80 46 97 b3 7c 00 82 5f db 71 ed a2 6b 84 97 67 1f 39 bb bf 58 d8 c7 24 f3 28 73 8d 30 ad 6f 14 64 f0 54 0b f0 0f ea 11 7e 0f af eb 9b 2f 18 d0 26 8a d2 fb 36 99 09 17 aa 70 e7 93 7a 34 71 72 49 f8 5b 01 c8 d4 2e 5d 39 a6 db 28 eb 69 ec 92 98 9c 6f 84 9e Data Ascii: z3tM4Ll=8&u$H-cF\|3bHF$(-j3g~k]ZNks{}2PX5-{V(}1%a[F\|_qkg9X$(s0odT~/&6pz4qrI[.]9(io
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: 2e 64 d9 6a 25 93 f8 46 95 26 34 d2 be a9 1d 6c 7a 41 89 8b 39 0f 6f 36 5b 62 2e 6d 59 83 a7 92 75 6d 63 bf 3f 9b 51 ac 1b e4 64 0a 99 85 73 db 0d 06 99 29 ce 87 85 e2 ac d0 fb 64 ec 87 37 92 bf 42 30 c8 0b 5c b7 02 57 ae ab 5d 5d d3 a0 56 d4 54 c3 33 8c d6 08 95 45 56 0a b3 d7 30 ae 79 03 b1 41 8c e8 9c 3c 73 99 59 47 a8 30 6d 65 8c b9 56 ef bb 17 89 08 58 1b 5d 52 b3 4b af 3a c9 63 89 56 18 1b 3b 27 6d f7 e9 91 c4 a1 ec 9f 7d 8a f4 ed 10 69 ea 3a 6c bf df e0 00 43 53 f6 04 ac 57 15 8b d6 c5 3d 51 dd 47 d9 bc bf 5a bc af 46 3e fb 24 19 21 91 f4 14 a1 5b 88 8f ea b6 d5 92 80 50 cd 37 23 b6 a1 cc 6a a2 3a 39 1b 60 30 25 c7 ce c1 f0 81 74 35 2d fa 87 e3 fc 34 d2 50 87 b3 74 22 6c 39 da 29 79 a7 92 53 ed 4a f0 cb de 67 19 d6 8e de 96 62 7c 5f c6 89 e3 34 43 Data Ascii: .dj%F&4lzA9o6[b.mYumc?Qds)d7B0\W]]VT3EV0yA<sYG0meVX]RK:cV;'m}i:lCSW=QGZF>$![P7#j:9`0%t5-4Pt"l9)ySJgb\|_4C
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: 46 2b cd 8d fe 5f 6b 89 6e 68 28 6d 97 d3 bc d4 60 72 16 4d 3b 5f cc be 58 ec cb e9 c5 ab 7a b1 5a c6 24 8f bb 91 d0 42 a4 11 e7 8e d8 d3 53 b9 94 c1 3b aa 6e d5 d0 34 ad 10 a4 d6 e1 ea 3a 42 f0 3c c7 7b 91 c1 bf ab ee d6 00 df 1b b6 5e 5c 14 df d6 96 cf b3 f3 2a 3b e9 6c 4a f5 37 d6 f2 f0 ae c0 aa 74 5c b3 19 d2 5a 69 15 ac 1a 27 99 19 24 93 ea ae b5 7c 5f a0 f2 6e b1 ee f2 2b 81 ca 56 68 81 00 9a 6b 95 f7 34 27 c3 92 6a 8a 16 c7 54 76 cd 40 fb 7c 48 1b 0e f2 36 42 18 ef ce 5a b6 01 94 be cd 16 ff 5f f0 31 bb ff 55 dc f3 e4 f5 bd ca f1 d0 66 22 89 20 e0 8b 7d de c8 d1 6a 5b 1e 9f fc 63 f8 fd b5 91 d5 8a d5 ab 95 ff 6e 5a d1 7e 2a 4d 45 38 13 ef 93 ab c2 1f 29 3b b6 96 2d cd 55 65 98 cb 29 67 52 89 5a dd 4d 6f c3 4d 7a 31 ae cb e6 ff ad 7c 3b b7 bf a9 c0 Data Ascii: F+_knh(m`rM;_XzZ$BS;n4:B<{^\;lJ7t\Zi'$\|_n+Vhk4'jTv@\|H6BZ_1Uf" }j[cnZ~ME8);-Ue)gRZMoMz1\|;
2024-04-25 06:23:16 UTC	8192	IN	Data Raw: b1 90 e8 5c 0f fa 5e e7 9e f6 7f 9d 3d 3e 9c 63 0b f9 1a b0 bb 27 24 21 ce af a0 a8 44 5c 2a c5 6a db 9f 8e 66 d6 6e 65 01 21 72 6f b7 47 bf 5e 88 a4 fd 87 cf b8 19 57 90 58 8b 80 78 0f 9e e3 7e 35 98 3b 4e b3 31 9c 5a a4 27 db b8 ce c7 88 d4 ad 6a 3c d8 38 6b 94 71 e8 8c 07 d0 1f ed f6 c2 a2 bd d0 ff ab 14 5e 92 60 9e 5d d6 40 3e 4e 7e cf cc c9 25 0e f5 b4 de 73 71 f0 ba 2d 6a 17 51 ea 47 a4 d1 b5 22 b2 8e 60 03 1b ac 08 fa 69 2a fc 80 f9 5d 50 ed e1 12 43 12 99 66 ac ab 25 61 d3 81 ff e0 5d d2 c5 f8 a5 38 7f 86 c4 fb 02 e9 14 6b 17 c7 d9 ed fe 6b e0 3f 18 4c 0a b6 e9 60 d9 b1 6c ec 58 d6 76 6c 6b 3b 70 9c 3d c3 77 6d d3 ef b4 74 c3 b0 39 a4 92 9c 55 1e 16 02 89 a4 b5 d0 f2 0b cc 82 e6 99 4b f4 82 f5 d2 e8 00 c8 db e6 aa c3 8c 91 b6 a2 51 88 28 cf 22 e1 Data Ascii: \^=>c'$!D\jfne!roG^WXx~5;N1Z'j<8kq^`]@>N~%sq-jQG"`i]PCf%a]8kk?L`lXvlk;p=wmt9UKQ("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:15 UTC	780	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:15 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:15 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: 34634493-542f-40a2-8553-5d1547e38e02 Last-Modified: 2024-04-25 08:23:15.820909 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:15 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:15 UTC	648	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:15 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:15 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:15 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 7a 39 39 73 65 62 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"z99seb"});
2024-04-25 06:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:15 UTC	1417	OUT	POST /matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=771846&h=8&m=23&s=14&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=MzNZPV&fa_pv=1&fa_fp[0][fa_vid]=0bnpR5&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=522&pf_srv=497&pf_tfr=2&pf_dm1=251&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:16 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:15 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:15 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:16 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:15 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:15 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:15 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:16 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:18 UTC	871	OUT	GET /auth/login/?clear_cookie=1 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:18 UTC	950	IN	HTTP/1.1 302 FOUND Date: Thu, 25 Apr 2024 06:23:18 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 231 Location: https://web.leitz-cloud.com/auth/login/ Set-Cookie: logged_in=0; Path=/ X-Request-Id: 906c00df-d2e7-4807-82d0-612263670508 Last-Modified: 2024-04-25 08:23:18.570571 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:18 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:18 UTC	231	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 22 3e 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 3c 2f 61 3e 2e 20 20 49 66 20 6e 6f 74 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="/auth/login/">/auth/login/</a>. If not click the link.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49782	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:18 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1680 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:18 UTC	1680	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 51 6c 75 36 45 68 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 66 6f 72 67 6f 74 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 39 39 39 36 31 30 26 68 3d 38 26 6d 3d 32 33 26 73 3d 31 35 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 Data Ascii: {"requests":["?ma_id=Qlu6Eh&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=999610&h=8&m=23&s=15&url=https%3A%2F%2Fweb.leitz-c
2024-04-25 06:23:18 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:18 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49781	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:18 UTC	856	OUT	GET /auth/login/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:19 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:18 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6642 Set-Cookie: logged_in=0; Path=/ X-Request-Id: 4ae937b7-bc7b-4422-9474-6c560c797f65 Last-Modified: 2024-04-25 08:23:18.914361 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:18 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:19 UTC	6642	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:19 UTC	779	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:20 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:19 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: db10ca28-9846-4c7c-b6f5-93c09309f4da Last-Modified: 2024-04-25 08:23:19.992653 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:20 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49784	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:19 UTC	870	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:20 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:20 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:20 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:20 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:20 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:20 UTC	647	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:20 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:20 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:20 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 53 77 51 51 6e 6a 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"SwQQnj"});
2024-04-25 06:23:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:20 UTC	1403	OUT	POST /matomo.php?action_name=Einloggen&idsite=33&rec=1&r=032852&h=8&m=23&s=18&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=FK8JTu&fa_pv=1&fa_fp[0][fa_vid]=bf6zEM&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=294&pf_tfr=2&pf_dm1=301&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:20 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:20 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:20 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:21 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:21 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:21 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:21 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:21 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:24 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1674 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:24 UTC	1674	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 51 78 6b 71 56 47 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 30 32 36 30 32 31 26 68 3d 38 26 6d 3d 32 33 26 73 3d 32 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c Data Ascii: {"requests":["?ma_id=QxkqVG&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=026021&h=8&m=23&s=20&url=https%3A%2F%2Fweb.leitz-cl
2024-04-25 06:23:24 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:24 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:30 UTC	857	OUT	GET /auth/forgot/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:30 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:30 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 5581 Set-Cookie: logged_in=0; Path=/ X-Request-Id: 4ea59ba6-3a26-4282-92a6-0033eb8ea04f Last-Modified: 2024-04-25 08:23:30.680006 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:30 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:30 UTC	5581	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49790	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:31 UTC	871	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:31 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:31 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:31 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:31 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:31 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49792	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:31 UTC	648	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:32 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:32 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:32 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 30 65 56 73 76 43 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"0eVsvC"});
2024-04-25 06:23:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49791	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:31 UTC	780	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:32 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:32 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: 8d5b3be9-a12a-49d3-b6e8-69d78aa04b53 Last-Modified: 2024-04-25 08:23:32.195479 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:32 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:31 UTC	1417	OUT	POST /matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=562126&h=8&m=23&s=30&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=21iyUu&fa_pv=1&fa_fp[0][fa_vid]=yu2AXf&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=529&pf_srv=482&pf_tfr=3&pf_dm1=477&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:32 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:32 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:31 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:32 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:32 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:32 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:32 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:32 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49795	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:34 UTC	871	OUT	GET /auth/login/?clear_cookie=1 HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:34 UTC	950	IN	HTTP/1.1 302 FOUND Date: Thu, 25 Apr 2024 06:23:34 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 231 Location: https://web.leitz-cloud.com/auth/login/ Set-Cookie: logged_in=0; Path=/ X-Request-Id: ad6938fd-1285-4335-830e-a97225197a8c Last-Modified: 2024-04-25 08:23:34.539617 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:34 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:34 UTC	231	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 22 3e 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 3c 2f 61 3e 2e 20 20 49 66 20 6e 6f 74 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="/auth/login/">/auth/login/</a>. If not click the link.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49797	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:34 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1679 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:34 UTC	1679	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 69 53 61 4f 6f 39 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 66 6f 72 67 6f 74 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 31 38 32 38 38 30 26 68 3d 38 26 6d 3d 32 33 26 73 3d 33 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 Data Ascii: {"requests":["?ma_id=iSaOo9&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=182880&h=8&m=23&s=31&url=https%3A%2F%2Fweb.leitz-c
2024-04-25 06:23:34 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:34 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49796	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:34 UTC	856	OUT	GET /auth/login/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:34 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:34 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6642 Set-Cookie: logged_in=0; Path=/ X-Request-Id: ab634032-220c-4c7c-b41d-bbcebda2c981 Last-Modified: 2024-04-25 08:23:34.805062 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:34 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:34 UTC	6642	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49798	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:35 UTC	779	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:36 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:36 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: fead565b-f957-41da-ab81-e0a6cc8305ff Last-Modified: 2024-04-25 08:23:36.039306 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:36 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49800	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:36 UTC	647	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:36 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:36 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:36 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 57 67 49 71 49 33 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"WgIqI3"});
2024-04-25 06:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49801	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:36 UTC	1404	OUT	POST /matomo.php?action_name=Einloggen&idsite=33&rec=1&r=204970&h=8&m=23&s=34&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=TCHRDo&fa_pv=1&fa_fp[0][fa_vid]=e65TJF&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=249&pf_tfr=36&pf_dm1=541&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:36 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:36 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49799	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:36 UTC	870	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:36 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:36 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:36 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:36 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:36 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49802	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:37 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:37 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:37 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:37 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:37 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:37 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49803	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:40 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:40 UTC	1675	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 4d 64 7a 4e 6c 57 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 38 32 30 33 31 33 26 68 3d 38 26 6d 3d 32 33 26 73 3d 33 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c Data Ascii: {"requests":["?ma_id=MdzNlW&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=820313&h=8&m=23&s=36&url=https%3A%2F%2Fweb.leitz-cl
2024-04-25 06:23:40 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:40 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49806	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:46 UTC	865	OUT	GET /auth/login/recovery/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:46 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:46 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6316 Set-Cookie: logged_in=0; Path=/ X-Request-Id: 93ac3820-2ef8-46c2-8665-68bfc640b209 Last-Modified: 2024-04-25 08:23:46.617714 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:46 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:46 UTC	6316	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49805	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:47 UTC	879	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/login/recovery/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:47 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:47 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:47 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:47 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:47 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49808	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:48 UTC	788	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/login/recovery/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:48 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:23:48 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: 17a44e94-c05d-4c78-9b3f-5b6d793a94f5 Last-Modified: 2024-04-25 08:23:48.555271 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:23:48 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49809	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:48 UTC	658	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:48 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:23:48 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:23:48 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 52 55 50 7a 7a 4a 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"RUPzzJ"});
2024-04-25 06:23:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49810	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:48 UTC	1429	OUT	POST /matomo.php?action_name=Kontowiederherstellung&idsite=33&rec=1&r=310271&h=8&m=23&s=46&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=LGr2Y2&fa_pv=1&fa_fp[0][fa_vid]=fTrLsE&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=539&pf_srv=453&pf_tfr=1&pf_dm1=745&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:48 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:48 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:48 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:48 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:48 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:48 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:48 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:48 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49814	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:52 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1720 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:23:52 UTC	1720	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 65 46 46 6c 4b 6f 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 72 65 63 6f 76 65 72 79 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 38 38 31 39 32 33 26 68 3d 38 26 6d 3d 32 33 26 73 3d 34 38 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 Data Ascii: {"requests":["?ma_id=eFFlKo&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=881923&h=8&m=23&s=48&url=https%3A%2F%2Fw
2024-04-25 06:23:52 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:23:52 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49817	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:58 UTC	857	OUT	GET /auth/forgot/ HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:23:58 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:58 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 5581 Set-Cookie: logged_in=0; Path=/ X-Request-Id: d0d55433-dd99-4597-9ef3-488552f172f0 Last-Modified: 2024-04-25 08:23:58.633302 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:58 GMT; Secure; HttpOnly; Path=/ Content-Type: text/html; charset=utf-8
2024-04-25 06:23:58 UTC	5581	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="de" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49816	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:58 UTC	871	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:23:59 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:23:59 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:23:59 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:53:59 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:23:59 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49818	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:23:59 UTC	780	OUT	GET /api/2/person HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/auth/forgot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
2024-04-25 06:24:00 UTC	644	IN	HTTP/1.1 401 UNAUTHORIZED Date: Thu, 25 Apr 2024 06:24:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 71 X-Request-Id: 90ce4dea-aff2-4017-953c-a5f37a536129 Last-Modified: 2024-04-25 08:24:00.180265 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=63072000; includeSubdomains Content-Type: application/json
2024-04-25 06:24:00 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 61 72 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 7d 0a Data Ascii: {"error":"unauthorized","error_description":"Bearer token not found."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49819	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:24:00 UTC	648	OUT	GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:24:00 UTC	254	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 06:24:00 GMT Server: Apache/2.4.57 (Debian) Vary: Accept-Encoding X-Powered-By: PHP/8.2.18 Connection: close Transfer-Encoding: chunked
2024-04-25 06:24:00 UTC	123	IN	Data Raw: 37 35 0d 0a 50 69 77 69 6b 2e 48 65 61 74 6d 61 70 53 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 7b 22 68 65 61 74 6d 61 70 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 5b 5d 2c 22 69 64 73 69 74 65 22 3a 22 33 33 22 2c 22 74 72 61 63 6b 65 72 69 64 22 3a 22 54 76 4a 64 39 53 22 7d 29 3b 0d 0a Data Ascii: 75Piwik.HeatmapSessionRecording.configuration.assign({"heatmaps":[],"sessions":[],"idsite":"33","trackerid":"TvJd9S"});
2024-04-25 06:24:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49820	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:24:00 UTC	1417	OUT	POST /matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=724701&h=8&m=23&s=58&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=9zYqZ8&fa_pv=1&fa_fp[0][fa_vid]=McZrQa&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=525&pf_srv=463&pf_tfr=2&pf_dm1=544&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:24:00 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:24:00 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49821	2.58.164.9	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:24:00 UTC	619	OUT	GET /sites/1/branding/logo HTTP/1.1 Host: web.leitz-cloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1 If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
2024-04-25 06:24:00 UTC	788	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:24:00 GMT Server: Apache X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: interest-cohort=() X-Frame-Options: sameorigin Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 6442 Cache-Control: public, max-age=0 Expires: Thu, 25 Apr 2024 06:24:00 GMT Last-Modified: Mon, 07 Aug 2023 14:36:21 -0000 Set-Cookie: logged_in=0; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains Set-Cookie: session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; Domain=.leitz-cloud.com; Expires=Thu, 25-Apr-2024 06:54:00 GMT; Secure; HttpOnly; Path=/ Content-Type: image/png
2024-04-25 06:24:00 UTC	6442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 18 f1 49 44 41 54 78 9c ed 9d 79 9c 1c 55 b5 c7 bf b7 aa 27 b3 27 43 b6 c9 42 16 12 48 20 09 10 09 28 84 e4 85 20 20 4f 44 04 89 0b 11 14 51 41 11 05 41 7c 22 12 40 9f f8 14 11 7c b8 a0 a2 79 a2 82 46 14 11 11 44 7c 4c 34 82 18 f1 21 41 23 7b 20 42 08 61 92 c9 36 4b 77 d5 7d 7f 9c 7b 52 b7 6b aa 67 ba c3 64 21 f6 ef f3 e9 4f 4f 57 dd f5 dc b3 dd 73 4f d5 40 15 55 54 51 45 15 55 54 51 45 15 bb 01 02 e6 cd cb c1 a2 60 00 da 32 40 90 fa 98 01 68 b7 d2 31 e8 38 76 76 df bb 0a bb 03 dd 77 37 a4 e9 51 31 4d 0c 2c 08 8b 2f 2d 08 5d 43 af 56 64 8d fd d5 3c 9f 2a 06 18 e5 48 88 81 05 01 2c 89 00 46 4c 3f 7e b2 cd 77 9d 94 ef da 74 5f c7 b3 7f 7e 48 8a 2c 08 61 Data Ascii: PNGIHDR2QIDATxyU''CBH ( ODQAA\|"@\|yFD\|L4!A#{ Ba6Kw}{Rkgd!OOWsO@UTQEUTQE`2@h18vvw7Q1M,/-]CVd<*H,FL?~wt_~H,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49822	2.58.165.70	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:24:04 UTC	654	OUT	POST /matomo.php HTTP/1.1 Host: analytics.vboxx.eu Connection: keep-alive Content-Length: 1677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://web.leitz-cloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.leitz-cloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:24:04 UTC	1677	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 22 3f 6d 61 5f 69 64 3d 75 56 47 41 46 67 26 6d 61 5f 74 69 3d 26 6d 61 5f 70 6e 3d 68 74 6d 6c 35 76 69 64 65 6f 26 6d 61 5f 6d 74 3d 56 69 64 65 6f 26 6d 61 5f 72 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c 6f 75 64 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 66 6f 72 67 6f 74 25 32 46 26 6d 61 5f 73 74 3d 30 26 6d 61 5f 70 73 3d 30 26 6d 61 5f 6c 65 3d 26 6d 61 5f 74 74 70 3d 26 6d 61 5f 77 3d 26 6d 61 5f 68 3d 26 6d 61 5f 66 73 3d 30 26 6d 61 5f 73 65 3d 26 63 61 3d 31 26 26 69 64 73 69 74 65 3d 33 33 26 72 65 63 3d 31 26 72 3d 30 37 39 38 32 32 26 68 3d 38 26 6d 3d 32 34 26 73 3d 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 6c 65 69 74 7a 2d 63 6c Data Ascii: {"requests":["?ma_id=uVGAFg&ma_ti=&ma_pn=html5video&ma_mt=Video&ma_re=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&ma_st=0&ma_ps=0&ma_le=&ma_ttp=&ma_w=&ma_h=&ma_fs=0&ma_se=&ca=1&&idsite=33&rec=1&r=079822&h=8&m=24&s=0&url=https%3A%2F%2Fweb.leitz-cl
2024-04-25 06:24:04 UTC	285	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://web.leitz-cloud.com Alt-Svc: h3=":443"; ma=2592000 Date: Thu, 25 Apr 2024 06:24:04 GMT Server: Apache/2.4.57 (Debian) Vary: Origin X-Powered-By: PHP/8.2.18 Connection: close

Target ID:	0
Start time:	08:22:45
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:22:48
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:22:52
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Number of links: 0

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Title: Passwort vergessen does not match URL
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Title: Kontowiederherstellung does not match URL

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="author".. found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Windows Analysis Report
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/