Edit tour

Windows Analysis Report
https://clinicaotoface1.websiteseguro.com/no/ai/

Overview

General Information

Sample URL:	https://clinicaotoface1.websiteseguro.com/no/ai/
Analysis ID:	1540226
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Queries the volume information (name, serial number etc) of a device

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2028,i,3602675377787217397,4859431364644588706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicaotoface1.websiteseguro.com/no/ai/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

HxOutlook.exe (PID: 6220 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca MD5: 6F8EAC2C377C8F16D91CB5AC8B8DBF5F)

HxAccounts.exe (PID: 1408 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca MD5: 6FEB00C9A2C3FF66230658B3012BAB6A)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://clinicaotoface1.websiteseguro.com/no/ai/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://clinicaotoface1.websiteseguro.com/no/ai/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49973 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45

Source: global traffic	HTTP traffic detected: GET /no/ai/ HTTP/1.1Host: clinicaotoface1.websiteseguro.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: clinicaotoface1.websiteseguro.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://clinicaotoface1.websiteseguro.com/no/ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: clinicaotoface1.websiteseguro.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 13:25:12 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: en
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 13:25:12 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: en

Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/ge780dddc8-18a1-5781-895a-a690464fa89c780dddc8-18a1-5781-895a-a690
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/https://config.edge.skype.com/config/v1/https://config.edge.skype.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.aadrm.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.aadrm.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.cortana.ai
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.office.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.onedrive.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://api.scheduler.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: HxAccounts.exe, 00000012.00000002.2043319220.00000245B6228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://apis.live.net/v5.0/PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://app.powerbi.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://augloop.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 00000012.00000002.2043163326.00000245B6200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 00000012.00000002.2043163326.00000245B6200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 00000012.00000002.2043163326.00000245B6200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://canary.designerapp.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.entity.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: chromecache_51.3.dr	String found in binary or memory: https://clinicaotoface1.websiteseguro.com/no/ai/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/http://test-exp-s2s.msedge.net/ab/ccacheFileFullNotification
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cortana.ai
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cortana.ai/api
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://cr.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://d.docs.live.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dev.cortana.ai
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://devnull.onenote.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://directory.services.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ecs.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://graph.windows.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://graph.windows.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://invites.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://lifecycle.office.com
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp, 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://make.powerautomate.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://management.azure.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://management.azure.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://messaging.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://mss.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ncus.contentsync.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: HxAccounts.exe, 00000012.00000002.2043237228.00000245B6213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.comF
Source: HxAccounts.exe, 00000012.00000002.2043237228.00000245B6213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officeapps.live.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://onedrive.live.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office365.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office365.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://powerlift-user.acompli.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://res.cdn.office.net
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://service.powerapps.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://settings.outlook.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://staging.cortana.ai
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://substrate.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://tasks.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://wus2.contentsync.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	String found in binary or memory: https://www.yammer.com
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/xI
Source: HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com5

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927

Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.7:49973 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@19/8@4/4

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

File created: C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2028,i,3602675377787217397,4859431364644588706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicaotoface1.websiteseguro.com/no/ai/"
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2028,i,3602675377787217397,4859431364644588706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiautomationcore.dll	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: \REGISTRY\A\{bf0d9086-4f4c-64d9-99fb-b67845704f13}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office Test\Special\PerfImm

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: settings.dat.14.dr

Binary or memory string: VMware, Inc. VMware20,1

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://clinicaotoface1.websiteseguro.com/no/ai/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://api.diagnosticssdf.office.com	0%	URL Reputation	safe
https://login.microsoftonline.com/	0%	URL Reputation	safe
https://shell.suite.office.com:1443	0%	URL Reputation	safe
https://designerapp.azurewebsites.net	0%	URL Reputation	safe
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/	0%	URL Reputation	safe
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://outlook.office365.com/connectors	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://api.addins.omex.office.net/appinfo/query	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/tenantassociationkey	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://powerlift.acompli.net	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://cortana.ai	0%	URL Reputation	safe
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://cloudfiles.onenote.com/upload.aspx	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
https://entitlement.diagnosticssdf.office.com	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://ofcrecsvcapi-int.azurewebsites.net/	0%	URL Reputation	safe
https://canary.designerapp.	0%	URL Reputation	safe
https://ic3.teams.office.com	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	URL Reputation	safe
https://cr.office.com	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://portal.office.com/account/?ref=ClientMeControl	0%	URL Reputation	safe
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://graph.ppe.windows.net	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://powerlift-user.acompli.net	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	0%	URL Reputation	safe
https://api.scheduler.	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://api.aadrm.com	0%	URL Reputation	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://globaldisco.crm.dynamics.com	0%	URL Reputation	safe
https://messaging.engagement.office.com/	0%	URL Reputation	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://dev0-api.acompli.net/autodetect	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/feedback	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/groups	0%	URL Reputation	safe
https://web.microsoftstream.com/video/	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://dataservice.o365filtering.com/	0%	URL Reputation	safe
https://officesetup.getmicrosoftkey.com	0%	URL Reputation	safe
https://analysis.windows.net/powerbi/api	0%	URL Reputation	safe
https://prod-global-autodetect.acompli.net/autodetect	0%	URL Reputation	safe
https://substrate.office.com	0%	URL Reputation	safe
https://outlook.office365.com/autodiscover/autodiscover.json	0%	URL Reputation	safe
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://safelinks.protection.outlook.com/api/GetPolicy	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://apis.live.net/v5.0/	0%	URL Reputation	safe
https://officepyservice.office.net/service.functionality	0%	URL Reputation	safe
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	0%	URL Reputation	safe
https://templatesmetadata.office.net/	0%	URL Reputation	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://messaging.lifecycle.office.com/	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://mss.office.com	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://management.azure.com	0%	URL Reputation	safe
https://outlook.office365.com	0%	URL Reputation	safe
https://login.windows.net	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://incidents.diagnostics.office.com	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/ios	0%	URL Reputation	safe
https://make.powerautomate.com	0%	URL Reputation	safe
https://api.addins.omex.office.net/api/addins/search	0%	URL Reputation	safe
https://insertmedia.bing.office.net/odc/insertmedia	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
clinicaotoface1.websiteseguro.com	186.202.153.7	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://clinicaotoface1.websiteseguro.com/favicon.ico	false		unknown
https://clinicaotoface1.websiteseguro.com/no/ai/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.diagnosticssdf.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://shell.suite.office.com:1443	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://designerapp.azurewebsites.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/connectors	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://cdn.entity.	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/appinfo/query	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://powerlift.acompli.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://cortana.ai	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://cloudfiles.onenote.com/upload.aspx	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://entitlement.diagnosticssdf.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://ofcrecsvcapi-int.azurewebsites.net/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://canary.designerapp.	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://ic3.teams.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://config.edge.skype.net/config/v1/	HxAccounts.exe, 00000012.00000002.2043453853.00000245B624E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.yammer.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.microsoftstream.com/api/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://cr.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://portal.office.com/account/?ref=ClientMeControl	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/registrar/prod	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://graph.ppe.windows.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://powerlift-user.acompli.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://officeci.azurewebsites.net/api/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com5	HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://api.scheduler.	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://store.office.cn/addinstemplate	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/rps	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/autosuggest/api/v1/init?cvid=	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://globaldisco.crm.dynamics.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://messaging.engagement.office.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com/xI	HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://dev0-api.acompli.net/autodetect	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/feedback	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://web.microsoftstream.com/video/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://dataservice.o365filtering.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://officesetup.getmicrosoftkey.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://analysis.windows.net/powerbi/api	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://prod-global-autodetect.acompli.net/autodetect	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://substrate.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://login.windows.net/	HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://outlook.office365.com/autodiscover/autodiscover.json	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://d.docs.live.net	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://safelinks.protection.outlook.com/api/GetPolicy	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://ncus.contentsync.	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false		unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://apis.live.net/v5.0/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/service.functionality	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://templatesmetadata.office.net/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://messaging.lifecycle.office.com/	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://mss.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://management.azure.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://login.windows.net	HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://wus2.contentsync.	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://incidents.diagnostics.office.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://make.powerautomate.com	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/odc/insertmedia	75EFBBD4-7730-44A5-9629-A83DDE4C5BBC.14.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com	HxAccounts.exe, 00000012.00000002.2048160911.00000245BD483000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
186.202.153.7	clinicaotoface1.websiteseguro.com	Brazil	27715	LocawebServicosdeInternetSABR	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540226
Start date and time:	2024-10-23 15:24:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://clinicaotoface1.websiteseguro.com/no/ai/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@19/8@4/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, BackgroundTransferHost.exe, HxTsr.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.174, 142.251.5.84, 34.104.35.123, 20.12.23.50, 199.232.210.172, 52.165.164.15, 52.109.89.18, 13.107.5.88, 13.107.42.16, 20.242.39.171, 51.124.78.146, 52.137.106.217, 142.250.185.195, 20.73.194.208
Excluded domains from analysis (whitelisted): config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, outlookmobile-office365-tas-msedge-net.e-0009.e-msedge.net, clientservices.googleapis.com, e-0009.e-msedge.net, time.windows.com, weu-azsc-config.officeapps.live.com, clients2.google.com, atm-settingsfe-prod-geo2.trafficmanager.net, settings-prod-wus2-1.westus2.cloudapp.azure.com, config-edge-skype.l-0007.l-msedge.net, glb.cws.prod.dcat.dsp.trafficmanager.net, settings-prod-weu-2.westeurope.cloudapp.azure.com, sls.update.microsoft.com, update.googleapis.com, officeclient.microsoft.com, l-0007.l-msedge.net, wu-b-net.trafficmanager.net, config.edge.skype.com, glb.sls.prod.dcat.dsp.trafficmanager.net, settings-prod-weu-1.westeurope.cloudapp.azure.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://clinicaotoface1.websiteseguro.com/no/ai/

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\75EFBBD4-7730-44A5-9629-A83DDE4C5BBC

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	175027
Entropy (8bit):	5.293149685974748
Encrypted:	false
SSDEEP:	1536:li2XPRAqFbz41gwErLe7HW8QM/hMdcAZl1p5ihs7gXXSEIJROdYgo:DHe7HW8QM/FXfZfo
MD5:	02166090124AAE9A15AD15F7466559ED
SHA1:	77818BC6DC0E5756BA0A35EDA0664713D73369AA
SHA-256:	D879C41CF1869A7D278DCE77384CB02E7D07C1C72A9C431AA900112B821E8025
SHA-512:	9B03AD644858C8D4FCCE0B8CACE42D8C2255B01C0337E69E178A24970D9631934DDF48E070DEAA9A01C811E15154545E26DE055491F7FB5C0DDDA4CAA0B0462A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-23T13:25:31">.. Build: 16.0.18209.40127-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.1268869235374628
Encrypted:	false
SSDEEP:	12:BotVoPqF69Fq5DzxK8CQkXg1Q1UMCl2M+aqc2EfK8CeE:aC1IKfQcSMClCaoEfKfeE
MD5:	9C9CA2F40705D47A95D2AAB03B79B7CB
SHA1:	FB8B8DC8CDE3E4C3EB8765174DD7ECEB276A2A91
SHA-256:	E2ADEE9C8152F6C237B335B0890F7E0E14F625F90D5CC649139CF9464137D890
SHA-512:	2E9721149169E6E39F2DE32AA525B260B440E153A8EB02BC91BD82CAD8BB688C4661F42DD1A0BAC7618F4353D6BB926D98A8ECAE227AC3BA6931C894FBC2E187
Malicious:	false
Reputation:	low
Preview:	............................................................................l...........B.......................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................b.W..............dX%..........H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g.g.e.r...C.:.\.U.s.e.r.s.\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g...e.t.l...........P.P........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.1219947880235205
Encrypted:	false
SSDEEP:	12:eSSWtQXXPqF69Fq5Dqd8CokXg1Q1UMCl2M+aqc2EOCoQqXn:eSvs1dfocSMClCaoEFoQy
MD5:	741B291F9B587A1A56C594F1C65FDECB
SHA1:	472AF11EAECDA4DDF8390C3D23E45DAE8D5B3FCC
SHA-256:	DEC3CE0C288E9B362CAFB405E0C37E235839D16670364ED32CC151774B115278
SHA-512:	7FEBDF71BE7A97789D5647CACEE8BCC8435E20D0CE38CAA3F73778E18E8F1CC182407201C139D5C4ED2FE62F82CF3F9D5BA29F5E665AD1357D76A6BDA8FDAB2A
Malicious:	false
Reputation:	low
Preview:	............................................................................J...p...L...........................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................b.W...........M.W`X%..........H.x.M.A.l.w.a.y.s.O.n.L.o.g...C.:.\.U.s.e.r.s.\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.m.A.l.w.a.y.s.O.n.L.o.g...e.t.l.............P.P.p...L...................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	0.1067594420076136
Encrypted:	false
SSDEEP:	96:+Ji/Q4bnfGmC0bodr5nwNYuK6YSoHTsYsy:ui/Q4bGscdZwauKWoHT9
MD5:	E9A47E172A51A987535F4A48C1EA1ACE
SHA1:	4B745A2B217AF36496954072E1818775176F213D
SHA-256:	F2BE6C1CCA6E8B5B4B783B054BB76A2B883D429D21A2163F2C9B1A2E5369E54E
SHA-512:	CBD3AF492FB20B13B05AA8294E0924DDAA7C694B99F62C8DA152A8FDFF27CFDADE416EDA3EC530F1084874A156732CEF19A7304A0315271B8F26A1BDA986B36E
Malicious:	false
Reputation:	low
Preview:	regf........b.Q.7.................. .... ......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtmF@.D_................................................................................................................................................................................................................................................................................................................................................B..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	1203
Entropy (8bit):	5.2504488690337485
Encrypted:	false
SSDEEP:	24:2d1Md0mIh5DUmV+tNcKVQxvZscLe8m69fLeDmuuxOHQ1Su:c3mIbDr+tNcZ28/9SpuxOzu
MD5:	36175A246B8C7565434FA2CA02B59EF2
SHA1:	63DFB928BE60F89DAEDED0389481F8BB8D643369
SHA-256:	4947B7B82D61763858DD88F7325FC2F8F85E61B6C10850FC45F0734E00C7C600
SHA-512:	BFF44EB8F73D579CC513A0259CB3943063638120FB732DE023C20B840FB8DF8B2A94429B95A9FFC75650C9E6B695E536A93E0475A5BB44D854682B2B94ABC5D1
Malicious:	false
Reputation:	low
URL:	https://clinicaotoface1.websiteseguro.com/favicon.ico
Preview:	<?xml version="1.0" encoding="ISO-8859-1"?>.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">.<head>.<title>Object not found!</title>.<link rev="made" href="mailto:root@localhost" />.<style type="text/css"> /--><![CDATA[/> / . body { color: #000000; background-color: #FFFFFF; }. a:link { color: #0000CC; }. p, address {margin-left: 3em;}. span {font-size: smaller;}./ */--></style>.</head>..<body>.<h1>Object not found!</h1>.<p>... The requested URL was not found on this server... .. The link on the. <a href="https://clinicaotoface1.websiteseguro.com/no/ai/">referring. page</a> seems to be wrong or outdated. Please inform the author of. <a href="https://clinicaotoface1.websiteseguro.com/no/ai/">that page</a>. about the error... ..</p>.<p>.If you think this is a server error, please contact.the <a href="mailto:root@loc

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	5.337415064556163
Encrypted:	false
SSDEEP:	24:2d1Md0mIh5DUmV+tNcKVQxvSmruZrFmuuxOHQ1Su:c3mIbDr+tNcZN4uxOzu
MD5:	13B36A47C6D36D78F5C55794D8A5C3A6
SHA1:	3577EE60E1FDAFF6F964CFD7330A55C305408908
SHA-256:	27EF37BFFDB468C6302D7883E63A5119D074FAEFE6EB6FFF314574542ECB72A7
SHA-512:	1676FEB84E46BDA052F3FFBB954AC83425B9EFCAB50B679636CE433CE1E3C8F3B8FBF333A2BB51A84A6190792875953B3B743C3947048E341F14B91474C03FF3
Malicious:	false
Reputation:	low
URL:	https://clinicaotoface1.websiteseguro.com/no/ai/
Preview:	<?xml version="1.0" encoding="ISO-8859-1"?>.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">.<head>.<title>Object not found!</title>.<link rev="made" href="mailto:root@localhost" />.<style type="text/css"> /--><![CDATA[/> / . body { color: #000000; background-color: #FFFFFF; }. a:link { color: #0000CC; }. p, address {margin-left: 3em;}. span {font-size: smaller;}./ */--></style>.</head>..<body>.<h1>Object not found!</h1>.<p>... The requested URL was not found on this server... .. If you entered the URL manually please check your. spelling and try again... ..</p>.<p>.If you think this is a server error, please contact.the <a href="mailto:root@localhost">webmaster</a>...</p>..<h2>Error 404</h2>.<address>. <a href="/">clinicaotoface1.websiteseguro.com</a><br />. . <span>Wed Oct 23 10:25:12 2024<br />. Apache</span>.</addr

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:24:59.787847042 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:24:59.976492882 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 23, 2024 15:24:59.976716042 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:00.616127968 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:00.616244078 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:00.834759951 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:02.193994045 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:25:06.277261972 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:06.662782907 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:07.131531000 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:25:07.557748079 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:09.162729025 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:09.960937977 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.961020947 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:09.961126089 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.961571932 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.961628914 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:09.961771965 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.962450981 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.962474108 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:09.962820053 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:09.962836981 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:10.227708101 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:10.227843046 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:10.444938898 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:11.563867092 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:11.563962936 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:11.564146042 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:11.564351082 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:11.564388037 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:11.983879089 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:11.983932018 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:11.984023094 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:11.985616922 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:11.985639095 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:12.147067070 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:12.216054916 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.216305971 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.216325045 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.217655897 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.217978954 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.218050003 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.218172073 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.218209028 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.219060898 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.219153881 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.219249010 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.219546080 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.219619989 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.219834089 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.219938040 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.260735989 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.260749102 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.276911974 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.276942968 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.307787895 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.323342085 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.427362919 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:12.427644968 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:12.427670002 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:12.429321051 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:12.429403067 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:12.430305958 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:12.430396080 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:12.477826118 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:12.477848053 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:12.491094112 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.493136883 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.495791912 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.495867968 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.496232033 CEST	49706	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.496253967 CEST	443	49706	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.532682896 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:12.561717987 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.603352070 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.840075016 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.840652943 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.840722084 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.840786934 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.841628075 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.841675043 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.841986895 CEST	49707	443	192.168.2.7	186.202.153.7
Oct 23, 2024 15:25:12.842005014 CEST	443	49707	186.202.153.7	192.168.2.7
Oct 23, 2024 15:25:12.860495090 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:12.860573053 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:12.877310991 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:12.877332926 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:12.878288031 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:12.932356119 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:13.317188025 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:13.359411955 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.094557047 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.094594002 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:14.094661951 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.094958067 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.094971895 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:14.342751980 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.342912912 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.342977047 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.343000889 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.343014002 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.343014002 CEST	49709	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.343020916 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.343027115 CEST	443	49709	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.384953022 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.384979963 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.385062933 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.385287046 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:14.385301113 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:14.868124962 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:14.868253946 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.871336937 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.871346951 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:14.871752977 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:14.879697084 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:14.927333117 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.105983019 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.106021881 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.106041908 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.106142044 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.106142044 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.106168032 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.106268883 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.139486074 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.139540911 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.139590025 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.139597893 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.139636993 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.139636993 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.223875046 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.223908901 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.224020004 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.224040985 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.224601030 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.240648031 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.240791082 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.241875887 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.241883993 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.242139101 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.243139982 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.258908033 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.258955956 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.259016991 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.259025097 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.259058952 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.259058952 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.260652065 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.260704994 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.260756969 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.260763884 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.260797977 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.260812044 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.287329912 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.340976000 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.341023922 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.341120958 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.341120958 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.341134071 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.341299057 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.341995955 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.342042923 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.342096090 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.342096090 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.342102051 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.342206955 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.373224974 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.373266935 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.373317003 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.373326063 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.373366117 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.373366117 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.374710083 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.374753952 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.374800920 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.374806881 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.374829054 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.374990940 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.376022100 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.376066923 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.376113892 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.376121044 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.376153946 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.376167059 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.378201008 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.378247023 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.378302097 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.378302097 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.378307104 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.378346920 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.458214998 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.458257914 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.458302975 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.458309889 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.458359003 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.458359003 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.459758997 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.459813118 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.459939957 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.459945917 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.459945917 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.459969997 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.460100889 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.460100889 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.460113049 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.460122108 CEST	49711	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.460130930 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.460136890 CEST	443	49711	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.494064093 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.494138002 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.494235039 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.495381117 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.495403051 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.495609045 CEST	49712	443	192.168.2.7	23.43.61.160
Oct 23, 2024 15:25:15.495615005 CEST	443	49712	23.43.61.160	192.168.2.7
Oct 23, 2024 15:25:15.498130083 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.498164892 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.498605967 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.498879910 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.498929024 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.498992920 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.499439001 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.499454975 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.499751091 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.499771118 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.500622034 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.500638962 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.500756025 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.500858068 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.500868082 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.501862049 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.501885891 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.502130032 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.502589941 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.502672911 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.502721071 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.502729893 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:15.502744913 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.502849102 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:15.502870083 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.249365091 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.250020027 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.250057936 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.250653028 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.250658035 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.254905939 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.255219936 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.255242109 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.255589008 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.255594969 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.274012089 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.274574995 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.274595022 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.275245905 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.275319099 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.275322914 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.275744915 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.275775909 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.275880098 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.276269913 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.276279926 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.276509047 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.276524067 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.277074099 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.277079105 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.387542009 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.387572050 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.387648106 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.387650967 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.387706041 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.387881041 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.387902021 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.387912989 CEST	49717	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.387919903 CEST	443	49717	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.391262054 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.391302109 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.391376972 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.391557932 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.391572952 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.399358034 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.399384022 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.399441004 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.399442911 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.399485111 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.399682999 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.399702072 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.399713993 CEST	49715	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.399719954 CEST	443	49715	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.402429104 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.402448893 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.402514935 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.402672052 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.402688026 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413009882 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413068056 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413121939 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413135052 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413197994 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413199902 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413204908 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413254976 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413367033 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413410902 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413644075 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413655996 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.413667917 CEST	49713	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.413672924 CEST	443	49713	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.414824963 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.414834023 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.414845943 CEST	49716	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.414850950 CEST	443	49716	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.416132927 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.416304111 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.416359901 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.416497946 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.416522026 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.416536093 CEST	49714	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.416543007 CEST	443	49714	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.419070959 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.419101954 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.419159889 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.419310093 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.419326067 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.420226097 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.420247078 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.420305967 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.421658039 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.421667099 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.421721935 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.421869040 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.421881914 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.422051907 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:16.422065020 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:16.740837097 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:25:17.174552917 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.175088882 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.175111055 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.175540924 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.175546885 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.176774979 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.177140951 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.177158117 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.177654982 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.177659988 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.191510916 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.191874027 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.191884995 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.192401886 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.192405939 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.193485975 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.194077015 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.194083929 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.194293022 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.194297075 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.313615084 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.313879967 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.313936949 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.314237118 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.314254045 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.314265013 CEST	49719	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.314271927 CEST	443	49719	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.315614939 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.315735102 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.315792084 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.316854954 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.316874027 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.316915035 CEST	49721	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.316920042 CEST	443	49721	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.329574108 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.329596996 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.329658985 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.331959009 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.332334042 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.332402945 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.332547903 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.332775116 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.332823992 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.334434986 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.334475994 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.334527016 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.334980965 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.334990978 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.335496902 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.335510969 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.335522890 CEST	49722	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.335527897 CEST	443	49722	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.341739893 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.341846943 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.341907024 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.342355967 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.342396975 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.343080997 CEST	49720	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.343086004 CEST	443	49720	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.346028090 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.346046925 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.348115921 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.348124981 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.348179102 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.348308086 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.348320007 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.515393972 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.517110109 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.517129898 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.518150091 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.518155098 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.800509930 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.800678968 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.800738096 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.800899029 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.800910950 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.800945044 CEST	49718	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.800949097 CEST	443	49718	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.805617094 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.805669069 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:17.806088924 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.806277990 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:17.806298971 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.085969925 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.087420940 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.087420940 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.087436914 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.087455034 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.100303888 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:18.103781939 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.103844881 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.104453087 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.104474068 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.105201006 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.105206966 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.105736971 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.105751991 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.106607914 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.106611967 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.116007090 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.116570950 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.116653919 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.117902040 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.117916107 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.223556042 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.223635912 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.226706028 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.226706028 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.226918936 CEST	49723	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.226957083 CEST	443	49723	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.230180979 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.230273008 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.230397940 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.230633974 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.230668068 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.241107941 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.241210938 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.241483927 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.241552114 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.241552114 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.241627932 CEST	49724	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.241641998 CEST	443	49724	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.241821051 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.242016077 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.242425919 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.242425919 CEST	49726	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.242432117 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.242439032 CEST	443	49726	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.244898081 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.244904041 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.244918108 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.244925976 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.245007038 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.245013952 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.245173931 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.245176077 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.245191097 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.245198965 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.256091118 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.256234884 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.256352901 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.256352901 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.256623983 CEST	49725	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.256643057 CEST	443	49725	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.259967089 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.259983063 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.260077000 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.260200024 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.260212898 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.569679976 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.570624113 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.570624113 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.570704937 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.570720911 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.708796024 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.708964109 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.714653015 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.737857103 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.737857103 CEST	49727	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.737905979 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.737941027 CEST	443	49727	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.786109924 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.786156893 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.786329985 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.786382914 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:18.786389112 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:18.968715906 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.010726929 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.018106937 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.018769026 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.022114992 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.023037910 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.023061037 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.024775982 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.024789095 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.026937962 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.026953936 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.027930975 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.027940989 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.028753042 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.028768063 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.030036926 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.030040979 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.031019926 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.031025887 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.032465935 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.032470942 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.154016972 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.154114008 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.154191971 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.154581070 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.154629946 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.154660940 CEST	49728	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.154679060 CEST	443	49728	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.161777020 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.161951065 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.162007093 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.162396908 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.162547112 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.162575006 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.162657976 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.162729025 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.162825108 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.163399935 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.163414001 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.163448095 CEST	49730	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.163459063 CEST	443	49730	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.167304993 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.167310953 CEST	49731	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.167325020 CEST	443	49731	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.167486906 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.167538881 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.169507027 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.169521093 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.172355890 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.172360897 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.172369957 CEST	49729	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.172374010 CEST	443	49729	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.177023888 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.177050114 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.177120924 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.180471897 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.180495977 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.180747986 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.181027889 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.181041956 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.183780909 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.183831930 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.183892965 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.184561014 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.184571028 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.185056925 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.185081005 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.557353020 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.558276892 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.558289051 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.559290886 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.559293985 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.694839001 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.694920063 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.695059061 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.695719957 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.695719957 CEST	49732	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.695738077 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.695746899 CEST	443	49732	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.701736927 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.701793909 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.701874018 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.702238083 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.702265024 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.925760031 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.926422119 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.926443100 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.926723957 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.926734924 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.930841923 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.931329012 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.931343079 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.932039022 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.932043076 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.939574003 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.939970970 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.940052986 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.940427065 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.940442085 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.943377018 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.944014072 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.944014072 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:19.944027901 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:19.944036961 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.061985970 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.062064886 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.062197924 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.062292099 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.062308073 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.062408924 CEST	49733	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.062416077 CEST	443	49733	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.065129042 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065218925 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.065300941 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065361023 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.065466881 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065501928 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.065520048 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.065594912 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065594912 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065629005 CEST	49735	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.065633059 CEST	443	49735	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.067562103 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.067608118 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.067862034 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.067996025 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.068011999 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.077795982 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.078623056 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.078738928 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.078780890 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.078780890 CEST	49736	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.078802109 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.078814983 CEST	443	49736	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.080882072 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.080912113 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.080986023 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.081099987 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.081111908 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.081222057 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.081377029 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.081425905 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.081459045 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.081459045 CEST	49734	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.081471920 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.081480026 CEST	443	49734	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.083296061 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.083334923 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.083414078 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.083534002 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.083548069 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.469400883 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.473018885 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.473058939 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.474742889 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.474767923 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.608863115 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.609019995 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.609090090 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.609324932 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.609363079 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.609380960 CEST	49737	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.609391928 CEST	443	49737	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.612061977 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.612104893 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.612169027 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.612278938 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.612286091 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.826383114 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.829801083 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.829818964 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.830244064 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.830729961 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.830735922 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.830821037 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.831757069 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.831787109 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.832731962 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.832737923 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.833307028 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.833318949 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.834031105 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.834036112 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.840034008 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.841234922 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.841260910 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.842062950 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.842067957 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.962691069 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.962788105 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.962903976 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.962969065 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.962990999 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.963006020 CEST	49739	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.963012934 CEST	443	49739	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.965902090 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.965926886 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.966130972 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.966259003 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.966270924 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.966571093 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.966866970 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.967087984 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967087984 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967087984 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967132092 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.967329025 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.967391968 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967431068 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967452049 CEST	49740	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.967451096 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.967468023 CEST	443	49740	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.969659090 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.969686031 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.969752073 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.969865084 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.969868898 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.969877005 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.969888926 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.969938040 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.970113039 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.970144987 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.975672960 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.975820065 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.975925922 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.976001024 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.976012945 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.976022959 CEST	49741	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.976027012 CEST	443	49741	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.978530884 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.978538990 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:20.978625059 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.978780031 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:20.978790045 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.265299082 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:21.268052101 CEST	49748	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:21.268100023 CEST	443	49748	104.98.116.138	192.168.2.7
Oct 23, 2024 15:25:21.268177986 CEST	49748	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:21.269452095 CEST	49748	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:21.269465923 CEST	443	49748	104.98.116.138	192.168.2.7
Oct 23, 2024 15:25:21.270782948 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 23, 2024 15:25:21.272628069 CEST	49738	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.272694111 CEST	443	49738	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.372193098 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.372580051 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.372618914 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.373065948 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.373071909 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.508184910 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.508348942 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.508414984 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.508523941 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.508549929 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.508564949 CEST	49742	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.508572102 CEST	443	49742	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.511100054 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.511127949 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.511272907 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.511421919 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.511430979 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.721347094 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.721755981 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.721788883 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.722322941 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.722330093 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.723661900 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.724216938 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.724256992 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.724687099 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.724699020 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.734553099 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.735129118 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.735138893 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.735759974 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.735764980 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.737588882 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.737890959 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.737905979 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.738374949 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.738384962 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.857506990 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.858262062 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.858326912 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.858361006 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.858361006 CEST	49744	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.858382940 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.858395100 CEST	443	49744	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.859611034 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.859781981 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.859952927 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.860079050 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.860079050 CEST	49747	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.860122919 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.860153913 CEST	443	49747	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.860888958 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.860920906 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.861052036 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.861186028 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.861193895 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.862046003 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.862078905 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.862462044 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.862569094 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.862586021 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.875473976 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.875746965 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.875801086 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.875837088 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.875852108 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.875866890 CEST	49746	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.875873089 CEST	443	49746	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.876059055 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.876271009 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.876358986 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.876451015 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.876477003 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.876501083 CEST	49745	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.876516104 CEST	443	49745	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.878072977 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878160000 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.878333092 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878355026 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.878360987 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878489971 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878504992 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878520012 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:21.878596067 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:21.878612995 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.291702986 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.292201996 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.292243004 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.292650938 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.292658091 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.424108982 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:22.424263954 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:22.424983978 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:22.427570105 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.427762032 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.427941084 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.428131104 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.428153038 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.428164959 CEST	49749	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.428174973 CEST	443	49749	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.430140972 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.430207968 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.430300951 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.430463076 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.430484056 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.620564938 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.620986938 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.621016026 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.621371984 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.621398926 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.633248091 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.633547068 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.633555889 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.633564949 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.633686066 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.633953094 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.633958101 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.634208918 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.634247065 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.634533882 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.634541035 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.634884119 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.634948969 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.635281086 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.635293007 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.756067991 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.756217957 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.756285906 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.756352901 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.756352901 CEST	49752	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.756371021 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.756381035 CEST	443	49752	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.759104013 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.759144068 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.759260893 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.759332895 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.759337902 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.785372019 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.785516024 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.785568953 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.785605907 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.785605907 CEST	49753	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.785628080 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.785640955 CEST	443	49753	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.785806894 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786112070 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786195993 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786215067 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786226988 CEST	49754	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786228895 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786231995 CEST	443	49754	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786359072 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786505938 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786559105 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786619902 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786643982 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.786659956 CEST	49751	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.786667109 CEST	443	49751	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.787944078 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.787972927 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.788108110 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.788281918 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.788295984 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.789026022 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789058924 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789063931 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.789128065 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789148092 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.789244890 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789259911 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:22.789277077 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789402008 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:22.789431095 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.193845987 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.194350004 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.194377899 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.195920944 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.195928097 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.332571030 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.332655907 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.332726955 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.332829952 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.332829952 CEST	49755	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.332874060 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.332901001 CEST	443	49755	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.334966898 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.334999084 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.335108042 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.335259914 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.335268021 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.518712997 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.519747019 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.519769907 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.521190882 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.521194935 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.543943882 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.544559002 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.544572115 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.545263052 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.545268059 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.546338081 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.546669006 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.546699047 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.547164917 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.547171116 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.550671101 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.551109076 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.551152945 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.551765919 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.551830053 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.608686924 CEST	49708	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:25:23.608767986 CEST	443	49708	216.58.206.36	192.168.2.7
Oct 23, 2024 15:25:23.665299892 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.665396929 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.665448904 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.667617083 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.667632103 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.667644024 CEST	49758	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.667649031 CEST	443	49758	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.672338009 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.672399998 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.672703981 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.673063993 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.673084974 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682024956 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682095051 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682128906 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682373047 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682373047 CEST	49759	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682391882 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682406902 CEST	443	49759	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682424068 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682621002 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.682821035 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682821035 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682862043 CEST	49760	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.682878971 CEST	443	49760	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.685909033 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.685946941 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.686064959 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.686297894 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.686311960 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.689842939 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.689873934 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.689928055 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.690443993 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.690454006 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.691329002 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.691397905 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.691448927 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.691601038 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.691621065 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.691637039 CEST	49761	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.691643953 CEST	443	49761	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.694001913 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.694011927 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:23.694097996 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.694190979 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:23.694201946 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.089668989 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.090564013 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.090595007 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.090878010 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.090883970 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.375813007 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.375900030 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.376138926 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.376138926 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.376138926 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.378792048 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.378833055 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.379026890 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.379066944 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.379076004 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.415234089 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.416232109 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.416232109 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.416261911 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.416289091 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.444514990 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.445277929 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.445295095 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.445425987 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.445430994 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.457648993 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.458507061 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.458507061 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.458554983 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.458573103 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.460475922 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.461272001 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.461296082 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.461333036 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.461344004 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.550971985 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.551059008 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.551243067 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.551244020 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.551491022 CEST	49763	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.551510096 CEST	443	49763	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.553709984 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.553742886 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.557053089 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.557209969 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.557220936 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.581840992 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.581986904 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.582192898 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.582192898 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.582194090 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.584806919 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.584851980 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.585002899 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.585175991 CEST	49762	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.585201979 CEST	443	49762	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.585241079 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.585257053 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.597306967 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.597359896 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.597538948 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.597584009 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.597584009 CEST	49766	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.597606897 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.597628117 CEST	443	49766	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.599395037 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.599549055 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.599777937 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.599777937 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.599802971 CEST	49764	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.599808931 CEST	443	49764	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.600023985 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.600044966 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.600109100 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.600682020 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.600697041 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.602113008 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.602154970 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.602344990 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.602344990 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.602385044 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:24.881959915 CEST	49765	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:24.881995916 CEST	443	49765	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.149856091 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.150758982 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.150758982 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.150777102 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.150795937 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.287800074 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.288342953 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.288630962 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.288708925 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.288708925 CEST	49767	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.288723946 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.288728952 CEST	443	49767	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.292408943 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.292440891 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.292644978 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.292644978 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.292670965 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.312153101 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.312542915 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.312561035 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.313119888 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.313126087 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.341964006 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.342315912 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.342350006 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.342730999 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.342736006 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.365468025 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.365812063 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.365829945 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.366375923 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.366380930 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.372914076 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.373332024 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.373363018 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.373775005 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.373790026 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.449625969 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.449804068 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.449907064 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.449938059 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.449951887 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.449964046 CEST	49768	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.449970007 CEST	443	49768	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.453195095 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.453227043 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.453335047 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.453536034 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.453553915 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.480242014 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.480484009 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.480544090 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.480578899 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.480597019 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.480616093 CEST	49769	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.480623007 CEST	443	49769	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.483877897 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.483906984 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.484112978 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.484412909 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.484422922 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.503591061 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.503803968 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.503860950 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.503915071 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.503921032 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.503931046 CEST	49770	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.503933907 CEST	443	49770	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.506419897 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.506428003 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.506688118 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.506757021 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.506769896 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.515100002 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.515369892 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.515433073 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.515467882 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.515475035 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.515490055 CEST	49771	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.515495062 CEST	443	49771	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.517812967 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.517833948 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:25.518069029 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.518217087 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:25.518223047 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.051949978 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.052534103 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.052557945 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.053144932 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.053149939 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.188590050 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.188762903 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.188838959 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.188962936 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.188976049 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.189019918 CEST	49772	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.189024925 CEST	443	49772	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.192234993 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.192270041 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.192347050 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.192581892 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.192598104 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.241765022 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.242257118 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.242275000 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.242852926 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.242861032 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.246154070 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.246570110 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.246579885 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.247107029 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.247112036 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.264632940 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.265073061 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.265080929 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.265620947 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.265625954 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.289591074 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.290241003 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.290304899 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.291364908 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.291378021 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.379961014 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.380172014 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.380228996 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.380414963 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.380436897 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.380456924 CEST	49773	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.380465984 CEST	443	49773	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.383888960 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.384103060 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384205103 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.384294033 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384409904 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.384469032 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384557009 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384576082 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.384603977 CEST	49774	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384609938 CEST	443	49774	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.384614944 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.384645939 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.387546062 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.387587070 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.387660027 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.387841940 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.387857914 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.401320934 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.401531935 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.401772976 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.401829004 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.401835918 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.401875973 CEST	49775	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.401880980 CEST	443	49775	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.404392004 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.404414892 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.404643059 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.404875040 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.404891014 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.427932024 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.428184986 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.428281069 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.428328991 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.428352118 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.428374052 CEST	49776	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.428380966 CEST	443	49776	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.431900024 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.431938887 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.432007074 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.432220936 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.432234049 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.956209898 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.957256079 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.957292080 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:26.957870960 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:26.957876921 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.094819069 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.094983101 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.095263958 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.095264912 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.095264912 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.098623991 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.098675966 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.098762035 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.098974943 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.099004030 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.138326883 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.138998985 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.139034986 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.139394999 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.139400959 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.148767948 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.149568081 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.149606943 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.150119066 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.150127888 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.160068035 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.160511017 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.160538912 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.161343098 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.161350012 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.180116892 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.180567026 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.180586100 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.181248903 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.181257010 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.273531914 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.273859978 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.273936987 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.273972034 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.273989916 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.273998976 CEST	49779	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.274003983 CEST	443	49779	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.277014017 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.277049065 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.277312040 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.277399063 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.277403116 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.287533045 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.287754059 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.288008928 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.288058996 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.288058996 CEST	49778	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.288084030 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.288090944 CEST	443	49778	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.291840076 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.291927099 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.292004108 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.292117119 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.292140007 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.293857098 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.293997049 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.294049978 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.294114113 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.294131041 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.294171095 CEST	49780	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.294178963 CEST	443	49780	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.296643019 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.296689034 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.296761036 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.296992064 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.297008991 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.316060066 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.316184044 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.316291094 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.316376925 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.316376925 CEST	49781	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.316395044 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.316402912 CEST	443	49781	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.318861961 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.318922997 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.319297075 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.319298029 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.319386959 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.413036108 CEST	49777	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.413068056 CEST	443	49777	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.853564024 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.862739086 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.862765074 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.863589048 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:27.863595963 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.994622946 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.995074987 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:27.995239019 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.054750919 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.054838896 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.059798002 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.087876081 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.101501942 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.101509094 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.111491919 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.111520052 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.117137909 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.199887037 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.199909925 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.201287985 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.201319933 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.201340914 CEST	49782	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.201349974 CEST	443	49782	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.219242096 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.219271898 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.220088959 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.220105886 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.220752954 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.220761061 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.221807003 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.221812010 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.225872993 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.225893974 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.226874113 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.226881027 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.240047932 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.240096092 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.240201950 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.240794897 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.240814924 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.332560062 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.332645893 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.332725048 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.333045959 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.333071947 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.333082914 CEST	49786	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.333089113 CEST	443	49786	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.336291075 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.336332083 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.336446047 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.336942911 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.336956024 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.350667000 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.350749969 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.350877047 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.351089001 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.351111889 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.351129055 CEST	49785	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.351136923 CEST	443	49785	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.356105089 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.356139898 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.356488943 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.356854916 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.356867075 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.357243061 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.357301950 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.357382059 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.357805967 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.357817888 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.357831955 CEST	49783	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.357836008 CEST	443	49783	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.362684965 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.362710953 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.362726927 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.362796068 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.362874985 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.362931013 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.363035917 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.363045931 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.363078117 CEST	49784	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.363094091 CEST	443	49784	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.366662025 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.366673946 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:28.366787910 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.367106915 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:28.367119074 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.023739100 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.024302959 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.024332047 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.024800062 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.024806976 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.082567930 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.112040043 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.112082958 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.112423897 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.112427950 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.125742912 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.129534960 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.129558086 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.129900932 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.129905939 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.141303062 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.142178059 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.142187119 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.142239094 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.142529011 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.142534018 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.160140991 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.160151005 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.160494089 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.160497904 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.164633989 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.164803982 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.164871931 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.215600014 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.215651035 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.215670109 CEST	49787	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.215681076 CEST	443	49787	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.222907066 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.222955942 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.223042965 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.225116014 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.225141048 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.242122889 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.242290020 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.242420912 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.243629932 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.243629932 CEST	49788	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.243649006 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.243658066 CEST	443	49788	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.252175093 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.252226114 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.252381086 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.252850056 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.252868891 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.259886980 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.259968996 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.260040045 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.261404991 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.261423111 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.261434078 CEST	49791	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.261440039 CEST	443	49791	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.269300938 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.269387007 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.269467115 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.269587040 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.269608974 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.292320013 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.292526960 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.292601109 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.310022116 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.310040951 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.310059071 CEST	49790	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.310065031 CEST	443	49790	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.315045118 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.315089941 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.315172911 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.318571091 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.318583965 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.386962891 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.387154102 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.387263060 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.407135010 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.407160044 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.407174110 CEST	49789	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.407180071 CEST	443	49789	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.445765972 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.445808887 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.445888996 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.453243017 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.453260899 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.991687059 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.993922949 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.994004011 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:29.994874954 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:29.994889975 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.017911911 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:25:30.235378981 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.235794067 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.236049891 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.283545017 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.283572912 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.286660910 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.356712103 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.356900930 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.356961012 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.369107008 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.369121075 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.369565964 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.369569063 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.369774103 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.369800091 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.370311022 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.370322943 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.370624065 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.370628119 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.371009111 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.371012926 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.381896973 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.407319069 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.407346964 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.450838089 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.450858116 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.454266071 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.454319954 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.454339981 CEST	49792	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.454349041 CEST	443	49792	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.461364985 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.461410999 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.461499929 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.461642981 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.461647987 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.505542040 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.506138086 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.506221056 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.507425070 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.507509947 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.507569075 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.508452892 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.508471966 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.508526087 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.508528948 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.508567095 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.582356930 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.582416058 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.582559109 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.582565069 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.582626104 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.686031103 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.686084986 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.686099052 CEST	49794	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.686109066 CEST	443	49794	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.732749939 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.732793093 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.732801914 CEST	49795	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.732808113 CEST	443	49795	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.732860088 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.732865095 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.732892036 CEST	49793	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.732894897 CEST	443	49793	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.735014915 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.735038996 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.735327959 CEST	49796	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.735332966 CEST	443	49796	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.756805897 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.756851912 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.758106947 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.758147955 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.758164883 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.758665085 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.772684097 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.772701025 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.772773981 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.772804022 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.773962975 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774005890 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.774131060 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774367094 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774379969 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.774583101 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774604082 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:30.774740934 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774833918 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:30.774846077 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.231241941 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.234630108 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.234662056 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.235909939 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.235915899 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.369060993 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.369118929 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.370382071 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.370420933 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.370584965 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.371339083 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.450449944 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.450476885 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.451195002 CEST	49798	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.451200962 CEST	443	49798	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.488722086 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.488771915 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.488873005 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.493360996 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.493374109 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.527256966 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.528080940 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.528114080 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.528673887 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.528681040 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.541481972 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.541906118 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.541928053 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.542392015 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.542397022 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.543220043 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.543510914 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.543745995 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.543832064 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.544275999 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.544291019 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.544579983 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.544604063 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.544945002 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.544955969 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.666342974 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.666508913 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.666572094 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.666609049 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.666825056 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.666874886 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.667409897 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.667445898 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.667474031 CEST	49800	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.667490005 CEST	443	49800	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.680354118 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.680525064 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.680582047 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.682486057 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.682662010 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.682708979 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.683401108 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.683459997 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.683521986 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.746057034 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.746057034 CEST	49802	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.746135950 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.746169090 CEST	443	49802	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.749367952 CEST	49799	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.749397993 CEST	443	49799	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.751409054 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.751409054 CEST	49801	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.751447916 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.751462936 CEST	443	49801	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.752240896 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.752273083 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.752330065 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.755177021 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.755220890 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.755342960 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.757504940 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.757536888 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.757595062 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.759614944 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.759645939 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.759710073 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.760087013 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.760109901 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.760179043 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.760193110 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.760226011 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.760240078 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:31.760423899 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:31.760453939 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.252471924 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.258630991 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.258647919 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.259239912 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.259247065 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.391835928 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.391921043 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.392041922 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.432670116 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.432670116 CEST	49804	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.432694912 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.432704926 CEST	443	49804	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.437098980 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.437150002 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.437215090 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.437371016 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.437383890 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.509258032 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.510029078 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.510041952 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.510677099 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.510682106 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.519927979 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.520673990 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.523610115 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.523636103 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.524087906 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.524091959 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.526391983 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.526412010 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.526860952 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.526865959 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.530045033 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.530371904 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.530390978 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.530839920 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.530850887 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.657567978 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.657740116 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.657784939 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.657948017 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.657969952 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.657989025 CEST	49805	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.657994032 CEST	443	49805	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.659933090 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.660001040 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.660078049 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.663655043 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.663724899 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.663788080 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.664860010 CEST	49807	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.664877892 CEST	443	49807	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.667736053 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.667758942 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.667776108 CEST	49808	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.667782068 CEST	443	49808	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.668606043 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.668689013 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.668948889 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.669517040 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.669542074 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.670257092 CEST	49806	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.670264006 CEST	443	49806	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.680847883 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.680896997 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.681555986 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.684345007 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.684360027 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.684380054 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.684425116 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.685616016 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.685652018 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.685836077 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.685836077 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.685870886 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.685919046 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.686928034 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.686945915 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.687202930 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.687218904 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:32.687341928 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.687519073 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:32.687526941 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.202169895 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.299223900 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.428704977 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.436323881 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.437597990 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.441353083 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.493750095 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.493765116 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.494220972 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.494225025 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.494483948 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.494503975 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.494849920 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.494856119 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.495078087 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.495109081 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.495124102 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.495165110 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.495488882 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.495496988 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.495580912 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.495589972 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.496074915 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.496085882 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.496273994 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.496283054 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.625531912 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.625720024 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.625783920 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.625850916 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.625866890 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.625878096 CEST	49813	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.625883102 CEST	443	49813	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.626729965 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.626940966 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627146959 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.627188921 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627238035 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627305984 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627321005 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.627346992 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.627614021 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627684116 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627751112 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.627767086 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627804041 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.627895117 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.628072977 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.628104925 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.628146887 CEST	49811	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.628164053 CEST	443	49811	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.628186941 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.628202915 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.628232002 CEST	49814	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.628238916 CEST	443	49814	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.629504919 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.629518986 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.629559040 CEST	49812	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.629564047 CEST	443	49812	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.631386042 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.632280111 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.632342100 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.632998943 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633025885 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.633078098 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633240938 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633276939 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.633339882 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633444071 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633461952 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.633476019 CEST	49810	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.633481026 CEST	443	49810	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.634495020 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.634526014 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.634604931 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.634974003 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.634989023 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.635004044 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.635015965 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.635405064 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.635416031 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.636413097 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.636421919 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.636480093 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.636682987 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.636694908 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.636821032 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.636831045 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:33.636882067 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.636987925 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:33.637000084 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.391410112 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.402926922 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.405529976 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.409945965 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.412074089 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.412137985 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.412266016 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.412956953 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.412971973 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.413436890 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.413467884 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.413902044 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.413908005 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.436578989 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.436610937 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.437016964 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.437026024 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.437630892 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.437657118 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.438095093 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.438107014 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.451047897 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.451066017 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.451801062 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.451821089 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.543225050 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.543379068 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.543447971 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.549957991 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.550003052 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.550055027 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.550069094 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.550108910 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.561556101 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.561618090 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.561650991 CEST	49817	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.561666965 CEST	443	49817	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.563642025 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.563663960 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.563692093 CEST	49818	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.563698053 CEST	443	49818	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.569261074 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.569869041 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.569921970 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.572114944 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.572168112 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.572221041 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.585586071 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.585702896 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.585760117 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.601196051 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.601224899 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.601237059 CEST	49816	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.601242065 CEST	443	49816	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.602710009 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.602710009 CEST	49819	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.602786064 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.602833986 CEST	443	49819	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.604666948 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.604666948 CEST	49815	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.604692936 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.604702950 CEST	443	49815	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.607186079 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.607228041 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.607286930 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.609220982 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.609263897 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.609344006 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.609814882 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.609831095 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.613096952 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.613115072 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.615067959 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.615082979 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.615134954 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.615442038 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.615447998 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.616092920 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.616103888 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.616327047 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.616381884 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.616389036 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.617644072 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.617680073 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:34.617736101 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.640681982 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:34.640718937 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.367018938 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.367566109 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.367619991 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.368069887 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.368083000 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.369318008 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.369719982 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.369741917 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.370111942 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.370122910 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.371653080 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.371999025 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.372024059 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.372437000 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.372441053 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.386667967 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.387031078 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.387042046 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.387447119 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.387451887 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.400089979 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.400835991 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.400856972 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.401212931 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.401217937 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.505472898 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.505547047 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.505639076 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.505999088 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.506319046 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.506371021 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.508610964 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.508788109 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.508843899 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.525832891 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.525902033 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.526020050 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.526029110 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.526115894 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.538475037 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.538500071 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.538549900 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.538587093 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.538640976 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.547173977 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.547173977 CEST	49820	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.547194958 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.547204018 CEST	443	49820	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.547224045 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.547229052 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.547236919 CEST	49822	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.547243118 CEST	443	49822	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.548269033 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.548269033 CEST	49824	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.548310041 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.548335075 CEST	443	49824	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.548610926 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.548610926 CEST	49821	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.548643112 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.548655033 CEST	443	49821	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.549902916 CEST	49823	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.549920082 CEST	443	49823	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.582978010 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.583040953 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.583112001 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.586719036 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.586760044 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.586824894 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.590775013 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.590821981 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.590867043 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.593238115 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.593266010 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.600248098 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.600275993 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.602191925 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.602217913 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.618169069 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.618194103 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.618308067 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.618660927 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.618673086 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.633018970 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.633064985 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:35.633188009 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.638212919 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:35.638242960 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.348397970 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.349405050 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.349437952 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.349512100 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.350009918 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.350014925 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.351047993 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.351078987 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.351408005 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.351417065 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.358122110 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.358820915 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.358829975 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.359369993 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.359376907 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.385818005 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.386372089 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.386389017 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.386950970 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.386956930 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.394260883 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.394624949 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.394654989 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.395224094 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.395236015 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.484258890 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.484349012 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.484394073 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.484538078 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.484556913 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.484569073 CEST	49826	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.484575033 CEST	443	49826	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.487848043 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.487878084 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.487935066 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.488352060 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.488364935 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.490000963 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.490072966 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.490124941 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.490240097 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.490257025 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.490269899 CEST	49825	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.490278006 CEST	443	49825	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.492842913 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.492876053 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.493030071 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.493189096 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.493202925 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.495040894 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.495105028 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.495151043 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.495407104 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.495414019 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.495428085 CEST	49827	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.495431900 CEST	443	49827	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.498183012 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.498217106 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.498271942 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.498393059 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.498408079 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.523118019 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.523276091 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.523319960 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.525582075 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.525589943 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.525607109 CEST	49828	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.525609970 CEST	443	49828	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.529759884 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.529791117 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.529829979 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.529875040 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.529875040 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.594238043 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.594257116 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.594266891 CEST	49829	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.594270945 CEST	443	49829	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.602063894 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.602159023 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.602237940 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.603110075 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.603133917 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.603183985 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.604487896 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.604520082 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:36.604579926 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:36.604593992 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.243798971 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.250294924 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.254518986 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.279752016 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.279776096 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.280347109 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.280354023 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.280888081 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.280905008 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.281791925 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.281795979 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.282418013 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.282448053 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.282990932 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.282995939 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.373429060 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.377877951 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.408267975 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.408299923 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.412615061 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.412681103 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.412723064 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.414938927 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.414964914 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.415000916 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.415014029 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.415057898 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.415879011 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.415950060 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.417053938 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.423458099 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.423472881 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.426193953 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.426212072 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.426240921 CEST	49832	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.426246881 CEST	443	49832	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.430243969 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.430243969 CEST	49830	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.430263996 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.430273056 CEST	443	49830	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.441019058 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.441051960 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.441598892 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.441612959 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.442015886 CEST	49831	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.442039013 CEST	443	49831	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.448270082 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.448298931 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.448355913 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.449734926 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.449745893 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.451535940 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.451581955 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.451805115 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.451805115 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.451841116 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.452688932 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.452699900 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.452842951 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.453056097 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.453063011 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.559473038 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.559539080 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.559621096 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.579649925 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.579731941 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.579813004 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.651993990 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.652030945 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.652043104 CEST	49834	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.652048111 CEST	443	49834	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.653773069 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.653773069 CEST	49833	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.653848886 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.653887987 CEST	443	49833	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.663011074 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.663057089 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.663114071 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.663950920 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.664028883 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.664097071 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.664943933 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.664959908 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:37.665210962 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:37.665246010 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.193950891 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.201260090 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.209666014 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.235199928 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.235233068 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.236077070 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.236083031 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.236462116 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.236496925 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.237127066 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.237132072 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.237637043 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.237646103 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.238202095 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.238204956 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.271919966 CEST	443	49748	104.98.116.138	192.168.2.7
Oct 23, 2024 15:25:38.271996021 CEST	49748	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:25:38.366655111 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.366729021 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.366827965 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.370079994 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.370369911 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.370440960 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.370455027 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.370492935 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.370703936 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.370789051 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.370840073 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.427391052 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.429238081 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.493930101 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.493963957 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.494393110 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.494399071 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.518034935 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.521009922 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.521032095 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.521055937 CEST	49837	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.521066904 CEST	443	49837	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.533374071 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.533412933 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.533448935 CEST	49836	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.533457994 CEST	443	49836	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.628026962 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.628194094 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.628683090 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.629586935 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.629601955 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.629686117 CEST	49838	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.629692078 CEST	443	49838	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.632422924 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.632477045 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.632786989 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.632802963 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.636987925 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.637026072 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.637125969 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.637552977 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.637573004 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.637708902 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.637708902 CEST	49839	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.637722015 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.637726068 CEST	443	49839	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.724042892 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.724153996 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.724292994 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.725481987 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.725538015 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.725600958 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.725982904 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.726021051 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.726102114 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.726124048 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.726819038 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.726850033 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.726958036 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.727147102 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.727160931 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.765980959 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.766161919 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.766236067 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.766297102 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.766330957 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.766357899 CEST	49840	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.766371012 CEST	443	49840	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.769184113 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.769223928 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:38.769299030 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.769418955 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:38.769434929 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.402004957 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.402477026 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.402530909 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.403074980 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.403081894 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.476489067 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.476948023 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.476978064 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.477369070 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.477375984 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.479636908 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.479895115 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.480037928 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.480094910 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.480245113 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.480262995 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.480576992 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.480581045 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.480706930 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.480722904 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.516267061 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.516804934 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.516841888 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.517523050 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.517528057 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.548634052 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.548665047 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.548715115 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.548723936 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.548767090 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.548944950 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.548970938 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.548984051 CEST	49841	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.548990965 CEST	443	49841	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.555138111 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.555181980 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.555243969 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.555588007 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.555599928 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.612651110 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.612797022 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.612848997 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.613823891 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.613853931 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.613867998 CEST	49843	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.613876104 CEST	443	49843	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616046906 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616159916 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616204977 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.616261959 CEST	49844	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.616272926 CEST	443	49844	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616755009 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616879940 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616919041 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.616935968 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.616980076 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.617021084 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.617060900 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.617115021 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.617310047 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.617352009 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.617378950 CEST	49842	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.617394924 CEST	443	49842	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.618623018 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.618645906 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.618753910 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.618782997 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.618829012 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.618913889 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.618923903 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.619683027 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.619709969 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.619790077 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.619898081 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.619908094 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.658299923 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.658375978 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.658440113 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.658464909 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.658499002 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.658577919 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.660233021 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.660254955 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.660268068 CEST	49845	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.660273075 CEST	443	49845	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.663583994 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.663624048 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:39.663707018 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.663882971 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:39.663896084 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.331098080 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.331835032 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.331872940 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.332506895 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.332513094 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.368933916 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.370492935 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.390002012 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.396899939 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.396934986 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.397372007 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.397377014 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.397641897 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.397665024 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.397996902 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.398003101 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.398457050 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.398487091 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.399003983 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.399012089 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.423055887 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.423397064 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.423417091 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.423808098 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.423813105 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.471360922 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.471440077 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.471518993 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.472018003 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.472042084 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.472053051 CEST	49846	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.472058058 CEST	443	49846	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.474344969 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.474395990 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.474510908 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.474716902 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.474735975 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.531833887 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.531908989 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532015085 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.532182932 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.532200098 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532208920 CEST	49848	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.532215118 CEST	443	49848	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532574892 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532597065 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532644987 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.532649994 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.532690048 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.533976078 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.533986092 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534013987 CEST	49847	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.534018040 CEST	443	49847	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534311056 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534378052 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534550905 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.534583092 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534714937 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.534766912 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.535379887 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.535398006 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.535520077 CEST	49849	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.535526991 CEST	443	49849	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.538062096 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.538095951 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.538321972 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.538935900 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.538965940 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.539033890 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540026903 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540045977 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.540086031 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540214062 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540227890 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.540522099 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540533066 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.540617943 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.540628910 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.563406944 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.563469887 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.563539028 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.633829117 CEST	49850	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.633862972 CEST	443	49850	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.648626089 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.648665905 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:40.648776054 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.648926020 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:40.648932934 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.228686094 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.230206013 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.230269909 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.230822086 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.230838060 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.297861099 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.298638105 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.298656940 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.298696995 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.298706055 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.301188946 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.301553965 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.301572084 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.301911116 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.301915884 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.306049109 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.306333065 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.306338072 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.306670904 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.306674957 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.367568970 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.367695093 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.367767096 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.367939949 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.367976904 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.368010998 CEST	49851	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.368026972 CEST	443	49851	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.370474100 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.370503902 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.370650053 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.370704889 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.370713949 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.406634092 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.407331944 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.407347918 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.410639048 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.410646915 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.432946920 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.433026075 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.433163881 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.433234930 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.433234930 CEST	49853	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.433248997 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.433258057 CEST	443	49853	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.435935020 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.435973883 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.436018944 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.436183929 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.436194897 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.437114954 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.437167883 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.437321901 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.437349081 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.437355995 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.437364101 CEST	49854	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.437366962 CEST	443	49854	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.439235926 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.439260960 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.439337969 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.439512968 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.439524889 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.445360899 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.445382118 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.445420980 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.445421934 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.445563078 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.445569992 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.445580006 CEST	49852	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.445581913 CEST	443	49852	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.447460890 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.447472095 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.447521925 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.447660923 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.447670937 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.545088053 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.545237064 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.545320034 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.545340061 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.545360088 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.545440912 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.545440912 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.545468092 CEST	49855	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.545483112 CEST	443	49855	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.547216892 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.547298908 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:41.547419071 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.547535896 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:41.547557116 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.150754929 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.151218891 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.151235104 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.151689053 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.151693106 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.187974930 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.188870907 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.188870907 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.188893080 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.188905001 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.197813988 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.198482990 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.198482990 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.198493004 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.198504925 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.205346107 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.205760956 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.205771923 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.206149101 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.206152916 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.289314985 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.289390087 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.289619923 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.289619923 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.290658951 CEST	49856	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.290672064 CEST	443	49856	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.292058945 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.292093992 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.292293072 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.292397976 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.292404890 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.301238060 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.302006960 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.302007914 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.302071095 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.302134991 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.325905085 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.325977087 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.326127052 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.326127052 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.326185942 CEST	49857	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.326199055 CEST	443	49857	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.328177929 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.328227043 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.328315973 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.328457117 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.328474045 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.333723068 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.333781958 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.334019899 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.334019899 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.334055901 CEST	49858	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.334070921 CEST	443	49858	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.335846901 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.335875988 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.335998058 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.336096048 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.336110115 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.343430042 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.343457937 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.343498945 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.343635082 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.343635082 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.343851089 CEST	49859	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.343856096 CEST	443	49859	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.345336914 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.345369101 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.345505953 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.345560074 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.345575094 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.439637899 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.439985991 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.440196991 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.440244913 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.440244913 CEST	49860	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.440267086 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.440283060 CEST	443	49860	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.442857981 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.442893982 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:42.446784019 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.451514006 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:42.451529980 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.055867910 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.056364059 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.056384087 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.056833982 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.056838989 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.082137108 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.082662106 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.082694054 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.082907915 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.082915068 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.083420038 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.083983898 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.083983898 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.084002018 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.084022045 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.106662035 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.107067108 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.107083082 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.107476950 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.107481956 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.195399046 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.196043968 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.196099043 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.196235895 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.196235895 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.196427107 CEST	49861	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.196441889 CEST	443	49861	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.198728085 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.198774099 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.198892117 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.198977947 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.198986053 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.212296963 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.213058949 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.213058949 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.213083982 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.213100910 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.218717098 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.218786955 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.218919039 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.218919039 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.219186068 CEST	49864	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.219197035 CEST	443	49864	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.220521927 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.220771074 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.221198082 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221198082 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221298933 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221324921 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.221358061 CEST	49862	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221376896 CEST	443	49862	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.221695900 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221764088 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.221776962 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.223021984 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.223053932 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.223306894 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.223306894 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.223337889 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.251928091 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.252090931 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.252209902 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.252209902 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.252304077 CEST	49863	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.252314091 CEST	443	49863	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.254043102 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.254141092 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.254805088 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.254805088 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.254887104 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.350863934 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.351182938 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.351305008 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.351305008 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.351392984 CEST	49865	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.351402044 CEST	443	49865	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.353794098 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.353822947 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.354167938 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.354167938 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.354192972 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.950730085 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.951246023 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.951271057 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.951617002 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.951622963 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.978390932 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.978842974 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.978871107 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.979051113 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.979484081 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.979489088 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.979693890 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.979718924 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:43.980654001 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:43.980659008 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.007299900 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.007633924 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.007663965 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.008019924 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.008025885 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.087177992 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.087877989 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.088047028 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.088809967 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.088859081 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.088893890 CEST	49866	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.088908911 CEST	443	49866	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.091926098 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.092006922 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.092094898 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.092253923 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.092261076 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.095046997 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.095432997 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.095448971 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.095846891 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.095851898 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.116095066 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.116157055 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.116381884 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.116461039 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.116482019 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.116492033 CEST	49867	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.116497040 CEST	443	49867	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.117964029 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.118125916 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.118191004 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.118444920 CEST	49868	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.118453979 CEST	443	49868	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.120757103 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.120800972 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.120870113 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.121979952 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.122042894 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.122096062 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.122117043 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.122134924 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.122420073 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.122448921 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.145766973 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.145824909 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.145896912 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.145921946 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.145955086 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.149682045 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.175344944 CEST	49869	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.175381899 CEST	443	49869	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.183063984 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.183120012 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.183182955 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.183480024 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.183496952 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.228279114 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.228424072 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.228478909 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.228630066 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.228648901 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.228660107 CEST	49870	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.228665113 CEST	443	49870	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.230827093 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.230901957 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.231020927 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.231343031 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.231379032 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.848566055 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.859508991 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.859577894 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.860357046 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.860373020 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.877976894 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.878456116 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.878479004 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.878974915 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.878979921 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.889847040 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.890175104 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.890191078 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.890762091 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.890767097 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.941363096 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.941929102 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.941958904 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.942544937 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.942549944 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.994188070 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.994306087 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.994390011 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.994601011 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.994601011 CEST	49871	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.994646072 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.994673014 CEST	443	49871	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.998811960 CEST	49876	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.998861074 CEST	443	49876	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:44.998924017 CEST	49876	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.999255896 CEST	49876	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:44.999275923 CEST	443	49876	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.010238886 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.010708094 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.010770082 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.011193037 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.011208057 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.015774012 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.015860081 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.016161919 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.016237974 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.016237974 CEST	49872	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.016253948 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.016263008 CEST	443	49872	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.018910885 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.018948078 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.019165039 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.019277096 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.019290924 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.031584024 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.031640053 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.031773090 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.031805992 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.031883001 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.031950951 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.031995058 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.031995058 CEST	49873	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.032021999 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.032047033 CEST	443	49873	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.033873081 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.033890963 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.033971071 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.034075975 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.034094095 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.079525948 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.079593897 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.079699993 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.079848051 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.082675934 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.149466991 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.149538994 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.149652958 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.149682045 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.149712086 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.151874065 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.151874065 CEST	49874	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.151899099 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.151909113 CEST	443	49874	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.152657986 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.152697086 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.152726889 CEST	49875	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.152743101 CEST	443	49875	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.157207012 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.157259941 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.157322884 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.158262968 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.158309937 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.158377886 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.158535004 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.158555031 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.161768913 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.161788940 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.792052984 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.792543888 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.792578936 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.793056965 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.793064117 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.797967911 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.798319101 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.798353910 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.798742056 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.798748016 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.924685001 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.925209045 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.925221920 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.925806046 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.925812006 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.928628922 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.928905010 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.928952932 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.929008007 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.929074049 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.929096937 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.929112911 CEST	49877	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.929120064 CEST	443	49877	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.930110931 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.930507898 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.930517912 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.931127071 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.931132078 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.932015896 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.932055950 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.932286978 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.932410955 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.932420969 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.934191942 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.934356928 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.934427977 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.934494972 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.934494972 CEST	49878	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.934530020 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.934566975 CEST	443	49878	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.936810017 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.936835051 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:45.936959982 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.937103033 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:45.937119007 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.058725119 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.058800936 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.058860064 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.058932066 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.058978081 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.059106112 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.059123993 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.059139013 CEST	49880	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.059145927 CEST	443	49880	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.061816931 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.061836004 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.061964989 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.062089920 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.062094927 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.068439007 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.068486929 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.068631887 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.068651915 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.068751097 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.068758965 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.068770885 CEST	49879	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.068789005 CEST	443	49879	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.071228027 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.071263075 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.071448088 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.071583986 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.071600914 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.673835993 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.674272060 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.674289942 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.674679041 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.674684048 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.702860117 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.703325987 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.703344107 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.703586102 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.703593969 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.809123039 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.809248924 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.809293985 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.809303999 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.809360027 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.809432983 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.809461117 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.809482098 CEST	49881	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.809489965 CEST	443	49881	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.812040091 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.812136889 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.812213898 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.812360048 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.812377930 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.828309059 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.828649998 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.828660965 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.829010963 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.829016924 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.833055019 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.833357096 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.833379030 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.833682060 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.833687067 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.840672016 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.840842962 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.840893030 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.840920925 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.840939999 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.840946913 CEST	49882	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.840955019 CEST	443	49882	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.843107939 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.843130112 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.843348026 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.843447924 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.843458891 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.966736078 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.966902018 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.967031002 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.967031002 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.967080116 CEST	49883	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.967092037 CEST	443	49883	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.969306946 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.969366074 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.969719887 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.969721079 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.969791889 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.970218897 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.970371962 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.970446110 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.970446110 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.970468998 CEST	49884	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.970479965 CEST	443	49884	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.973037004 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.973069906 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:46.973155975 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.973234892 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:46.973246098 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.560713053 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.561602116 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.561602116 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.561638117 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.561655045 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.604690075 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.613149881 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.613179922 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.614135027 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.614141941 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.696836948 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.696866035 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.696911097 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.697119951 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.697119951 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.697179079 CEST	49885	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.697196960 CEST	443	49885	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.699574947 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.699666977 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.699807882 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.699949026 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.699969053 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.718683958 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.719496965 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.719496965 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.719507933 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.719522953 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.741281033 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.741585970 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.741600990 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.741947889 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.741952896 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.747303009 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.747493029 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.747684956 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.747684956 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.747868061 CEST	49886	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.747880936 CEST	443	49886	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.749599934 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.749624968 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.749690056 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.749809027 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.749819040 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.855443954 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.855514050 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.855628014 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.855662107 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.855700016 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.855756998 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.855756998 CEST	49887	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.855772972 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.855782986 CEST	443	49887	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.857826948 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.857916117 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.858072042 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.858181000 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.858200073 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.881771088 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.881853104 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.881901979 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.881990910 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.882002115 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.882014036 CEST	49888	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.882018089 CEST	443	49888	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.884089947 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.884190083 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:47.884289026 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.884427071 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:47.884463072 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.454874039 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.455722094 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.455785036 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.456051111 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.456064939 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.532473087 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.534522057 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.534549952 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.535530090 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.535537004 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.593915939 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.593988895 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.594037056 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.594158888 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.594158888 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.595237017 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.595237017 CEST	49889	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.595282078 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.595310926 CEST	443	49889	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.602691889 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.602745056 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.602823973 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.603025913 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.603033066 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.619442940 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.663041115 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.667956114 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.668000937 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.668495893 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.668510914 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.668827057 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.669028044 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.669111013 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.669367075 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.669367075 CEST	49890	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.669385910 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.669394970 CEST	443	49890	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.669678926 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.669702053 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.670166016 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.670171022 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.673132896 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.673166037 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.673417091 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.673535109 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.673538923 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.802071095 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.802259922 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.802335978 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.802633047 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.802649975 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.802660942 CEST	49891	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.802666903 CEST	443	49891	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.804270029 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.804413080 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.804502010 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.805357933 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.805393934 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.805457115 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.805540085 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.805576086 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.805603981 CEST	49892	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.805618048 CEST	443	49892	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.807338953 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.807349920 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.807933092 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.807969093 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:48.808089972 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.808193922 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:48.808202028 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.358469009 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.359070063 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.359096050 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.359560966 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.359565973 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.439210892 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.439629078 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.439668894 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.440210104 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.440224886 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.493817091 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.493872881 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.493925095 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.494096041 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.494096994 CEST	49893	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.494112968 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.494121075 CEST	443	49893	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.496563911 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.496603012 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.496676922 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.496809006 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.496819973 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.570611000 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.570983887 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.570991993 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.571335077 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.571337938 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.573178053 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.573465109 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.573473930 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.573827028 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.573832035 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.575535059 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.575716019 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.575792074 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.575844049 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.575844049 CEST	49894	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.575875998 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.575901985 CEST	443	49894	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.578165054 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.578188896 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.578262091 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.578428030 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.578442097 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708282948 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708357096 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708414078 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.708424091 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708481073 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708528042 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.708662033 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.708673000 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.708682060 CEST	49895	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.708687067 CEST	443	49895	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.711321115 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.711344957 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.711406946 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.711549997 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.711556911 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.713531017 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.713711023 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.713768959 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.713821888 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.713835001 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.713845015 CEST	49896	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.713850021 CEST	443	49896	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.715856075 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.715888023 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:49.715944052 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.716083050 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:49.716099977 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.257168055 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.257668972 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.257684946 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.258147955 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.258161068 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.340056896 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.340605974 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.340620995 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.341223955 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.341231108 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.395407915 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.395448923 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.395498037 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.395545959 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.395600080 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.396274090 CEST	49897	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.396287918 CEST	443	49897	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.399107933 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.399188042 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.399276972 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.399440050 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.399462938 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.471585989 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.472080946 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.472095966 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.472712040 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.472717047 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.475821018 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.476217985 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.476234913 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.476630926 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.476635933 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.479583979 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.479758978 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.479827881 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.479921103 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.479921103 CEST	49898	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.479940891 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.479948997 CEST	443	49898	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.482633114 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.482666016 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.482728958 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.482928991 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.482944965 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.607362032 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.607491970 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.607570887 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.607780933 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.607799053 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.607805967 CEST	49900	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.607810974 CEST	443	49900	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.610951900 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.611021996 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.611179113 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.611363888 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.611382008 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.612621069 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.612642050 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.612680912 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.612726927 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.612776995 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.613009930 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.613009930 CEST	49899	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.613028049 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.613030910 CEST	443	49899	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.615631104 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.615654945 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:50.615869045 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.615916014 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:50.615921974 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.169851065 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.170811892 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.170811892 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.170830011 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.170840979 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.239934921 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.240809917 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.240809917 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.240828037 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.240844965 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.310297966 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.310334921 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.310386896 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.310432911 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.310466051 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.310692072 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.310692072 CEST	49901	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.310713053 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.310723066 CEST	443	49901	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.313174963 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.313231945 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.313368082 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.313458920 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.313466072 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.370965004 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.371887922 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.371887922 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.371907949 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.371925116 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.374586105 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.375260115 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.375260115 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.375273943 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.375289917 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.376194954 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.376560926 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.376647949 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.376647949 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.376713037 CEST	49902	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.376727104 CEST	443	49902	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.379591942 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.379627943 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.379806042 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.379806042 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.379834890 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.510834932 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.510891914 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.510988951 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.511003017 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.511037111 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.511219025 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.511238098 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.511250973 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.511250973 CEST	49903	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.511256933 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.511264086 CEST	443	49903	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.513952017 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.513997078 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.514163017 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.514317989 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.514326096 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.517648935 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.517672062 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.517736912 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.517781019 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.517908096 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.517908096 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.517908096 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.520060062 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.520081043 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.520309925 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.520427942 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.520440102 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:51.830606937 CEST	49904	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:51.830634117 CEST	443	49904	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.079019070 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.079489946 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.079504013 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.079930067 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.079936028 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.134335995 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.134844065 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.134862900 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.135320902 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.135324001 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.222980022 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.223010063 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.223056078 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.223058939 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.223119974 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.223886967 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.223906040 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.223915100 CEST	49905	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.223921061 CEST	443	49905	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.231978893 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.232017994 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.232124090 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.232703924 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.232712984 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.270284891 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.270487070 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.270643950 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.270977020 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.270991087 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.271013975 CEST	49906	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.271019936 CEST	443	49906	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.271663904 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.273199081 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.273226023 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.273802996 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.273809910 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.275651932 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.275677919 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.275784969 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.276009083 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.276020050 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.283663034 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.284137011 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.284147024 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.284591913 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.284595966 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.406522989 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.406649113 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.406868935 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.406908989 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.406924963 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.406934023 CEST	49908	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.406939030 CEST	443	49908	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.421195984 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.421263933 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.421340942 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.421355009 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.421372890 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.421425104 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.448103905 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.448121071 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.448129892 CEST	49907	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.448136091 CEST	443	49907	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.452016115 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.452054977 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.452110052 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.452616930 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.452630043 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.453563929 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.453654051 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:52.453747988 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.453881979 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:52.453903913 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.002815962 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.003293991 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.003324986 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.003819942 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.003830910 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.042264938 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.042737007 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.042751074 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.043258905 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.043262959 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.141690969 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.141724110 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.141777039 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.141824961 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.141846895 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.142091036 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.142111063 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.142123938 CEST	49909	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.142132044 CEST	443	49909	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.150194883 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.150259018 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.150316000 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.150479078 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.150487900 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.178683996 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.178865910 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.178936005 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.179022074 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.179039001 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.179050922 CEST	49910	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.179055929 CEST	443	49910	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.181756020 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.181828976 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.182157993 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.182306051 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.182326078 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.207612038 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.208115101 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.208151102 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.208600044 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.208607912 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.221606016 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.222033024 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.222068071 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.222481012 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.222486973 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.343679905 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.343774080 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.343838930 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.344139099 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.344166040 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.344185114 CEST	49912	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.344192982 CEST	443	49912	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.347134113 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.347191095 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.347253084 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.347404957 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.347418070 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.363967896 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.364008904 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.364075899 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.364084005 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.364156008 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.364435911 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.364454031 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.364470005 CEST	49911	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.364479065 CEST	443	49911	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.367405891 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.367443085 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.367634058 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.367856026 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.367867947 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.921322107 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.922281981 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.922281981 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.922306061 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.922323942 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.933083057 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.933895111 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.933895111 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:53.933928967 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:53.933958054 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.059340954 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.059381962 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.059434891 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.059530973 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.059735060 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.059753895 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.059782982 CEST	49913	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.059789896 CEST	443	49913	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.062450886 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.062484980 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.062670946 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.062855959 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.062871933 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.069981098 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.070065022 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.070192099 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.070282936 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.070282936 CEST	49914	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.070306063 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.070321083 CEST	443	49914	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.072462082 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.072489023 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.072628021 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.072802067 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.072817087 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.099256039 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.099639893 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.099658966 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.100155115 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.100161076 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.122795105 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.123511076 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.123511076 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.123524904 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.123534918 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.236697912 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.236772060 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.236938000 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.237066031 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.237066031 CEST	49915	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.237085104 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.237092018 CEST	443	49915	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.239716053 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.239758015 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.239861012 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.240025043 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.240036964 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.260462999 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.260493040 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.260688066 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.260711908 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.260796070 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.260796070 CEST	49916	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.260806084 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.260859013 CEST	443	49916	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.262945890 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.262994051 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.263154984 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.263211966 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.263221025 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.822472095 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.823710918 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.823710918 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.823741913 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.823755026 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.826518059 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.827059984 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.827080965 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.830698013 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.830712080 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.959876060 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.961163998 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.961257935 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.961342096 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.961366892 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.961381912 CEST	49918	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.961390018 CEST	443	49918	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.964608908 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.964642048 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.964709997 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.964953899 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.964965105 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.965673923 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.965735912 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.965785980 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.965929985 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.965954065 CEST	49917	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.965954065 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.965960026 CEST	443	49917	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.968868017 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.968914986 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:54.969080925 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.969295025 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:54.969302893 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.006752014 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.008064985 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.008091927 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.008542061 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.008557081 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.040664911 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.041529894 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.041541100 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.042002916 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.042006969 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.146585941 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.146616936 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.146675110 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.146682024 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.146723032 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.146857023 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.146881104 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.146895885 CEST	49919	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.146903038 CEST	443	49919	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.149976015 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.150016069 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.150067091 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.150233030 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.150243998 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.206172943 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.206250906 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.206603050 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.206603050 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.207806110 CEST	49920	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.207818985 CEST	443	49920	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.209692001 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.209723949 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.209871054 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.210114956 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.210129976 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.717951059 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.718446970 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.718461037 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.718873024 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.718878031 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.721045017 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.721421003 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.721440077 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.721807003 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.721810102 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.853310108 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.853461981 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.853521109 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.853638887 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.853660107 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.853699923 CEST	49922	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.853707075 CEST	443	49922	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.856158972 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.856197119 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.856290102 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.856429100 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.856441021 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.858244896 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.858288050 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.858328104 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.858385086 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.858505011 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.858505011 CEST	49921	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.858524084 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.858535051 CEST	443	49921	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.860379934 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.860428095 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.860506058 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.860660076 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.860670090 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.921511889 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.922068119 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.922082901 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.922554970 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.922561884 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.974992990 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.975728989 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.975755930 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:55.976167917 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:55.976175070 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.059557915 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.059623003 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.059732914 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.059951067 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.059951067 CEST	49923	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.059974909 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.059983015 CEST	443	49923	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.062894106 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.062936068 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.063143969 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.063328028 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.063340902 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.113254070 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.113282919 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.113344908 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.113349915 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.113400936 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.113702059 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.113702059 CEST	49924	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.113719940 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.113730907 CEST	443	49924	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.116779089 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.116869926 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.117067099 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.117322922 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.117360115 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.615708113 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.617115021 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.658705950 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.658706903 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.680417061 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.680442095 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.681003094 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.681010008 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.681305885 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.681339979 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.681715012 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.681720972 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.814304113 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.814455032 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.814543962 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.814596891 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.814780951 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.814977884 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.815035105 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.815552950 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.815572977 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.816138029 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.816148043 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.816479921 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.816507101 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.816524982 CEST	49926	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.816530943 CEST	443	49926	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.821430922 CEST	49925	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.821453094 CEST	443	49925	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.825114012 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.825155973 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.825362921 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.825998068 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.826009035 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.826658964 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.826700926 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.826750994 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.827056885 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.827069998 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.878405094 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.878906965 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.878932953 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.879445076 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.879455090 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.953577042 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.953622103 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.953679085 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.953682899 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.953725100 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.953938007 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.953958988 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.953970909 CEST	49927	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.953977108 CEST	443	49927	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.956742048 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.956783056 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:56.956866026 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.957041979 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:56.957056999 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.017085075 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.017169952 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.017225981 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.017441988 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.017462015 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.017482996 CEST	49928	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.017488003 CEST	443	49928	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.020489931 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.020538092 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.020735979 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.020937920 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.020950079 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.579566002 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.580065966 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.580094099 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.580715895 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.580730915 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.586592913 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.586998940 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.587014914 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.587419033 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.587424040 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.715676069 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.716305971 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.716341019 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.716763973 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.716772079 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.717264891 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.717305899 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.717370033 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.717431068 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.717531919 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.717550993 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.717556953 CEST	49930	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.717562914 CEST	443	49930	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.720658064 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.720710993 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.720810890 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.720964909 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.720988989 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.724920988 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.725022078 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.725174904 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.725174904 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.725210905 CEST	49929	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.725228071 CEST	443	49929	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.727744102 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.727782011 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.727852106 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.728008032 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.728019953 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.787921906 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.788971901 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.788971901 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.788996935 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.789006948 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.857105017 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.857183933 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.857455969 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.857456923 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.857505083 CEST	49931	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.857526064 CEST	443	49931	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.860385895 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.860441923 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.860757113 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.860934019 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.860951900 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.924721956 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.924787998 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.924858093 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.925189972 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.925209999 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.925221920 CEST	49932	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.925226927 CEST	443	49932	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.928679943 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.928726912 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:57.928962946 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.928962946 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:57.928989887 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.476638079 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.477243900 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.477261066 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.477722883 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.477726936 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.481442928 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.481741905 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.481758118 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.482244968 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.482248068 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.614253044 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.614738941 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.614789009 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.614804983 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.614850044 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.614893913 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.614912987 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.614918947 CEST	49933	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.614924908 CEST	443	49933	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.617719889 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.617758989 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.617827892 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.618011951 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.618025064 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.619769096 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620136976 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.620146990 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620284081 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620347977 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620389938 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.620524883 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.620537996 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620596886 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.620601892 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.620850086 CEST	49934	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.620855093 CEST	443	49934	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.624469995 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.624501944 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.624708891 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.624730110 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.624736071 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.693445921 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.693945885 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.693979025 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.694430113 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.694433928 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.756542921 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.756624937 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.756690979 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.756889105 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.756980896 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.757006884 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.757019043 CEST	49935	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.757025003 CEST	443	49935	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.760514975 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.760555983 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.760622978 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.760778904 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.760788918 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.833673000 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.833745956 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.833847046 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.833995104 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.834017038 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.834038973 CEST	49936	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.834044933 CEST	443	49936	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.837025881 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.837064981 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:58.837124109 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.837255955 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:58.837270021 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.355849028 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.357295036 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.357335091 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.365896940 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.365906000 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.370546103 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.370971918 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.370997906 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.371392965 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.371402025 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.495702028 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.495758057 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.495820045 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.495826006 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.495877028 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.496097088 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.496109962 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.496123075 CEST	49937	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.496129036 CEST	443	49937	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.499160051 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.499197960 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.499253035 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.499418020 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.499428034 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.502587080 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.503021002 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.503034115 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.503460884 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.503464937 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.507431030 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.507493019 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.507622004 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.507673979 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.507687092 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.507699966 CEST	49938	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.507704973 CEST	443	49938	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.509895086 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.509927034 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.510010004 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.510154963 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.510165930 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.605446100 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.605907917 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.605922937 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.606467962 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.606472015 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.662075043 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.662179947 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.662231922 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.662503004 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.662522078 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.662534952 CEST	49939	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.662539959 CEST	443	49939	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.665158033 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.665203094 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.665280104 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.665579081 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.665590048 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.746265888 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.746351957 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.746531010 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.746570110 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.746591091 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.746603012 CEST	49940	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.746608019 CEST	443	49940	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.749665976 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.749694109 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:25:59.749834061 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.749943972 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:25:59.749957085 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.243299961 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.244750977 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.244776964 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.244977951 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.244982004 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.279304028 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.279820919 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.279848099 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.280920982 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.280926943 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.380657911 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.380739927 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.380800962 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.380856991 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.381603003 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.381822109 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.381822109 CEST	49941	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.381843090 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.381855011 CEST	443	49941	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.384558916 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.384603977 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.385627031 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.386723042 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.386734009 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.417275906 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.418421030 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.418833971 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.418885946 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.418885946 CEST	49942	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.418905973 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.418919086 CEST	443	49942	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.421425104 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.421466112 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.421602011 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.422103882 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.422120094 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.434618950 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.435269117 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.435300112 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.438776970 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.438783884 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.508866072 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.565963984 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.568571091 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.568587065 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.572930098 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.572936058 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.575263977 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.575465918 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.575927973 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.575928926 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.575928926 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.578541994 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.578583956 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.578732014 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.579020977 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.579036951 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.790225983 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.790375948 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.790533066 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.790785074 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.790785074 CEST	49944	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.790807962 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.790817022 CEST	443	49944	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.793517113 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.793557882 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.793653011 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.794687033 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.794713020 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:00.877456903 CEST	49943	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:00.877496004 CEST	443	49943	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.134645939 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.135107994 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.135118008 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.135617971 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.135624886 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.173511028 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.174163103 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.174185991 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.175132036 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.175143003 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.271018028 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.271162033 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.271229029 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.271446943 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.271477938 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.271490097 CEST	49946	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.271496058 CEST	443	49946	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.276421070 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.276489973 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.276562929 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.276722908 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.276736975 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.314814091 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.314877987 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.314944983 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.315344095 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.315362930 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.315419912 CEST	49947	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.315424919 CEST	443	49947	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.320050001 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.320085049 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.320153952 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.320419073 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.320430994 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.340851068 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.341227055 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.341249943 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.341742992 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.341747046 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.479671001 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.479839087 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.479902029 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.479991913 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.480015039 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.480029106 CEST	49948	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.480035067 CEST	443	49948	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.483335018 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.483380079 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.483470917 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.483598948 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.483616114 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.538604975 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.539123058 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.539154053 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.539670944 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.539685965 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.674786091 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.674865007 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.674922943 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.675116062 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.675137997 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.675149918 CEST	49949	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.675158978 CEST	443	49949	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.678103924 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.678148031 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:01.678224087 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.678401947 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:01.678411961 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.042061090 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.042682886 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.042709112 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.043081999 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.043087959 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.070683002 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.071602106 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.071602106 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.071635962 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.071656942 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.177819967 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.177869081 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.177923918 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.177958965 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.178011894 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.178271055 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.178271055 CEST	49950	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.178293943 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.178307056 CEST	443	49950	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.181255102 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.181298018 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.181400061 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.181535959 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.181548119 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.207784891 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.207858086 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.208086967 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.208086967 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.208121061 CEST	49951	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.208137989 CEST	443	49951	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.210887909 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.210928917 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.211184978 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.211184978 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.211214066 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.257960081 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.258943081 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.258943081 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.258985043 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.259005070 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.398298025 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.398339987 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.398397923 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.398626089 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.398626089 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.398669958 CEST	49952	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.398686886 CEST	443	49952	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.401381969 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.401423931 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.401580095 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.401623964 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.401629925 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.437697887 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.441925049 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.441925049 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.441956997 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.441973925 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.575838089 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.575934887 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.576139927 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.576139927 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.576205969 CEST	49953	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.576222897 CEST	443	49953	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.578907013 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.578954935 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.579180002 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.579180002 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.579226017 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.932885885 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.933425903 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.933458090 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.933980942 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.933984995 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.965281010 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.965821028 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.965841055 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:02.966283083 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:02.966288090 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.068516016 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.068562984 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.068610907 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.068628073 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.068686962 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.068909883 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.068936110 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.068948030 CEST	49954	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.068953991 CEST	443	49954	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.072110891 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.072165012 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.072232008 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.072376966 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.072390079 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.132457972 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.132549047 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.132606030 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.132908106 CEST	49955	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.132925987 CEST	443	49955	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.146065950 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.146126986 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.146188974 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.146399975 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.146409035 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.169346094 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.169821024 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.169883013 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.170351028 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.170366049 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.307003975 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.307176113 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.307255030 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.307465076 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.307465076 CEST	49956	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.307517052 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.307545900 CEST	443	49956	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.310525894 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.310564041 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.310631990 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.310771942 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.310775995 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.347759008 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.348212004 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.348239899 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.348711967 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.348718882 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.489562035 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.489726067 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.489788055 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.489900112 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.489900112 CEST	49957	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.489926100 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.489932060 CEST	443	49957	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.493294954 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.493333101 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.493390083 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.493593931 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.493599892 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.828200102 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.843703032 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.843738079 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.844297886 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.844310045 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.883011103 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.884160995 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.884186029 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.884403944 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.884408951 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.976826906 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.976854086 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.976911068 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.976946115 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.977206945 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.977206945 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.977693081 CEST	49958	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.977713108 CEST	443	49958	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.979842901 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.979883909 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:03.980076075 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.980076075 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:03.980108023 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.016983032 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.065274000 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.065303087 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.065779924 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.078246117 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.078279972 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.078356981 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.078474045 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.078506947 CEST	443	49959	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.078535080 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.078552008 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.078767061 CEST	49959	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.079099894 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.079111099 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.081445932 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.081481934 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.085354090 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.085354090 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.085382938 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.211219072 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.211412907 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.213251114 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.213342905 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.213342905 CEST	49960	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.213368893 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.213378906 CEST	443	49960	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.215773106 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.215816021 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.215964079 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.218689919 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.218704939 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.236767054 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.237642050 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.237642050 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.237668991 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.237679958 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.371301889 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.371350050 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.371408939 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.373189926 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.430375099 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.430412054 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.430444002 CEST	49961	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.430449963 CEST	443	49961	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.433032990 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.433073044 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.433182001 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.437177896 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.437196970 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.742156982 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.743119955 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.743119955 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.743138075 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.743154049 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.854355097 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.862930059 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.862943888 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.863535881 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.863540888 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.879298925 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.879519939 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.879630089 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.879667997 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.879667997 CEST	49962	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.879688025 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.879697084 CEST	443	49962	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.882278919 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.882328987 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.882412910 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.882673979 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.882689953 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.987380028 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.987886906 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.987905979 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:04.988363028 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:04.988368034 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.002162933 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.002181053 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.002237082 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.002238035 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.002279043 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.002429962 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.002444029 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.002469063 CEST	49963	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.002475023 CEST	443	49963	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.005439997 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.005482912 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.005590916 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.005776882 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.005790949 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125056028 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125117064 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125183105 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.125236034 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125271082 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125339985 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.125629902 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.125629902 CEST	49964	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.125665903 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.125690937 CEST	443	49964	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.129547119 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.129579067 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.129638910 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.129774094 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.129780054 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.188673019 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.192310095 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.192332983 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.192821026 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.192826986 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.325267076 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.325294018 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.325344086 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.325356960 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.325403929 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.325769901 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.325783014 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.325793028 CEST	49965	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.325798035 CEST	443	49965	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.330288887 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.330337048 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.330399036 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.330794096 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.330810070 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.408956051 CEST	49876	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.411345959 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.411375999 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.411433935 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.411612034 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.411618948 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.663739920 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.664299965 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.664335966 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.664836884 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.664849043 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.766535044 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.767064095 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.767080069 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.767559052 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.767565012 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.804469109 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.804532051 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.804598093 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.804630041 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.804936886 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.804945946 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.804958105 CEST	49966	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.804963112 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.805087090 CEST	443	49966	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.807754040 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.807807922 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.807934999 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.808058977 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.808065891 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.891639948 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.895505905 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.895519018 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.896014929 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.896019936 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.906245947 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.906320095 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.906373978 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.906616926 CEST	49967	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.906632900 CEST	443	49967	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.909849882 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.909874916 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:05.910053968 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.910115004 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:05.910125017 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.030036926 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.030199051 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.030348063 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.030348063 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.030565977 CEST	49968	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.030582905 CEST	443	49968	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.033051968 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.033104897 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.033266068 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.033406019 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.033415079 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.082986116 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.083861113 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.083861113 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.083883047 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.083894968 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.156872988 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.157083988 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.158729076 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.158736944 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.158967018 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.159746885 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.207323074 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.219580889 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.220380068 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.221045017 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.221045017 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.221256971 CEST	49969	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.221280098 CEST	443	49969	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.224865913 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.224906921 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.225135088 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.225373983 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.225390911 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.291523933 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.291774988 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.291914940 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.291914940 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.292726040 CEST	49970	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.292743921 CEST	443	49970	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.295003891 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.295053005 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.295290947 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.295290947 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.295344114 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.576356888 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.579329014 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.583705902 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.583728075 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.584649086 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.585858107 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.631340027 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.666935921 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.667015076 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.668440104 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.668450117 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.668771029 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.669739962 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.715320110 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.719909906 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.719933987 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.720002890 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.720021009 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.720098972 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.720303059 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.720303059 CEST	49971	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.720321894 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.720331907 CEST	443	49971	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.723113060 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.723154068 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.723221064 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.723413944 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.723422050 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.794393063 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.794538975 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.795669079 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.795686007 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.796009064 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.796762943 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.804945946 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.804975986 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.805135012 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.805150032 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.805167913 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.805293083 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.805293083 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.805320024 CEST	49972	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.805330038 CEST	443	49972	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.807650089 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.807696104 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.807944059 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.807944059 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.807980061 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.843329906 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.982141972 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.982755899 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.982772112 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:06.983344078 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:06.983349085 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.040230989 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.040313005 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.040355921 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.040386915 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.040415049 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.040431023 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.040451050 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.047017097 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.047086000 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.047096014 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.047178984 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.047189951 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.047214031 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.047220945 CEST	49973	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.047229052 CEST	443	49973	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.050342083 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.050368071 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.050416946 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.050569057 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.050580025 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.059187889 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.059612989 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.059621096 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.060060978 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.060065031 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120452881 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120491982 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120563984 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.120589018 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120628119 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120676994 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.120822906 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.120836973 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.120846987 CEST	49974	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.120851994 CEST	443	49974	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.123578072 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.123621941 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.123688936 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.123841047 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.123847961 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.312268972 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.312300920 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.312319994 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.312369108 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.312397957 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.312412977 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.312449932 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319156885 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.319185972 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.319215059 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319225073 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.319256067 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.319256067 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319272041 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319319963 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319417000 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319434881 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.319444895 CEST	49975	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.319449902 CEST	443	49975	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.322391033 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.322432041 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.322505951 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.322654009 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.322665930 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.476949930 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.477462053 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.477524042 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.478008032 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.478020906 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.565824986 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.566509008 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.566524982 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.567209005 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.567214966 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.612838030 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.612873077 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.612950087 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.612950087 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.613122940 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.613204002 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.613249063 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.613277912 CEST	49976	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.613292933 CEST	443	49976	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.616009951 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.616060972 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.616183043 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.616319895 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.616347075 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703258038 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703289986 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703351974 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.703398943 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703423023 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703476906 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.703866959 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.703886986 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.703896046 CEST	49977	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.703902006 CEST	443	49977	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.709172010 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.709223032 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.709311008 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.709599018 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.709614038 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.803770065 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.804447889 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.804521084 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.804887056 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.804899931 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.872338057 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.872848034 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.872864008 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.873302937 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.873306990 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.938061953 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.938446045 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.942809105 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.981347084 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.981391907 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.981437922 CEST	49978	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.981455088 CEST	443	49978	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.985908031 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.985954046 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:07.986723900 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.986996889 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:07.987029076 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.007714987 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.008138895 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.008549929 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.008578062 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.008578062 CEST	49979	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.008593082 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.008596897 CEST	443	49979	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.010689020 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.010718107 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.015353918 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.015578032 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.015592098 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.077605963 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.078042984 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.078067064 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.078597069 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.078605890 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.215286970 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.215471983 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.221751928 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.295157909 CEST	49981	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.295228958 CEST	443	49981	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.298809052 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.298861980 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.298986912 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.299232960 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.299259901 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.369684935 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.371404886 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.371429920 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.373363972 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.373377085 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.478229046 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.478760958 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.478843927 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.482703924 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.482718945 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.507514954 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.507596016 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.507752895 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.508440971 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.508440971 CEST	49982	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.508455992 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.508459091 CEST	443	49982	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.515341997 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.515383959 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.515605927 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.518342018 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.518373013 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.619453907 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.619498014 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.619554996 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.619596958 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.620768070 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.632378101 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.632379055 CEST	49983	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.632411957 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.632424116 CEST	443	49983	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.750358105 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.751785040 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.751808882 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.752533913 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.752546072 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.795010090 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.797224045 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.797249079 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.801116943 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.801121950 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.887588978 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.887649059 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.890742064 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.890742064 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.891448021 CEST	49984	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.891468048 CEST	443	49984	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.936747074 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.936904907 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.936954975 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.937220097 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.937242031 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:08.937289000 CEST	49985	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:08.937297106 CEST	443	49985	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.061146975 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.061686039 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.061721087 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.062187910 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.062194109 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.198745012 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.198913097 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.198961973 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.199090004 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.199109077 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.199120998 CEST	49986	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.199126005 CEST	443	49986	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.291647911 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.315583944 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.315642118 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.316057920 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.316065073 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.451534986 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.451715946 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.451761961 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.451839924 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.451858997 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:09.451865911 CEST	49987	443	192.168.2.7	13.107.253.45
Oct 23, 2024 15:26:09.451870918 CEST	443	49987	13.107.253.45	192.168.2.7
Oct 23, 2024 15:26:11.614326000 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:11.614368916 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:11.614435911 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:11.614821911 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:11.614835024 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:12.479000092 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:12.479490042 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:12.479515076 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:12.480675936 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:12.486720085 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:12.486802101 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:12.533710957 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:22.473793983 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:22.473948956 CEST	443	49988	216.58.206.36	192.168.2.7
Oct 23, 2024 15:26:22.474955082 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:23.600908995 CEST	49988	443	192.168.2.7	216.58.206.36
Oct 23, 2024 15:26:23.600943089 CEST	443	49988	216.58.206.36	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:25:07.345551014 CEST	53	54974	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:07.393290997 CEST	53	65015	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:08.784950972 CEST	53	51558	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:09.409759998 CEST	63520	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:25:09.409993887 CEST	52143	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:25:09.955730915 CEST	53	52143	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:09.960011959 CEST	53	63520	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:11.554953098 CEST	49343	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:25:11.555104971 CEST	49527	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:25:11.562988997 CEST	53	49343	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:11.563256025 CEST	53	49527	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:12.463551044 CEST	123	123	192.168.2.7	20.101.57.9
Oct 23, 2024 15:25:12.718560934 CEST	123	123	20.101.57.9	192.168.2.7
Oct 23, 2024 15:25:25.751259089 CEST	53	65335	1.1.1.1	192.168.2.7
Oct 23, 2024 15:25:44.637379885 CEST	53	58524	1.1.1.1	192.168.2.7
Oct 23, 2024 15:26:06.711558104 CEST	138	138	192.168.2.7	192.168.2.255
Oct 23, 2024 15:26:07.217830896 CEST	53	64617	1.1.1.1	192.168.2.7
Oct 23, 2024 15:26:07.542876959 CEST	53	64432	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 15:25:09.409759998 CEST	192.168.2.7	1.1.1.1	0xe0f2	Standard query (0)	clinicaotoface1.websiteseguro.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:25:09.409993887 CEST	192.168.2.7	1.1.1.1	0x6efb	Standard query (0)	clinicaotoface1.websiteseguro.com	65	IN (0x0001)	false
Oct 23, 2024 15:25:11.554953098 CEST	192.168.2.7	1.1.1.1	0xceb5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:25:11.555104971 CEST	192.168.2.7	1.1.1.1	0x77b0	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 15:25:09.960011959 CEST	1.1.1.1	192.168.2.7	0xe0f2	No error (0)	clinicaotoface1.websiteseguro.com	186.202.153.7	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:25:11.562988997 CEST	1.1.1.1	192.168.2.7	0xceb5	No error (0)	www.google.com	216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:25:11.563256025 CEST	1.1.1.1	192.168.2.7	0x77b0	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 23, 2024 15:25:21.788305998 CEST	1.1.1.1	192.168.2.7	0x64cd	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:25:21.788305998 CEST	1.1.1.1	192.168.2.7	0x64cd	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clinicaotoface1.websiteseguro.com

https:

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49706	186.202.153.7	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:12 UTC	682	OUT	GET /no/ai/ HTTP/1.1 Host: clinicaotoface1.websiteseguro.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:25:12 UTC	253	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 13:25:12 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en
2024-10-23 13:25:12 UTC	4	IN	Data Raw: 31 65 0d 0a Data Ascii: 1e
2024-10-23 13:25:12 UTC	30	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 Data Ascii: <?xml version="1.0" encoding="
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-23 13:25:12 UTC	4	IN	Data Raw: 61 66 0d 0a Data Ascii: af
2024-10-23 13:25:12 UTC	10	IN	Data Raw: 49 53 4f 2d 38 38 35 39 2d 31 Data Ascii: ISO-8859-1
2024-10-23 13:25:12 UTC	165	IN	Data Raw: 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 Data Ascii: "?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-23 13:25:12 UTC	3	IN	Data Raw: 65 0d 0a Data Ascii: e
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 65 6e Data Ascii: en
2024-10-23 13:25:12 UTC	12	IN	Data Raw: 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 Data Ascii: " xml:lang="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49707	186.202.153.7	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:12 UTC	628	OUT	GET /favicon.ico HTTP/1.1 Host: clinicaotoface1.websiteseguro.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://clinicaotoface1.websiteseguro.com/no/ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 13:25:12 UTC	253	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 13:25:12 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en
2024-10-23 13:25:12 UTC	4	IN	Data Raw: 31 65 0d 0a Data Ascii: 1e
2024-10-23 13:25:12 UTC	30	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 Data Ascii: <?xml version="1.0" encoding="
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-23 13:25:12 UTC	4	IN	Data Raw: 61 66 0d 0a Data Ascii: af
2024-10-23 13:25:12 UTC	10	IN	Data Raw: 49 53 4f 2d 38 38 35 39 2d 31 Data Ascii: ISO-8859-1
2024-10-23 13:25:12 UTC	165	IN	Data Raw: 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 Data Ascii: "?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-23 13:25:12 UTC	3	IN	Data Raw: 65 0d 0a Data Ascii: e
2024-10-23 13:25:12 UTC	2	IN	Data Raw: 65 6e Data Ascii: en
2024-10-23 13:25:12 UTC	12	IN	Data Raw: 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 Data Ascii: " xml:lang="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49709	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:25:14 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=98428 Date: Wed, 23 Oct 2024 13:25:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49711	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:14 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:15 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:14 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132514Z-r1755647c66r2hg89mqr09g9w000000000r000000000203w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 13:25:15 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49712	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:25:15 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=98448 Date: Wed, 23 Oct 2024 13:25:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 13:25:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49717	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:16 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:16 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132516Z-r1755647c66dj7986akr8tvaw400000007kg0000000040b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:16 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49715	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:16 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:16 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132516Z-17fbfdc98bbvf2fnx6t6w0g25n00000005wg000000004puz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:16 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49716	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:16 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132516Z-r1755647c66z4pt7cv1pnqayy400000008cg000000002k79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49714	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:16 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:16 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132516Z-r1755647c66zs9x4962sbyaz1w00000006dg000000006zxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:16 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49713	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:16 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:16 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: b8a73167-901e-0015-0f59-23b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132516Z-17fbfdc98bb96dqv0e332dtg6000000005t000000000454w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:16 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49719	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132517Z-17fbfdc98bbg2mc9qrpn009kgs000000062g0000000008ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49721	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6d910339-b01e-0021-6856-23cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132517Z-17fbfdc98bbgqz661ufkm7k13c00000005ug000000002u2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:17 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49722	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132517Z-17fbfdc98bblvnlh5w88rcarag000000061g000000001v5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:17 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49720	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 23d575bb-501e-0064-5ae7-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132517Z-r1755647c66ww2rh494kknq3r000000008zg000000007fu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49718	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132517Z-17fbfdc98bb94gkbvedtsa5ef400000005zg000000001sg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49723	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132518Z-r1755647c66sn7s9kfw6gzvyp000000008dg000000000mhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49726	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132518Z-r1755647c66vrwbmeqw88hpesn000000081g0000000059ny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49724	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132518Z-r1755647c66j878m0wkraqty3800000006u0000000003t2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49725	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132518Z-r1755647c66tmf6g4720xfpwpn00000009000000000068y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49727	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132518Z-r1755647c66sn7s9kfw6gzvyp000000008c0000000002v3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49728	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-r1755647c66kv68zfmyfrbcqzg00000006u00000000049qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49730	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-r1755647c66xrxq4nv7upygh4s00000001sg000000005pek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49731	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-17fbfdc98bbx4f4q0941cebmvs00000005u0000000003kt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49729	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-17fbfdc98bbcrtjhdvnfuyp28800000006100000000024gt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49732	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-17fbfdc98bb9tt772yde9rhbm800000005s0000000006etr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49733	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-r1755647c66zs9x4962sbyaz1w00000006k00000000024pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49735	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 8eb541d3-201e-0071-4881-20ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-r1755647c66k9st9tvd58z9dg800000008900000000057fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49736	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-17fbfdc98bbgpkh7048gc3vfcc00000005vg000000006zrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49734	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:19 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132519Z-r1755647c66zs9x4962sbyaz1w00000006cg000000006pre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49737	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132520Z-r1755647c66gb86l6k27ha2m1c00000006vg000000002pt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49739	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ba25aa5e-401e-0015-7950-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132520Z-17fbfdc98bbrx2rj4asdpg8sbs00000001t0000000004x18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49740	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132520Z-17fbfdc98bbrx2rj4asdpg8sbs00000001q0000000007nrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49738	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132520Z-r1755647c66ldfgxa3qp9d53us000000089g0000000053km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49741	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:20 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132520Z-17fbfdc98bbnmnfvzuhft9x8zg00000004ng000000002h3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49742	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132521Z-r1755647c66qqfh4kbna50rqv400000008yg000000006r52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49744	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132521Z-r1755647c66l72xfkr6ug378ks000000076000000000448v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49747	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:21 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132521Z-17fbfdc98bb94gkbvedtsa5ef400000005zg000000001shx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49746	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:21 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132521Z-r1755647c66c9glmgg3prd89mn00000008bg00000000355t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49745	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132521Z-17fbfdc98bblptj7fr9s141cpc00000005ug0000000053sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49749	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132522Z-17fbfdc98bbvf2fnx6t6w0g25n00000005vg000000005wu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:22 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132522Z-r1755647c66sn7s9kfw6gzvyp000000008dg000000000mp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:22 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:22 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:22 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 5d0ca943-801e-0067-2ecf-20fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132522Z-r1755647c66vrwbmeqw88hpesn00000007yg0000000078m5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:22 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49751	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:22 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:22 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132522Z-17fbfdc98bbmh88pm95yr8cy5n00000004x0000000001exn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:22 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49753	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:22 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132522Z-17fbfdc98bb6q7cv86r4xdspkg00000005yg000000002syd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49755	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132523Z-17fbfdc98bb8xnvm6t4x6ec5m400000005q000000000532m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132523Z-r1755647c66fnxpdavnqahfp1w00000006f0000000005myy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:23 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132523Z-r1755647c66cdf7jx43n17haqc0000000900000000006th2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132523Z-r1755647c66sn7s9kfw6gzvyp000000008cg000000002hpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132523Z-r1755647c66ldfgxa3qp9d53us000000089g0000000053mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:23 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0658eb7f-f01e-003f-5292-1fd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132524Z-r1755647c66sxs9zhy17bg185w000000090g000000006r2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49763	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132524Z-17fbfdc98bb96dqv0e332dtg6000000005w0000000001akn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132524Z-17fbfdc98bb7qlzm4x52d2225c00000005t0000000005zaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132524Z-17fbfdc98bbcrtjhdvnfuyp2880000000600000000003bnc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49764	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132524Z-17fbfdc98bbl89flqtm21qm6rn00000005z0000000003fc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 8ae0ddcf-601e-0002-0c50-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132525Z-17fbfdc98bbcrtjhdvnfuyp28800000005z0000000004err x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132525Z-17fbfdc98bb94gkbvedtsa5ef400000005z0000000001xnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132525Z-r1755647c66xrxq4nv7upygh4s00000001tg000000004991 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132525Z-17fbfdc98bbvcvlzx1n0fduhm000000005x0000000005bbb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:25 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f2e4413f-c01e-000b-5f59-23e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132525Z-17fbfdc98bbnpjstwqrbe0re7n00000005q0000000007hgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132526Z-17fbfdc98bbl89flqtm21qm6rn00000005y0000000004m5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132526Z-17fbfdc98bbn5xh71qanksxprn00000005y0000000005dtr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132526Z-r1755647c66n5bjpba5s4mu9d000000008ag00000000460f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:26 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:26 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132526Z-r1755647c66j878m0wkraqty3800000006ug000000003wmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:26 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132526Z-17fbfdc98bbmh88pm95yr8cy5n00000004rg0000000052wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:26 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-r1755647c66prnf6k99z0m3kzc0000000890000000006q7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-r1755647c66d87vp2n0g7qt8bn00000007mg000000002dy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-17fbfdc98bb6j78ntkx6e2fx4c00000005q0000000006c3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2157dfbc-901e-0048-585d-23b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-17fbfdc98bb9dlh7es9mrdw2qc00000005r0000000004cya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:27 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-r1755647c66l72xfkr6ug378ks000000078g0000000023rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132527Z-17fbfdc98bb8xnvm6t4x6ec5m400000005n00000000074hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132528Z-r1755647c66x46wg1q56tyyk6800000007fg000000006ak2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132528Z-17fbfdc98bbvf2fnx6t6w0g25n00000005vg000000005wxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2067cf5d-601e-0001-3659-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132528Z-17fbfdc98bb94gkbvedtsa5ef400000005t0000000006nz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132528Z-17fbfdc98bbwfg2nvhsr4h37pn00000005xg000000003vrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132529Z-17fbfdc98bbn5xh71qanksxprn000000061g0000000026aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132529Z-17fbfdc98bbvf2fnx6t6w0g25n00000005vg000000005wxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 84bcad4d-101e-007a-3592-1f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132529Z-r1755647c66xn9fj09y3bhxnh40000000950000000002cwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132529Z-r1755647c66ldfgxa3qp9d53us000000087000000000784n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132529Z-r1755647c66vrwbmeqw88hpesn00000007y0000000007g7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:29 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132530Z-r1755647c66fnxpdavnqahfp1w00000006fg000000005zu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: ea73d60f-001e-0017-0292-1f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132530Z-r1755647c66cdf7jx43n17haqc0000000900000000006tuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:30 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132530Z-17fbfdc98bbcrtjhdvnfuyp28800000005vg000000006xzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:30 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132530Z-17fbfdc98bb75b2fuh11781a0n00000005r0000000005enu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:30 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:30 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bfd938fe-a01e-0070-55c0-20573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132530Z-r1755647c66kmfl29f2su56tc4000000091g000000005hpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:30 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132531Z-17fbfdc98bbnpjstwqrbe0re7n00000005ug000000003trg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132531Z-r1755647c669hnl7dkxy835cqc0000000640000000002swq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132531Z-17fbfdc98bbmh88pm95yr8cy5n00000004v0000000003cs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:31 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132531Z-r1755647c669hnl7dkxy835cqc000000063000000000454a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132531Z-r1755647c669hnl7dkxy835cqc000000064g000000002bw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132532Z-17fbfdc98bbndwgn5b4pg7s8bs00000005rg000000004qrp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132532Z-r1755647c66d87vp2n0g7qt8bn00000007k0000000004h1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132532Z-17fbfdc98bb7qlzm4x52d2225c00000005u000000000551m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:32 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132532Z-17fbfdc98bb9tt772yde9rhbm800000005x0000000002gup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132532Z-r1755647c66zs9x4962sbyaz1w00000006fg0000000061cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132533Z-r1755647c66tmf6g4720xfpwpn00000009000000000069af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132533Z-17fbfdc98bbgzrcvp7acfz2d3000000005yg000000002vpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3bea9ec9-701e-0098-2c9f-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132533Z-r1755647c66r2hg89mqr09g9w000000000m0000000004b2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:25:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132533Z-r1755647c66mgrw7zd8m1pn55000000006wg000000001at8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132533Z-r1755647c668mbb8rg8s8fbge400000005700000000039vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: db2454a4-901e-008f-72b1-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132534Z-r1755647c66ldfgxa3qp9d53us00000008b0000000004t0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132534Z-17fbfdc98bb8xnvm6t4x6ec5m400000005mg00000000733t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132534Z-17fbfdc98bblvnlh5w88rcarag00000005x0000000005gxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132534Z-r1755647c66h2wzt2z0cr0zc7400000002bg000000007fy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132534Z-17fbfdc98bbkw9phumvsc7yy8w00000005vg000000003ske x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5d978800-401e-000a-2456-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132535Z-17fbfdc98bbx648l6xmxqcmf2000000005s0000000006795 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:35 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132535Z-17fbfdc98bbndwgn5b4pg7s8bs00000005u0000000003e26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132535Z-17fbfdc98bb96dqv0e332dtg6000000005tg0000000049gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132535Z-r1755647c66nfj7t97c2qyh6zg0000000540000000005tnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132535Z-17fbfdc98bb2fzn810kvcg2zng0000000600000000003cy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:36 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:36 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132536Z-r1755647c66wjht63r8k9qqnrs00000006s0000000006mzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:36 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132536Z-17fbfdc98bbvcvlzx1n0fduhm000000005x0000000005bmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132536Z-r1755647c66sn7s9kfw6gzvyp00000000870000000007eq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:36 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132536Z-r1755647c66nfj7t97c2qyh6zg0000000560000000003me9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:36 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132536Z-r1755647c66wjht63r8k9qqnrs00000006wg000000001p7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:37 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1b20d623-a01e-0098-6292-1f8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132537Z-r1755647c66prnf6k99z0m3kzc00000008d0000000001rdx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:37 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132537Z-17fbfdc98bbvf2fnx6t6w0g25n00000005y0000000003e1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:37 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132537Z-17fbfdc98bbmh88pm95yr8cy5n00000004v0000000003cvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:37 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132537Z-r1755647c66l72xfkr6ug378ks000000072g0000000079vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:37 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132537Z-r1755647c66zkj29xnfn2r3bwn00000005gg000000002fz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:38 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132538Z-r1755647c66sxs9zhy17bg185w000000092g00000000476c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:38 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132538Z-r1755647c66r2hg89mqr09g9w000000000ng000000004cps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:38 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: b1cc7e4f-b01e-001e-6956-230214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132538Z-17fbfdc98bbqc8zsbguzmabx6800000005ug000000001ua4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132538Z-17fbfdc98bbcrtjhdvnfuyp28800000005xg000000005khf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:38 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132538Z-r1755647c66n5bjpba5s4mu9d000000008cg0000000026xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:39 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:39 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132539Z-r1755647c66nfj7t97c2qyh6zg000000051g000000007meh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:39 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:39 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:39 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 3517cc86-901e-008f-1596-1f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132539Z-r1755647c66ww2rh494kknq3r0000000091000000000602t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:39 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:39 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132539Z-17fbfdc98bbvcvlzx1n0fduhm000000005x0000000005bqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:39 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132539Z-17fbfdc98bbq2x5bzrteug30v800000005x0000000002mcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:39 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132539Z-17fbfdc98bb7k7m5sdc8baghes00000005v0000000005nfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:40 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132540Z-r1755647c66vrwbmeqw88hpesn000000085000000000099h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:40 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:40 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132540Z-r1755647c66d87vp2n0g7qt8bn00000007ng000000001qwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:40 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:40 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132540Z-17fbfdc98bbqc8zsbguzmabx6800000005rg0000000049nq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:40 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:40 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:40 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132540Z-r1755647c66j878m0wkraqty3800000006pg000000007tre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:40 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:40 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:40 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132540Z-r1755647c66sn7s9kfw6gzvyp000000008d00000000028b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:40 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:41 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: cc87dcdd-201e-003f-3dc9-206d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132541Z-r1755647c66k9st9tvd58z9dg800000008c000000000320p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:41 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:41 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132541Z-r1755647c66fnxpdavnqahfp1w00000006fg000000006030 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:41 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:41 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132541Z-r1755647c66c9glmgg3prd89mn000000087g00000000761e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:41 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:41 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132541Z-r1755647c66mgrw7zd8m1pn55000000006rg000000006fd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:41 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:41 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:41 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132541Z-17fbfdc98bbl89flqtm21qm6rn00000005v0000000006ytm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:41 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:42 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:42 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132542Z-17fbfdc98bb6q7cv86r4xdspkg000000060g0000000006u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:42 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:42 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132542Z-r1755647c66r2hg89mqr09g9w000000000q0000000002xwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:42 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: c74ac4a3-f01e-0096-7a16-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132542Z-r1755647c66n5bjpba5s4mu9d000000008a0000000004t8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:42 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:42 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: b91d5e6a-e01e-0085-2c6c-23c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132542Z-17fbfdc98bbn5xh71qanksxprn00000005wg0000000066ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:42 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:42 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:42 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: ae8fe88e-901e-005b-2456-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132542Z-17fbfdc98bb2fzn810kvcg2zng00000005zg000000004544 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:42 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 77170aa2-001e-0049-0450-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-r1755647c66xrxq4nv7upygh4s00000001t0000000004tnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:43 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 914440ca-f01e-005d-6f5a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-17fbfdc98bbgpkh7048gc3vfcc00000005w00000000069ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:43 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 51b44b3a-601e-0097-5627-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-17fbfdc98bblvnlh5w88rcarag0000000600000000003aag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 08f72666-401e-0015-30d8-210e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-17fbfdc98bb2fzn810kvcg2zng000000062g00000000091h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:43 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: afaebec0-501e-008f-263b-229054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-17fbfdc98bb9tt772yde9rhbm800000005x0000000002h4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:25:43 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:25:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:25:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: c25c349c-b01e-0070-3f5d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T132543Z-17fbfdc98bb8xnvm6t4x6ec5m400000005u0000000001dcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:25:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Target ID:	0
Start time:	09:25:02
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:25:05
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2028,i,3602675377787217397,4859431364644588706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:25:07
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicaotoface1.websiteseguro.com/no/ai/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	10:32:23
Start date:	23/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Imagebase:	0x7ff78eca0000
File size:	2'486'784 bytes
MD5 hash:	6F8EAC2C377C8F16D91CB5AC8B8DBF5F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	10:32:31
Start date:	23/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Imagebase:	0x7ff6c47c0000
File size:	274'432 bytes
MD5 hash:	6FEB00C9A2C3FF66230658B3012BAB6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://clinicaotoface1.websiteseguro.com/no/ai/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\75EFBBD4-7730-44A5-9629-A83DDE4C5BBC

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6996, Parent PID: 6916

General

Chronological Activities

Analysis Process: chrome.exePID: 6332, Parent PID: 6996

Windows Analysis Report
https://clinicaotoface1.websiteseguro.com/no/ai/