Edit tour

Windows Analysis Report
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfe

Overview

General Information

Sample URL:	https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-
Analysis ID:	1541062
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Very long command line found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2196,i,17227430046646712005,2420801444140375319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveContent-Length: 0Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Origin: https://links.us1.defend.egress.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=PnKVp8NRyW3gsBOqZaO2vpgpO

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 09:18:04 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=pe/H+q2MUMYnPvUeHW1k5rGZeMsSnQ/ubUKh/tuEqMtqK22DZWvZmk1BQSzqL2V0xs3oiKsKAhwnOaFgdk+APGbBJH/Qo8ZY9nRV5e5O0yeHu012g1GdUkbvs2NB; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/Set-Cookie: AWSALBCORS=pe/H+q2MUMYnPvUeHW1k5rGZeMsSnQ/ubUKh/tuEqMtqK22DZWvZmk1BQSzqL2V0xs3oiKsKAhwnOaFgdk+APGbBJH/Qo8ZY9nRV5e5O0yeHu012g1GdUkbvs2NB; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/; SameSite=None; SecureCache-Control: no-cache, no-store, max-age=0Pragma: no-cacheX-Robots-Tag: noindexX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: same-originX-Content-Type-Options: nosniffContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none'Strict-Transport-Security: max-age=2592000; preloadblazor-enhanced-nav: allow

Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51600
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.7:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.7:49865 version: TLS 1.2

Source: unknown

Process created: Commandline size = 2058

Source: classification engine

Classification label: clean1.win@16/22@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2196,i,17227430046646712005,2420801444140375319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2196,i,17227430046646712005,2420801444140375319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.37	true	false	unknown
links.us1.defend.egress.com	75.2.120.244	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://links.us1.defend.egress.com/_blazor/initializers	false	unknown
https://links.us1.defend.egress.com/_blazor?id=P4t2-W12MkpVBqka3FOdOA	false	unknown
https://links.us1.defend.egress.com/_framework/blazor.server.js	false	unknown
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488888	false	unknown
https://links.us1.defend.egress.com/images/egress-icon.png	false	unknown
https://links.us1.defend.egress.com/_blazor/negotiate?negotiateVersion=1	false	unknown
https://links.us1.defend.egress.com/_framework/blazor.polyfill.min.js	false	unknown
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA	false	unknown
https://links.us1.defend.egress.com/css/site.css	false	unknown
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761489761	false	unknown
https://links.us1.defend.egress.com/images/egress-logo-dark.svg	false	unknown
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488026	false	unknown
https://links.us1.defend.egress.com/~/js/JsInteropFuncions.js	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
75.2.120.244	links.us1.defend.egress.com	United States	16509	AMAZON-02US	false
99.83.228.139	unknown	United States	16509	AMAZON-02US	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541062
Start date and time:	2024-10-24 11:16:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/22@6/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.184.206, 142.250.110.84, 34.104.35.123, 142.250.186.42, 142.250.184.195, 4.175.87.197, 217.20.57.37, 52.165.164.15, 20.3.187.198, 199.232.214.172, 142.250.185.195
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, 7.4.8.4.4.3.1.4.0.0.0.0.0.0.0.0.0.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, clientservices.googleapis.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaE

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	29277
Entropy (8bit):	3.7985237958721045
Encrypted:	false
SSDEEP:	384:0sIO2wPIZRGV1psAr4WP6hARX5CcfjrF2OFHdjSlU34zkyBF99otuZXLdqDn:LM8GAX6Q5CcfPF2OylU3mo8G
MD5:	D4DF3E6C8CEF1295CE0B42D46112FB9C
SHA1:	D55207E3A0A0C159AE720B1B6DF7A46614C99A3F
SHA-256:	7862B224E2B1AF20DE0354B6FD530A79D57C8C9856BD5E5091A2234D233E8C99
SHA-512:	537E989AD02093B62EEF3D3DC4212F57E64D63E431734FC908641F0955E76135AC17F4ACE72F236F73FFB3F2F839B04CA24BF4A5B82989265937A2AC72B3F07A
Malicious:	false
Reputation:	low
Preview:	<svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/>.<path d="M25.1304 17.2673C24.8113 19.2444 23.8882 21.0756 22.4879 22.507C21.0877 23.9395 19.2777 24.9029 17.3086 25.2663C15.3386 25.6297 13.3051 25.374 11.4851 24.5365C9.66602 23.6979 8.15099 22.3178 7.14734 20.5843C6.14369 18.8508 5.70076 16.8496 5.87995 14.8544C6.05913 12.8591 6.85037 10.9686 8.14696 9.44151C9.44254 7.9144 11.18 6.82518 13.1189 6.32386C15.0587 5.82254 17.1053 5.93328 18.9787 6.64197L21.2286 2.73812C18.4965 1.54522 15.4584 1.24523 12.5461 1.88044C9.63381 2.51564 6.99634 4.05484 5.01019 6.27756C3.02403 8.50028 1.79087 11.2938 1.48585 14.2594C1.18083 17.2251 1.82006 20.2108 3.31194 22.7909C4.80382 25.372 7.07285 27.4155 9.79488 28.6306C12.5169 29.8456 15.553 30.1708 18.4703 29.5587C21.3876 28.9467 24.0372 27.4286 26.0415 25.222C28.0457 23.0154 29.3011 20.232

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2397
Entropy (8bit):	4.394669784185688
Encrypted:	false
SSDEEP:	48:U9Jxw3tMa8zXAld5TODjyrr9lSPsx5k3i9TOr36:emtManJlSP0Ky9036
MD5:	44D6688FE873BE9D6FDC0E36A4ED5F81
SHA1:	0878322986B3782BB6FCEE75D0F7FD2D34271F0A
SHA-256:	8B41F523CC9870BF36BE7927991B7A2694E4C9F24414A16F1AA27F6A8CE1FC35
SHA-512:	C2CFF9BB648EA7486C0A557CD280BC242E284494373A187E13826D303F0C6340529CBA12C46F24B786177E544184F870A723A8E0994955233032D59F651CA887
Malicious:	false
Reputation:	low
Preview:	window._import_ = function (fileName, webRootPath) {.... if (webRootPath === undefined \|\| webRootPath === null) {.. webRootPath = "";.. }.... function pathJoin(path1, path2) {.... if (path1 === null \|\| path1 === undefined) {.. path1 = "";.. }.... if (path2 === null \|\| path2 === undefined) {.. path2 = "";.. }.... var needTrail = true;.. var path1hasTrail = false;.. var path2hasTrail = false;.... if (path1.length - 1 >= 0 && (path1[path1.length - 1] == '/' \|\| path1[path1.length - 1] == '\\')) {.. needTrail = false;.. path1hasTrail = true;.. }.... if (path2.length > 0 && (path2[0] == '/' \|\| path2[0] == '\\')) {.. needTrail = false;.. path2hasTrail = true;.. }.... if (needTrail) {.. return path1 + "/" + path2;.. }.. else {.. if (path1hasTrail && path2hasTrail) {.. return path1

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4436
Entropy (8bit):	7.938245236923043
Encrypted:	false
SSDEEP:	96:Uj7HJEkeQ5WLhvF8emLU+o5NuG6JUykFpXbWWXwq:q7CrT5Fh5vwkFpLWWH
MD5:	BA7B93D7ECE6F1407BC67CC6E57F2016
SHA1:	4B22E6295FF29816BD0C0EA979881185F38F57C8
SHA-256:	D54D44A63E776FD34431F2E24D3D2A16156DD509CB4657FE747B6D1346BE6424
SHA-512:	110313FC8E53C5D62D0056AC4ECB1F833E6AE9DFD297F280BB39A52128A92DC302142E3CA5908E4507E547C19B41EAC04FDEF655C66ADA754C9B0DA97BB82529
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/images/egress-icon.png
Preview:	.PNG........IHDR...t...t.....T..'....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...Tu....{gWp..D.y,.("..D=)..B....vf...:....2;.....3. .R.D-.gd.Y.[.3.+IY........{.+..kv...3.sg~..pv.........J ..%#?......O..9.$.....!!..D.\|..I\.}...4.$..HZ.)1.....-.'..M.(g.H...q..3..^.k.y..?q...........~.L.....{...x3.qq...R...j".!...4.>..q..`....=h..3Q\|.A.x.<]E......3.I....".s..!X.66.AR^.k.R.;......`.....;...H.(.\|...o u..,+ l..4..T.W..TJA.-..n..)n.'R.>.R.....a...Q.S....)z4.RK9\|....m.%3...,.Q.H.a....U:..FP.'k._.u-.Q...YI..y......l.LB..[MW.J..rb.]..t`0.7..s.0.V..@..D1.orhj.......+Rid..D..mW.@._.;.....x....b..#..T..+....2.#.....k(.=..J......dv&.......,..$.b2z.m.\|..\|....G..c..c/.T`q/hC.T...U.8..$sW);..Cy.OX....8..f..o..<1.?.._\|......%.E}8.....q^..)/...MUZV6.E.b[...+^.d....{X5.....Wx..../3.2...~.P...C..)....i\<.3.W...).Ll.._..m..n.D...90....8.(.WX.....6..&K>L.......&.f!...).F...J...*...D..b..)....!T.mV.~...N4..X..gr....2JD.)YKs.4J:.rof$..a].k.(.U..../C...`m

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3664
Entropy (8bit):	4.78089961431119
Encrypted:	false
SSDEEP:	96:NfHur1Au1dyQ18VA94hJL3Qk9JUqh22b3:QryyQVA94rgk9JUqh203
MD5:	68B16274AE2C036DC0204120AF59EB47
SHA1:	965F7B1C9CC792E194E5BA0F3A587065483B636F
SHA-256:	C8E7F8730BF9DF98C746782E0AEA2FC60E4A5DC1041F455BA750E7D47442D974
SHA-512:	D1A6290D81A7EE72A6AC719DC7F9FE7AD4E515C7E9FADFEED3B42F76DBD49554A61318A00D57337330F9BBA20B1B8718CFBF58EF917FDAA6B42A5EB217A0F6B8
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/css/site.css
Preview:	@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: bold;. src: url('/fonts/AvenirLTStd-Book_0.otf') format('truetype');.}..@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: light;. src: url('/fonts/AvenirLTStd-Light_0.otf') format('truetype');.}..@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: normal;. src: url('/fonts/AvenirLTStd-Medium_0.otf') format('truetype');.}..html, body {. height: 100%;.}..html, body, dialog {. margin: 0;. font-weight: 100;. font-family: 'Rubik', sans-serif;.}..body, dialog {. background-color: white;.}..h2 {. font-family: 'Avenir', sans-serif;. font-weight: bold;. font-size: 1.8em;. margin-top: 0;.}..h1 {. font-size: 2.2em;. font-family: 'Avenir', sans-serif;. font-weight: bold;. margin-top: 0;. margin-bottom: 10px;.}..b {. font-weight: 500;.}...ajax-background {. position: relative;. z-index: 1;. height:

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2397
Entropy (8bit):	4.394669784185688
Encrypted:	false
SSDEEP:	48:U9Jxw3tMa8zXAld5TODjyrr9lSPsx5k3i9TOr36:emtManJlSP0Ky9036
MD5:	44D6688FE873BE9D6FDC0E36A4ED5F81
SHA1:	0878322986B3782BB6FCEE75D0F7FD2D34271F0A
SHA-256:	8B41F523CC9870BF36BE7927991B7A2694E4C9F24414A16F1AA27F6A8CE1FC35
SHA-512:	C2CFF9BB648EA7486C0A557CD280BC242E284494373A187E13826D303F0C6340529CBA12C46F24B786177E544184F870A723A8E0994955233032D59F651CA887
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_framework/blazor.polyfill.min.js
Preview:	window._import_ = function (fileName, webRootPath) {.... if (webRootPath === undefined \|\| webRootPath === null) {.. webRootPath = "";.. }.... function pathJoin(path1, path2) {.... if (path1 === null \|\| path1 === undefined) {.. path1 = "";.. }.... if (path2 === null \|\| path2 === undefined) {.. path2 = "";.. }.... var needTrail = true;.. var path1hasTrail = false;.. var path2hasTrail = false;.... if (path1.length - 1 >= 0 && (path1[path1.length - 1] == '/' \|\| path1[path1.length - 1] == '\\')) {.. needTrail = false;.. path1hasTrail = true;.. }.... if (path2.length > 0 && (path2[0] == '/' \|\| path2[0] == '\\')) {.. needTrail = false;.. path2hasTrail = true;.. }.... if (needTrail) {.. return path1 + "/" + path2;.. }.. else {.. if (path1hasTrail && path2hasTrail) {.. return path1

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17955
Entropy (8bit):	5.419940730561262
Encrypted:	false
SSDEEP:	384:yigCiTiIiCni8izinvdgCvCvsvwnvOvnvDBBzBdBmBheBcBLBD5fUH2QieLOeD4o:RMerX/+vdVoCYUvDBBBdBmB0BcBLBDBo
MD5:	D0E8BE7875CFA295CF700BC847FF71D7
SHA1:	41C4387CFF6D50652E9DE16E93270B4B76674630
SHA-256:	EF4DF1063408E9CD432CBEB44713C154305C5508F9291D917348C904E11C1FCA
SHA-512:	517C50F77C2B32FF2232FF375F185694271B74B89E18A7132B6FD9452A5D434BC4E0EC6ED09EF31A7C97EC23E730284EC7E6D9BF8B3EDD993C36DAD4ABCC3F04
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:regular,bold,italic,thin,light,bolditalic,black,medium&lang=en"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4436
Entropy (8bit):	7.938245236923043
Encrypted:	false
SSDEEP:	96:Uj7HJEkeQ5WLhvF8emLU+o5NuG6JUykFpXbWWXwq:q7CrT5Fh5vwkFpLWWH
MD5:	BA7B93D7ECE6F1407BC67CC6E57F2016
SHA1:	4B22E6295FF29816BD0C0EA979881185F38F57C8
SHA-256:	D54D44A63E776FD34431F2E24D3D2A16156DD509CB4657FE747B6D1346BE6424
SHA-512:	110313FC8E53C5D62D0056AC4ECB1F833E6AE9DFD297F280BB39A52128A92DC302142E3CA5908E4507E547C19B41EAC04FDEF655C66ADA754C9B0DA97BB82529
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t...t.....T..'....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...Tu....{gWp..D.y,.("..D=)..B....vf...:....2;.....3. .R.D-.gd.Y.[.3.+IY........{.+..kv...3.sg~..pv.........J ..%#?......O..9.$.....!!..D.\|..I\.}...4.$..HZ.)1.....-.'..M.(g.H...q..3..^.k.y..?q...........~.L.....{...x3.qq...R...j".!...4.>..q..`....=h..3Q\|.A.x.<]E......3.I....".s..!X.66.AR^.k.R.;......`.....;...H.(.\|...o u..,+ l..4..T.W..TJA.-..n..)n.'R.>.R.....a...Q.S....)z4.RK9\|....m.%3...,.Q.H.a....U:..FP.'k._.u-.Q...YI..y......l.LB..[MW.J..rb.]..t`0.7..s.0.V..@..D1.orhj.......+Rid..D..mW.@._.;.....x....b..#..T..+....2.#.....k(.=..J......dv&.......,..$.b2z.m.\|..\|....G..c..c/.T`q/hC.T...U.8..$sW);..Cy.OX....8..f..o..<1.?.._\|......%.E}8.....q^..)/...MUZV6.E.b[...+^.d....{X5.....Wx..../3.2...~.P...C..)....i\<.3.W...).Ll.._..m..n.D...90....8.(.WX.....6..&K>L.......&.f!...).F...J...*...D..b..)....!T.mV.~...N4..X..gr....2JD.)YKs.4J:.rof$..a].k.(.U..../C...`m

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	151912
Entropy (8bit):	5.1882559662525995
Encrypted:	false
SSDEEP:	1536:n21RuMu7+oiEJGLn9w1oGFHrHZS4J8JGaPQFPFmCtYp1/VXfD7iT4/M/N0pM0n5p:n21YCBj9w1jNSDGaYmvD7i8/M/N0pM0r
MD5:	51DE1D3DC51F8CED520D5B4A31D9ED18
SHA1:	8FFBED955848F2FFEA910B3F334E854A40946083
SHA-256:	DB00716B5D1623CCE10CEE50974794047B1C1B624C47ABEE9B5CB972BFC5D8C9
SHA-512:	87B16B8BFC5FE98FEBEDF7400BD30074EC1124813FB3BDFAC8867194F47467E5870C2396780320D4F09AADA6E282E6B1A64AE33574B709A726344E37076BE14F
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,r;!function(e){const t=[],n="__jsObjectId",r="__dotNetObject",o="__byte[]",s="__dotNetStream",i="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,r=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in r))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=r,r=r[t]})),r instanceof Function)return r=r.bind(n),this._cachedFunctions.set(e,r),r;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151912
Entropy (8bit):	5.1882559662525995
Encrypted:	false
SSDEEP:	1536:n21RuMu7+oiEJGLn9w1oGFHrHZS4J8JGaPQFPFmCtYp1/VXfD7iT4/M/N0pM0n5p:n21YCBj9w1jNSDGaYmvD7i8/M/N0pM0r
MD5:	51DE1D3DC51F8CED520D5B4A31D9ED18
SHA1:	8FFBED955848F2FFEA910B3F334E854A40946083
SHA-256:	DB00716B5D1623CCE10CEE50974794047B1C1B624C47ABEE9B5CB972BFC5D8C9
SHA-512:	87B16B8BFC5FE98FEBEDF7400BD30074EC1124813FB3BDFAC8867194F47467E5870C2396780320D4F09AADA6E282E6B1A64AE33574B709A726344E37076BE14F
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_framework/blazor.server.js
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,r;!function(e){const t=[],n="__jsObjectId",r="__dotNetObject",o="__byte[]",s="__dotNetStream",i="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,r=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in r))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=r,r=r[t]})),r instanceof Function)return r=r.bind(n),this._cachedFunctions.set(e,r),r;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	29277
Entropy (8bit):	3.7985237958721045
Encrypted:	false
SSDEEP:	384:0sIO2wPIZRGV1psAr4WP6hARX5CcfjrF2OFHdjSlU34zkyBF99otuZXLdqDn:LM8GAX6Q5CcfPF2OylU3mo8G
MD5:	D4DF3E6C8CEF1295CE0B42D46112FB9C
SHA1:	D55207E3A0A0C159AE720B1B6DF7A46614C99A3F
SHA-256:	7862B224E2B1AF20DE0354B6FD530A79D57C8C9856BD5E5091A2234D233E8C99
SHA-512:	537E989AD02093B62EEF3D3DC4212F57E64D63E431734FC908641F0955E76135AC17F4ACE72F236F73FFB3F2F839B04CA24BF4A5B82989265937A2AC72B3F07A
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/images/egress-logo-dark.svg
Preview:	<svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/>.<path d="M25.1304 17.2673C24.8113 19.2444 23.8882 21.0756 22.4879 22.507C21.0877 23.9395 19.2777 24.9029 17.3086 25.2663C15.3386 25.6297 13.3051 25.374 11.4851 24.5365C9.66602 23.6979 8.15099 22.3178 7.14734 20.5843C6.14369 18.8508 5.70076 16.8496 5.87995 14.8544C6.05913 12.8591 6.85037 10.9686 8.14696 9.44151C9.44254 7.9144 11.18 6.82518 13.1189 6.32386C15.0587 5.82254 17.1053 5.93328 18.9787 6.64197L21.2286 2.73812C18.4965 1.54522 15.4584 1.24523 12.5461 1.88044C9.63381 2.51564 6.99634 4.05484 5.01019 6.27756C3.02403 8.50028 1.79087 11.2938 1.48585 14.2594C1.18083 17.2251 1.82006 20.2108 3.31194 22.7909C4.80382 25.372 7.07285 27.4155 9.79488 28.6306C12.5169 29.8456 15.553 30.1708 18.4703 29.5587C21.3876 28.9467 24.0372 27.4286 26.0415 25.222C28.0457 23.0154 29.3011 20.232

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_blazor/initializers
Preview:	[]

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	534
Entropy (8bit):	4.6940603465853235
Encrypted:	false
SSDEEP:	12:TA3VVIE43ilINGlTF5TF5TF5TF5TF5TFK:MFH487TPTPTPTPTPTc
MD5:	8D1D051E58C7E7FCB6DA50F32355E121
SHA1:	E84DADFEB1F88DBB5E9856BED73CB7D2DAE68697
SHA-256:	013D6BB198A9ECD19E2B74F7B8994FE802CB49DE27B46F731D827B344D4B9DB9
SHA-512:	7C23E13B1296D001FA13703F3136AA33633E83E45CCDCFAD76098ADA5B4DA2F1FBF6AE93CA69E87F8B8F81D0ED19D75E8A9EA376322BF2CCACF9BF5E947823F9
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>504 Gateway Time-out</title></head>..<body>..<center><h1>504 Gateway Time-out</h1></center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 11:17:54.449948072 CEST	443	49699	104.98.116.138	192.168.2.7
Oct 24, 2024 11:17:54.450125933 CEST	49699	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:17:54.480437040 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:17:54.855063915 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:17:55.151911974 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:17:55.151937008 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:17:55.276911974 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 24, 2024 11:17:55.292514086 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:17:55.605040073 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:17:57.103653908 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:18:00.120842934 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:18:01.858993053 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:01.859029055 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:01.859091043 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:01.859338045 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:01.859349966 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.288727045 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.288759947 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.288836002 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.289365053 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.289392948 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.289423943 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.289438009 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.289463043 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.289782047 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.289797068 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.626178026 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.626264095 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.637059927 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.637079000 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.637506008 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.647640944 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.695331097 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.895929098 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.895991087 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.896034956 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.896076918 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.896111965 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:02.896136999 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.896173954 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:02.970974922 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.971219063 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.971231937 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.971404076 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.971612930 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.971625090 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.972099066 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.972162008 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.972695112 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.972784042 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.974983931 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.975045919 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.975478888 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.975487947 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:02.976907969 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:02.977005005 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.011751890 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.011811018 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.011873007 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.011889935 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.011929035 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.011951923 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.122503996 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.122514963 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.122576952 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.127298117 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.127399921 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.127399921 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.127432108 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.127475023 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.127517939 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.169182062 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.169202089 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.169310093 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.169325113 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.169405937 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.172267914 CEST	49706	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.172285080 CEST	443	49706	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.222163916 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.238610029 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.238634109 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.238734007 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.239576101 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.239636898 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.239743948 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.240114927 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.240124941 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.240258932 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.242316008 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.242338896 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.242476940 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.242616892 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.242696047 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.242839098 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.242899895 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.242948055 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.242964029 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.243030071 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.243527889 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.243542910 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.243741035 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.243788004 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.243875027 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.243885994 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.244031906 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.244064093 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.358262062 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.358335972 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.358371973 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.358381987 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.358453035 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.425683975 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.425739050 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.425802946 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.425813913 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.425884008 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.425916910 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.426086903 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.428822994 CEST	49707	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.428838968 CEST	443	49707	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.473273039 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.473351002 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.473387957 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.473403931 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.473459005 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.588824987 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.588886976 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.588933945 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.588960886 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.589008093 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.589037895 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.704149008 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.704181910 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.704339027 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.704339027 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.704360962 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.704550028 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.819597960 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.819628954 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.819761992 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.819776058 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.819852114 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.901568890 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.901597977 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.901696920 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.901709080 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.902651072 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.902700901 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.916501045 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.916532040 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.916585922 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.916906118 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.917025089 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.917047024 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.918102980 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.918164015 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.918634892 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.918715000 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.918816090 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.918842077 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.919544935 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.919661045 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.920017958 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.920033932 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.922250032 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.922699928 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.922708035 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.923120022 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.923865080 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.923938990 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.924360991 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.924388885 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.925457954 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.925720930 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.925729990 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.929078102 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.929145098 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.930274963 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.930443048 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.930860996 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.930876017 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:03.964605093 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.979839087 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.979871988 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:03.979891062 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.979933977 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:03.979945898 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:03.980091095 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.051301003 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.051369905 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.051491022 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.051501036 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.051595926 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.051595926 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.099889994 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.099920988 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.099987984 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.100014925 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.100111008 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.116044044 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.116065979 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.116158009 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.116175890 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.117177963 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.120887995 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.138762951 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.138813019 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.138875961 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.138885021 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.139018059 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.172362089 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.172482014 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.172488928 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.172522068 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.172585964 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.176546097 CEST	49709	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.176579952 CEST	443	49709	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.180747032 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.180747032 CEST	49705	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.180761099 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.180772066 CEST	443	49705	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.223004103 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224101067 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224158049 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224179983 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224200010 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224212885 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.224225998 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.224286079 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.242489100 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242558002 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242602110 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242623091 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242643118 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242672920 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.242695093 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.242713928 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.242763042 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.339709997 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.339762926 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.339860916 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.339881897 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.339932919 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.339941978 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.342571020 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.362993956 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.363056898 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.363157988 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.363189936 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.363302946 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.363334894 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.397543907 CEST	49708	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.397567034 CEST	443	49708	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.414122105 CEST	49710	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.414139032 CEST	443	49710	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.439222097 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.439244032 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.439342976 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.439712048 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.439759970 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.439927101 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.440630913 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.440646887 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.441746950 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.441776991 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.443839073 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.443845987 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.443914890 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.444036961 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.444048882 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.446273088 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.446295023 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.446475029 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.447072029 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.447101116 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.447202921 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.447356939 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.447370052 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.448327065 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:04.448359013 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:04.479748011 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.479826927 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.479842901 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.479859114 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.479899883 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.479934931 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.480365038 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.480374098 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:04.480473042 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.480628967 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.480664015 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:04.480732918 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.481055021 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.481065035 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:04.481292009 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:04.481313944 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:04.584430933 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:04.584464073 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:04.584563017 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:04.584785938 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:04.584808111 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:04.598606110 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.598676920 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.598716021 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.598733902 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.598778963 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.598804951 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.600461006 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.600507975 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.600548983 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.600553036 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.600608110 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.718765020 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.718832970 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.718907118 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.718930960 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.718971014 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.718993902 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.762940884 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:04.762948036 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:04.836724997 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.836760998 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.836818933 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.836841106 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.836905003 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.887846947 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 24, 2024 11:18:04.903198957 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:04.955569983 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.955645084 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.955688000 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.955713034 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.955749989 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.955773115 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:04.956397057 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:04.956475973 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.074275970 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.074341059 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.074404001 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.074426889 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.074480057 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.074486017 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.074582100 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.074651003 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.075359106 CEST	49711	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.075371981 CEST	443	49711	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.084287882 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.084343910 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.084423065 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.088130951 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.088156939 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.090035915 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.090069056 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.090183020 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.091788054 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.091806889 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.100353003 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.100442886 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.100662947 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.100974083 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.101005077 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.134936094 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.135371923 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.135401011 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.136401892 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.136509895 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.136914015 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.136970043 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.137109995 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.142791033 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.143019915 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.143050909 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.143915892 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.143987894 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.144519091 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.144706964 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.144814014 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.144821882 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.179341078 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.182919979 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.182943106 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.184437037 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.197148085 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.197897911 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.197935104 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.198494911 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.198580027 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.198590994 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.198863029 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.198899984 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.200210094 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.200223923 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.209834099 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.210230112 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.210247993 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.210628986 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.210634947 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.217737913 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.218076944 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.218105078 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.218471050 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.218482018 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.230779886 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.248497009 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.249033928 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.249058008 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.249465942 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.249475956 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.322479010 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.322518110 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.322581053 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.322628021 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.322643995 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.322715998 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.323606968 CEST	49723	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.323648930 CEST	443	49723	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.334903002 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.335073948 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.335148096 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.335418940 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.335438967 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.335454941 CEST	49716	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.335463047 CEST	443	49716	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.338987112 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.339013100 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.339122057 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.339123011 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.339189053 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.365293980 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.365317106 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.365344048 CEST	49717	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.365358114 CEST	443	49717	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.366269112 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.366324902 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.366405964 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.367192984 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.367208958 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.368807077 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.368844032 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.368911028 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.369174957 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.369188070 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.372390032 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.372416973 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.372461081 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.372509956 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.372546911 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.372757912 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.372777939 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.372797012 CEST	49718	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.372803926 CEST	443	49718	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.375071049 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.375638962 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.375741959 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.376570940 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.376590967 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.376604080 CEST	49720	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.376610041 CEST	443	49720	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.379415989 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.379431009 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.379519939 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.379812956 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.379825115 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.380428076 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.380436897 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.381210089 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.381325960 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.381339073 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.388377905 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.388425112 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.388499022 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.388523102 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.388582945 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.391349077 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.391349077 CEST	49719	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.391390085 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.391427040 CEST	443	49719	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.397314072 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.397352934 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.397469997 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.397912979 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:05.397927999 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:05.449445963 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449496031 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449537992 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449559927 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449579954 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449615002 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.449630976 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.449790955 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.451596022 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:05.454133987 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:05.454164028 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:05.455276012 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:05.455365896 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:05.456401110 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:05.456521034 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:05.511245966 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:05.511269093 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:05.558294058 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:05.566354990 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.566422939 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.566446066 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.566472054 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.566528082 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.567070007 CEST	49722	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.567086935 CEST	443	49722	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.580632925 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:05.580672979 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:05.583128929 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:05.584849119 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:05.584860086 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:05.758398056 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.759037971 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.759072065 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.760246038 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.762959957 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.763159990 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.763202906 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.763267040 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.764441013 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.764925957 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.764955044 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.768266916 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.768373013 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.768764019 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.768851995 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.768919945 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.782609940 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.786815882 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.786828041 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.788013935 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.788532019 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.788583040 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.788698912 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.811331987 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.811342001 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.811356068 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.811356068 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.842762947 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.858359098 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.945905924 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.946170092 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.946403027 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.953394890 CEST	49726	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.953413963 CEST	443	49726	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.963737965 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.963767052 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.963841915 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.964365959 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.964384079 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.965966940 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.965996027 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.966053009 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.966280937 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:05.966298103 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:05.973927975 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.973979950 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.974005938 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.974127054 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.974127054 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:05.974127054 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.974189043 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.976938963 CEST	49727	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:05.976954937 CEST	443	49727	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.011476994 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.011499882 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.011571884 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.011861086 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.011873960 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.072927952 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:18:06.075781107 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075849056 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075872898 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075915098 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075937986 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075954914 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.075969934 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.075994015 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.076005936 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.076028109 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.076056004 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.128681898 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.130980015 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.131004095 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.131813049 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.131818056 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.133635998 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.134970903 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.134994984 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.139054060 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.139074087 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.141755104 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.143304110 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.143325090 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.143898010 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.143903971 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.154625893 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.155878067 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.155896902 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.156287909 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.156651020 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.156656981 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.157438993 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.157454967 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.158349991 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.158355951 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.194936991 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.194997072 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.195014000 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.195033073 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.195060968 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.195072889 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.195137024 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.246036053 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.267673016 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.267755985 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.267807961 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.270169973 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.270180941 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.270193100 CEST	49729	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.270198107 CEST	443	49729	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.273320913 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.274262905 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.274313927 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.275129080 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.275158882 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.275173903 CEST	49728	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.275185108 CEST	443	49728	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.279654980 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.280642033 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.280698061 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.283159971 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.283160925 CEST	49730	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.283193111 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.283207893 CEST	443	49730	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.286820889 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.286847115 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.286901951 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.289143085 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.289165020 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291309118 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291680098 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291713953 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.291728973 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.291755915 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.291769981 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291783094 CEST	49732	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.291790009 CEST	443	49732	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291805029 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.291883945 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.296902895 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.297211885 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.297264099 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.297795057 CEST	49731	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.297801971 CEST	443	49731	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.298521996 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.298554897 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.298618078 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.298882961 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.298901081 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.300960064 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.300997972 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.303002119 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.303021908 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.303081036 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.303258896 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.303277969 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.309262991 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.309286118 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.309345961 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.314481974 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.314491987 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.314510107 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.314546108 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.314559937 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.314573050 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.314603090 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.314630032 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.315335989 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:06.315350056 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:06.431726933 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:06.431888103 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:06.433595896 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.433617115 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.433717012 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.433748007 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.433792114 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.552881956 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.552901983 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.553015947 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.553040028 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.553090096 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.553256989 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.553328991 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.621772051 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.643414021 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.672514915 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.672534943 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.672662020 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.672697067 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.672741890 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.673497915 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:06.680107117 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.689482927 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.720493078 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.787149906 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:06.787173986 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:06.787535906 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:06.791394949 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.791421890 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.791511059 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.791544914 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.791591883 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.834264994 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:06.910512924 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.910535097 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.910625935 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.910660028 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.910728931 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.926548958 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:06.926588058 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.928134918 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.930082083 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.930114031 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.930198908 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.930217028 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.930723906 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.930854082 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.933906078 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:06.934214115 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.934349060 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.934465885 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.939917088 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.940028906 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.940342903 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:06.940417051 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:06.947274923 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.947362900 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.955816031 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.955836058 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.955910921 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.955941916 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.955991030 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.956285954 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.956337929 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.956345081 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.956366062 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.956396103 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.956424952 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:06.987365961 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:06.995327950 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.022794008 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.023804903 CEST	49725	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.023833990 CEST	443	49725	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.044661999 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.060165882 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.062036037 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.067337990 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.068651915 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.069438934 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.072567940 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.072593927 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.073549032 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.073554993 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.074569941 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.074593067 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.075265884 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.075294971 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.076056957 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.076086998 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.076487064 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.076493979 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.078052044 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.078071117 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.078722954 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.078730106 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.084187031 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.084223032 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.085007906 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.085020065 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.124464989 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.124671936 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.124959946 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.129543066 CEST	49735	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.129575014 CEST	443	49735	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.131978035 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132004976 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132065058 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.132080078 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132114887 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132186890 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132227898 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.132479906 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.132548094 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.137789965 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.137815952 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.137948036 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.138783932 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.138794899 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.162214994 CEST	49737	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.162237883 CEST	443	49737	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.165874004 CEST	49736	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.165900946 CEST	443	49736	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.206298113 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.206440926 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.206496000 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.208605051 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.208678007 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.208734989 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.209728003 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.210076094 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.211227894 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.213375092 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.213442087 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.213602066 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.223360062 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.223416090 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.223783970 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.227020025 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.227032900 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.227044106 CEST	49742	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.227051020 CEST	443	49742	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.227252007 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.227276087 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.227334976 CEST	49741	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.227344990 CEST	443	49741	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.228795052 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.228795052 CEST	49738	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.228810072 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.228828907 CEST	443	49738	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.229232073 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.229232073 CEST	49739	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.229252100 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.229265928 CEST	443	49739	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.230668068 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.230674982 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.230688095 CEST	49740	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.230693102 CEST	443	49740	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.249280930 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.249315977 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.249392033 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.252789974 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.252819061 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.252933979 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.263695955 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.263864994 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.263926029 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.284437895 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.284461021 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.287470102 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.287492037 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.300652027 CEST	49733	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.300668001 CEST	443	49733	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.357088089 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.357131958 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.357202053 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.360271931 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.360300064 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.360466957 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.363197088 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.363214970 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.363595963 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.363611937 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.364177942 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.364216089 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.364432096 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.364640951 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:07.364661932 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:07.414367914 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.414416075 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.414488077 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.414993048 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:07.415009022 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:07.446763992 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.446806908 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.447132111 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.447547913 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:07.447567940 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:07.804220915 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.804512024 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.804529905 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.804879904 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.805315018 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.805383921 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.805708885 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.851330042 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.994867086 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.994951010 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.995054007 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.995208979 CEST	49743	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.995225906 CEST	443	49743	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.999006987 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.999041080 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:07.999115944 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.999938965 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:07.999950886 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.037326097 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.037821054 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.037862062 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.038316011 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.038322926 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.046134949 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.046717882 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.046741962 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.047239065 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.047245979 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.114706993 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.115000963 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.115020037 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.115519047 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.115935087 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.116024971 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.116127014 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.122328043 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.122993946 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.123003960 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.123016119 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.123470068 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.123492002 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.123500109 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.123505116 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.123940945 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.123954058 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.133683920 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.134138107 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.134154081 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.134447098 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.134453058 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.163327932 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.174699068 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.174803019 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.174925089 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.174994946 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.175010920 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.175026894 CEST	49744	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.175034046 CEST	443	49744	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.177474976 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.177508116 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.177577972 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.177736998 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.177757025 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.183284044 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.183389902 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.183540106 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.183572054 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.183572054 CEST	49745	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.183584929 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.183593035 CEST	443	49745	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.185333014 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.185380936 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.185513020 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.185626030 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.185642004 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.259427071 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.259565115 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.259617090 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.259696007 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.259710073 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.259721041 CEST	49746	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.259726048 CEST	443	49746	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.261415958 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.261647940 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.261749983 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.263015032 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.263025045 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.263037920 CEST	49747	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.263042927 CEST	443	49747	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.263571978 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.263602018 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.263763905 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.264056921 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.264079094 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.265316010 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.265361071 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.265592098 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.265727997 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.265743971 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.270406961 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.270498991 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.271253109 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.271454096 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.271519899 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.271576881 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.271576881 CEST	49748	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.271589041 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.271601915 CEST	443	49748	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.271904945 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.271910906 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.272252083 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.273508072 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.273525953 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.273566961 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.273638964 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.273829937 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.273839951 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.303811073 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.303905010 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.304076910 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.304836035 CEST	49751	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.304862022 CEST	443	49751	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.319324017 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.522131920 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.522238016 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.522352934 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.523088932 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.523088932 CEST	49749	443	192.168.2.7	184.28.90.27
Oct 24, 2024 11:18:08.523109913 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.523119926 CEST	443	49749	184.28.90.27	192.168.2.7
Oct 24, 2024 11:18:08.664072037 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.664355993 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.664381027 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.664868116 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.665388107 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.665388107 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.665425062 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.665486097 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.714759111 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.852899075 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.852973938 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.853136063 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.854429960 CEST	49753	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.854445934 CEST	443	49753	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.857759953 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.857809067 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.857887983 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.858355045 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:08.858366966 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:08.859024048 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.859072924 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.859133005 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.859378099 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:08.859390974 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:08.929208040 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.929800034 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.929831028 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.930260897 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.930268049 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.940247059 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.940642118 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.940669060 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:08.941003084 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:08.941010952 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.022901058 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.023471117 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.023494959 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.023909092 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.023916960 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.026186943 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.026473045 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.026489973 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.026784897 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.026791096 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.036422014 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.036812067 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.036838055 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.037151098 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.037158966 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.073241949 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.073348045 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.073632002 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.073682070 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.073682070 CEST	49755	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.073709965 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.073724031 CEST	443	49755	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.076400995 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.076442957 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.076503992 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.076632977 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.076651096 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.079953909 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.080024958 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.080144882 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.080174923 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.080190897 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.080202103 CEST	49754	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.080209017 CEST	443	49754	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.082377911 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.082408905 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.082484007 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.082622051 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.082634926 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.159670115 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.159754992 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.159820080 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.160223007 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.160242081 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.160254002 CEST	49756	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.160262108 CEST	443	49756	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.163566113 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.163599968 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.163701057 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.163880110 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.163892984 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.163983107 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.164113998 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.164186954 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.164256096 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.164273977 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.164285898 CEST	49757	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.164290905 CEST	443	49757	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.166832924 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.166868925 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.167045116 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.167329073 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.167341948 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.176858902 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.177198887 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.177289009 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.177324057 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.177335024 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.177346945 CEST	49758	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.177351952 CEST	443	49758	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.179604053 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.179641962 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.179706097 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.179934978 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.179944992 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.520112038 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.521795034 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.521812916 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.522222996 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.522547960 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.522618055 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.522721052 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.522746086 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.545989037 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.546353102 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.546369076 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.546776056 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.547107935 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.547182083 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.547246933 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.587338924 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.715399981 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.715470076 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.716119051 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.716159105 CEST	443	49759	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.716214895 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.716216087 CEST	49759	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.719324112 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.719356060 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.719432116 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.720052958 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.720066071 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.720730066 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.720768929 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.720824957 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.721246958 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:09.721273899 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:09.722342968 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.722379923 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.722455978 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.722656012 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.722671986 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.735218048 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.735307932 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.735377073 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.735966921 CEST	49760	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:09.735979080 CEST	443	49760	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:09.822860956 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.823601961 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.823622942 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.824040890 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.824053049 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.841381073 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.841820955 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.841839075 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.842242956 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.842251062 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.916261911 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.916877985 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.916903019 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.917304993 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.917309999 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.934354067 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.934739113 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.934761047 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.935054064 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.935065985 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.950833082 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.951117992 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.951143980 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.951473951 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.951483011 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.957828999 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.958092928 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.958183050 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.958215952 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.958215952 CEST	49761	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.958230019 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.958239079 CEST	443	49761	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.960941076 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.960987091 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.961065054 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.961199999 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.961213112 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.981103897 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.981183052 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.981242895 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.981384993 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.981399059 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.981411934 CEST	49762	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.981419086 CEST	443	49762	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.983745098 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.983776093 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:09.984487057 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.984611988 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:09.984627962 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.055098057 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.055352926 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.055501938 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.055620909 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.055641890 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.055653095 CEST	49764	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.055659056 CEST	443	49764	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.057852030 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.057892084 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.057951927 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.058075905 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.058088064 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.074094057 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.074222088 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.074342966 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.074547052 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.074547052 CEST	49763	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.074558020 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.074565887 CEST	443	49763	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.076550007 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.076586962 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.076670885 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.076770067 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.076777935 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.089529991 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.089821100 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.092488050 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.092528105 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.092545033 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.092559099 CEST	49765	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.092566013 CEST	443	49765	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.094542027 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.094568014 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.094679117 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.094788074 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.094798088 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.383776903 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.384135962 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.384147882 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.384509087 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.385152102 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.385227919 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.385420084 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.385458946 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.391576052 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.391861916 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.391875029 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.392241001 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.392613888 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.392651081 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.392707109 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.392815113 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.392842054 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.392982006 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.393007994 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.393019915 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.393201113 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.393574953 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.393645048 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.393748999 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.439341068 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.583578110 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.584024906 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.584088087 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.584096909 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.584276915 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.584352016 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.584877968 CEST	49766	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.584889889 CEST	443	49766	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.588062048 CEST	49767	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.588079929 CEST	443	49767	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.595458031 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.595484972 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.595567942 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.596678972 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.596694946 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.597749949 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.597790956 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.597938061 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.598098993 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:10.598113060 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:10.600455046 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.600480080 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.600543976 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.600735903 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.600749969 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.602533102 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.602544069 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.602622986 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.602900028 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:10.602914095 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:10.717015982 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.718094110 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.718117952 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.719449997 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.719461918 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.754549980 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.755649090 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.755675077 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.756751060 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.756757021 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.821551085 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.832844019 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.832865000 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.833873034 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.833887100 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.852161884 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.852504969 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.853137970 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.853152037 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.854260921 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.854265928 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.854497910 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.854789972 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.855040073 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.855185032 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.855197906 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.856213093 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.856218100 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.856623888 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.856623888 CEST	49769	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.856637955 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.856647968 CEST	443	49769	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.864782095 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.864814043 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.864993095 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.865797043 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.865823030 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.892776966 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.892843008 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.892930031 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.893692970 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.893719912 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.893724918 CEST	49770	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.893731117 CEST	443	49770	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.900016069 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.900037050 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.900104046 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.900301933 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.900316000 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.966684103 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.966763020 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.966823101 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.967498064 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.967518091 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.967540026 CEST	49771	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.967546940 CEST	443	49771	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.974910021 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.974930048 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.974984884 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.975450039 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.975461006 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.989744902 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.989820004 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.989888906 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.989970922 CEST	49773	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.989979029 CEST	443	49773	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.993849039 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.994071960 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.994118929 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.995095015 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.995110989 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:10.995122910 CEST	49772	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:10.995127916 CEST	443	49772	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.000853062 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.000876904 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.000933886 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.001185894 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.001195908 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.005676985 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.005721092 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.005970001 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.006127119 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.006140947 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.258315086 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.258614063 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.258641005 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.258986950 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.259387970 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.259447098 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.259582043 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.259582043 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.259608984 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.262561083 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.262813091 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.262842894 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.263403893 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.263725042 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.263822079 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.263839006 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.263957977 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.264153957 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.264164925 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.264636040 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.264930964 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.265014887 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.265100002 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.269145012 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.269457102 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.269464970 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.269862890 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.270157099 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.270215988 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.270412922 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.270436049 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.307329893 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.307343006 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.308229923 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.308357954 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.444567919 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.445144892 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.445305109 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.446037054 CEST	49774	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:11.446057081 CEST	443	49774	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:11.450122118 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.450304985 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.450412989 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.451195002 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.451272964 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.451332092 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.451406002 CEST	49776	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.451416969 CEST	443	49776	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.452322006 CEST	49768	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.452327967 CEST	443	49768	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.452897072 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.453072071 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.453126907 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.453614950 CEST	49777	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.453620911 CEST	443	49777	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.533564091 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.533622026 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.533806086 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.534333944 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:11.534353971 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:11.637393951 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.638310909 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.638338089 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.638709068 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.638721943 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.654273033 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.654944897 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.654968023 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.655813932 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.655819893 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.726996899 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.727864027 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.727879047 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.729175091 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.729181051 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.744643927 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.745434999 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.745446920 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.746344090 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.746349096 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.757131100 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.757843018 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.757857084 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.758735895 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.758739948 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.776412010 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.776688099 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.777009010 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.777210951 CEST	49778	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.777239084 CEST	443	49778	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.782943964 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.782984972 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.783334970 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.783473969 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.783487082 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.790920973 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.791002989 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.791096926 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.791451931 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.791469097 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.791480064 CEST	49779	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.791486979 CEST	443	49779	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.795130968 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.795166969 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:11.795404911 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.795694113 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:11.795706987 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040010929 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040092945 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040123940 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040196896 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.040220976 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040232897 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040322065 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040357113 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.040436029 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.040707111 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.040723085 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.040733099 CEST	49780	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.040739059 CEST	443	49780	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.042460918 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.042483091 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.042503119 CEST	49781	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.042510033 CEST	443	49781	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.043772936 CEST	49782	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.043798923 CEST	443	49782	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.048768997 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.048808098 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.049060106 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.051980019 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.052035093 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.052099943 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.052321911 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.052340984 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.053518057 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.053549051 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.053719997 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.053745985 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.053749084 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.054023027 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.054039001 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.209728003 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:12.210138083 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:12.210172892 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:12.210551977 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:12.211855888 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:12.211929083 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:12.212220907 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:12.259346008 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:18:12.399055004 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:12.399282932 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:12.399342060 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:12.400194883 CEST	49775	443	192.168.2.7	75.2.120.244
Oct 24, 2024 11:18:12.400211096 CEST	443	49775	75.2.120.244	192.168.2.7
Oct 24, 2024 11:18:12.690421104 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.690952063 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.690980911 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.691494942 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.691504002 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.823721886 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.824234962 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.824250937 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.824707985 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.824717999 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.828607082 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.828701973 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.828949928 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.828999043 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.829078913 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.829104900 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.829293966 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.829293966 CEST	49784	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.829313993 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.829324007 CEST	443	49784	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.829509974 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.829518080 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.830641985 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.830713034 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.831115007 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.831134081 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.831160069 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.831180096 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.831526041 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.831532955 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.831686974 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.831692934 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.832844019 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.832885981 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.832977057 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.833091021 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.833108902 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.959753036 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.959814072 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.959875107 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.960097075 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.960112095 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.960129023 CEST	49785	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.960134983 CEST	443	49785	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.963340998 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.963383913 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.963449955 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.963629007 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.963644981 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.966346979 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.966789007 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.966847897 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.966881037 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.966896057 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.966911077 CEST	49787	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.966917038 CEST	443	49787	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.966931105 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.967001915 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.967104912 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.967220068 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.967247009 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.967271090 CEST	49786	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.967277050 CEST	443	49786	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.968936920 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.969074965 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.969258070 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.969954014 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.969990015 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.970176935 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970215082 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.970223904 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970223904 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970237017 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970237017 CEST	49788	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970252991 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.970256090 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.970261097 CEST	443	49788	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.970274925 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970405102 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.970424891 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.972151041 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.972182035 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:12.972354889 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.972479105 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:12.972492933 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.597142935 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.598220110 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.598241091 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.598920107 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.598926067 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.711718082 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.711975098 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.712620974 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.712635994 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.713988066 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.713999033 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.714668989 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.714690924 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.715953112 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.715959072 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.735555887 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.735898018 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.735992908 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.736182928 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.736197948 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.736207008 CEST	49789	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.736212015 CEST	443	49789	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.739959955 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.740006924 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.740192890 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.740401983 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.740420103 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.742558002 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.742572069 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.743381977 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.743407965 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.744509935 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.744515896 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.744755983 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.744762897 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.745455980 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.745460033 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.846946955 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.847032070 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.847106934 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.847445965 CEST	49792	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.847469091 CEST	443	49792	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.848664999 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.848750114 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.848850012 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.850410938 CEST	49790	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.850428104 CEST	443	49790	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.858690977 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.858731985 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.858925104 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.860538006 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.860574961 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.860646963 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.861248016 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.861260891 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.861534119 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.861545086 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.882122040 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.882184029 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.882309914 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.884696960 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.884993076 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.885056019 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.898823023 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.898840904 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.898879051 CEST	49793	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.898885965 CEST	443	49793	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.899091005 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.899091005 CEST	49791	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.899111032 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.899120092 CEST	443	49791	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.907931089 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.907967091 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.908236027 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.909555912 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.909578085 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.909913063 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.910209894 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.910218954 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:13.910739899 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:13.910753012 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.504545927 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.505192995 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.505218983 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.505598068 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.505611897 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.635548115 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.636070013 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.636082888 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.636687994 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.636693001 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.640470982 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.640923977 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.640947104 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.641324043 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.641330004 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.642000914 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.642112970 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.642206907 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.642245054 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.642268896 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.642291069 CEST	49794	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.642298937 CEST	443	49794	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.644876003 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.644915104 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.645015955 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.645154953 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.645169973 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.656961918 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.657373905 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.657382011 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.657816887 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.657821894 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.670408010 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.670749903 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.670758963 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.671174049 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.671176910 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.774477959 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.774590969 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.774667025 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.774856091 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.774872065 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.774884939 CEST	49795	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.774892092 CEST	443	49795	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778247118 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778287888 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778424025 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778574944 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778599977 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778645039 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778743982 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778801918 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778940916 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778954029 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.778964043 CEST	49796	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.778970003 CEST	443	49796	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.781081915 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.781102896 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.781162977 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.781327009 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.781339884 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.792176008 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.792284966 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.792345047 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.792581081 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.792581081 CEST	49798	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.792597055 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.792608023 CEST	443	49798	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.795037031 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.795059919 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.795172930 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.795458078 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.795466900 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.808334112 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.808490992 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.808595896 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.808747053 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.808768988 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.808787107 CEST	49797	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.808795929 CEST	443	49797	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.811516047 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.811558962 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:14.811615944 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.811765909 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:14.811781883 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.398376942 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.398919106 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.398941040 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.399471045 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.399477005 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.440301895 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:15.440373898 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:15.440519094 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:15.517139912 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.517764091 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.517787933 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.518266916 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.518287897 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.536150932 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.536220074 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.536298037 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.536504984 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.536520958 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.536531925 CEST	49799	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.536540985 CEST	443	49799	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.539182901 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.539207935 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.539428949 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.539457083 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.539544106 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.539762020 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.539772034 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.539917946 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.539942980 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.540263891 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.540270090 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.540271997 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.540277004 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.540442944 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.540458918 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.568063021 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.568546057 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.568576097 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.569026947 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.569035053 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.651923895 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.652000904 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.652359962 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.652359962 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.652401924 CEST	49800	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.652422905 CEST	443	49800	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.655154943 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.655191898 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.655322075 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.655474901 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.655483961 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.674417973 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.674520969 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.674576998 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.674894094 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.674894094 CEST	49802	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.674911976 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.674922943 CEST	443	49802	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.677772999 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.677808046 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.677911043 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.678035021 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.678050995 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.679796934 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.679862022 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.680088997 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.680124998 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.680149078 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.680160046 CEST	49801	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.680165052 CEST	443	49801	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.682908058 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.682926893 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.682991982 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.683109999 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.683120966 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.705935001 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.706053972 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.706218004 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.706284046 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.706301928 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.706315041 CEST	49803	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.706321001 CEST	443	49803	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.708565950 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.708601952 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.708996058 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.709201097 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:15.709213972 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:15.795907021 CEST	49699	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:15.796371937 CEST	49810	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:15.796403885 CEST	443	49810	104.98.116.138	192.168.2.7
Oct 24, 2024 11:18:15.796613932 CEST	49810	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:15.799628973 CEST	49810	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:15.799638987 CEST	443	49810	104.98.116.138	192.168.2.7
Oct 24, 2024 11:18:15.801363945 CEST	443	49699	104.98.116.138	192.168.2.7
Oct 24, 2024 11:18:16.292392969 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.293243885 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.293271065 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.293664932 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.293672085 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.406527996 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.407157898 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.407169104 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.407655954 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.407660961 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.429259062 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.429591894 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.429644108 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.429696083 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.429708958 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.429728985 CEST	49805	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.429734945 CEST	443	49805	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.432229996 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.432245970 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.432357073 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.432357073 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.432518959 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.432533979 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.432813883 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.432821035 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.433201075 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.433206081 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.443675041 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.444017887 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.444061041 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.444428921 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.444439888 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.472593069 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.472978115 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.473006964 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.473408937 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.473422050 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.543216944 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.543294907 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.543339968 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.543514013 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.543528080 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.543557882 CEST	49806	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.543576956 CEST	443	49806	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.546200991 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.546221972 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.546288013 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.546478987 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.546492100 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.571083069 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.571253061 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.571405888 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.571405888 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.573909044 CEST	49807	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.573909044 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.573937893 CEST	443	49807	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.573961973 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.574075937 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.574289083 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.574304104 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.581470013 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.581609964 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.581666946 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.581759930 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.581777096 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.581787109 CEST	49808	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.581793070 CEST	443	49808	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.583910942 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.583934069 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.583998919 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.584146976 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.584160089 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.610851049 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.610932112 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.611084938 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.611156940 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.611156940 CEST	49809	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.611179113 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.611186981 CEST	443	49809	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.613543034 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.613590956 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:16.613651991 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.613814116 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:16.613833904 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.187357903 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.187937021 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.187952995 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.188430071 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.188435078 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.299215078 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.300017118 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.300017118 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.300028086 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.300045967 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.312230110 CEST	49724	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:18:17.312243938 CEST	443	49724	142.250.186.36	192.168.2.7
Oct 24, 2024 11:18:17.324192047 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.324249983 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.324311018 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.324464083 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.324480057 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.324486017 CEST	49812	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.324491024 CEST	443	49812	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.325038910 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.326164007 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.326173067 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.327069044 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.327074051 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.333906889 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.333940983 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.334033966 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.334182978 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.334197044 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.348237991 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.348715067 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.348722935 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.349248886 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.349253893 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.352261066 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.352653027 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.352665901 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.353025913 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.353030920 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.437469959 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.437524080 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.437680006 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.437834978 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.437834978 CEST	49813	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.437855005 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.437869072 CEST	443	49813	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.440860987 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.440876961 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.441032887 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.441217899 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.441226959 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.461635113 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.462294102 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.462348938 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.462421894 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.462421894 CEST	49814	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.462431908 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.462440968 CEST	443	49814	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.465030909 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.465064049 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.465116024 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.465240002 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.465257883 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.486673117 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.486957073 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.487008095 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.487067938 CEST	49816	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.487081051 CEST	443	49816	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.487576962 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.487628937 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.487761021 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.487910032 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.487910032 CEST	49815	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.487922907 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.487926960 CEST	443	49815	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.489686012 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.489716053 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.489769936 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.490045071 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.490060091 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.490714073 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.490741014 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.490860939 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.491074085 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:17.491085052 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:17.980492115 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 24, 2024 11:18:18.101885080 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.102571011 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.102602005 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.102984905 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.102992058 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.191003084 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.191971064 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.191996098 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.193546057 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.193552017 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.207732916 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.208594084 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.208628893 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.208740950 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.208746910 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.242245913 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.242326021 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.242480040 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.242638111 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.242659092 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.242671013 CEST	49818	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.242676973 CEST	443	49818	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.244508982 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.245183945 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.245209932 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.245417118 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.245423079 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.245847940 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.245889902 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.246016979 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.246324062 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.246340990 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.250631094 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.250912905 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.250953913 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.251475096 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.251485109 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.326988935 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.327065945 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.327178001 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.327333927 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.327333927 CEST	49819	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.327366114 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.327375889 CEST	443	49819	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.330077887 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.330125093 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.330203056 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.330363989 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.330379963 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.342504978 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.342720985 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.342792034 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.342856884 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.342875004 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.342916012 CEST	49820	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.342922926 CEST	443	49820	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.346436024 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.346476078 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.346545935 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.346843004 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.346857071 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.381262064 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.381349087 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.381556988 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.381556988 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.381556988 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.384290934 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.384322882 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.384567022 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.384690046 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.384702921 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.389132977 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.389302015 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.389380932 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.389419079 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.389419079 CEST	49821	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.389436007 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.389450073 CEST	443	49821	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.391850948 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.391885042 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.392129898 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.392441988 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.392460108 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:18.607331038 CEST	49822	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:18.607357025 CEST	443	49822	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.006892920 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.007400990 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.007436991 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.009205103 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.009227037 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.068898916 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.069652081 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.069664001 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.070108891 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.070112944 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.120388031 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.120821953 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.120850086 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.121332884 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.121339083 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.131612062 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.131999016 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.132009983 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.132421017 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.132425070 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.146035910 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.146466017 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.146473885 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.146939993 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.146944046 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148418903 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148444891 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148489952 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.148502111 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148514986 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148561954 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.148685932 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.148701906 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.148708105 CEST	49824	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.148713112 CEST	443	49824	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.151698112 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.151729107 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.151845932 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.152059078 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.152071953 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.203814983 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.203879118 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.204035044 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.204238892 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.204238892 CEST	49825	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.204256058 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.204265118 CEST	443	49825	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.206609964 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.206640959 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.206700087 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.206830978 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.206845999 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.260911942 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.261266947 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.261331081 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.261368990 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.261385918 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.261396885 CEST	49826	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.261403084 CEST	443	49826	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.265382051 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.265467882 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.265584946 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.265723944 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.265743017 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.273050070 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.273078918 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.273137093 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.273143053 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.273188114 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.273330927 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.273350954 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.273361921 CEST	49828	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.273367882 CEST	443	49828	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.277093887 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.277146101 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.277312994 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.278095007 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.278121948 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.285310984 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.285331964 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.285386086 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.285432100 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.285468102 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.285604954 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.285624027 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.285648108 CEST	49827	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.285655975 CEST	443	49827	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.287916899 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.287952900 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.288070917 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.288223028 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.288239002 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.908586025 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.909116983 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.909133911 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.910630941 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.910636902 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.960539103 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.961119890 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.961143970 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:19.962908030 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:19.962918043 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.012959957 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.013418913 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.013433933 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.013849974 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.013854980 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.035306931 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.035727024 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.035752058 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.036168098 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.036181927 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.044754028 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.044768095 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.044821978 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.044823885 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.044862986 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.045137882 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.045151949 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.045161963 CEST	49829	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.045167923 CEST	443	49829	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.048083067 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.048131943 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.048213005 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.048365116 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.048387051 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.067756891 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.068156958 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.068172932 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.068723917 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.068730116 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.097733021 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.097795010 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.097876072 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.098166943 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.098187923 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.098238945 CEST	49830	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.098248005 CEST	443	49830	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.100883007 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.100917101 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.101098061 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.101277113 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.101291895 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.148561001 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.148633003 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.148706913 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.149012089 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.149027109 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.149039030 CEST	49831	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.149044037 CEST	443	49831	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.151860952 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.151911974 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.152123928 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.152123928 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.152163029 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.172193050 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.172277927 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.172333002 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.172508955 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.172528982 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.172550917 CEST	49832	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.172558069 CEST	443	49832	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.175368071 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.175407887 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.175461054 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.175637007 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.175649881 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.215712070 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.215784073 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.215975046 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.216059923 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.216073990 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.216084957 CEST	49833	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.216089964 CEST	443	49833	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.218765020 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.218806028 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.218933105 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.219084024 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.219098091 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.810400963 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.810971022 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.811005116 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.812530994 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.812547922 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.860394001 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.860857010 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.860872984 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.862298965 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.862304926 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.911058903 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.911601067 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.911628962 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.912069082 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.912080050 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.930615902 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.931185007 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.931226015 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.931618929 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.931627989 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.952347994 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.952430010 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.952620983 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.952698946 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.952721119 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.952728033 CEST	49834	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.952733994 CEST	443	49834	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.956104994 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.956137896 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.956466913 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.956466913 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.956501007 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.983568907 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.984241962 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.984268904 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.984633923 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.984639883 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.995855093 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.995934010 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.996084929 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.996217012 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.996239901 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.996251106 CEST	49835	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.996257067 CEST	443	49835	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.999099016 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.999126911 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:20.999196053 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.999331951 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:20.999342918 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.048481941 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.048626900 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.048716068 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.048856974 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.048856974 CEST	49836	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.048877001 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.048882008 CEST	443	49836	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.051652908 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.051693916 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.051955938 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.052122116 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.052139044 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.072379112 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.072464943 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.072518110 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.072642088 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.072642088 CEST	49837	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.072666883 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.072671890 CEST	443	49837	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.075727940 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.075761080 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.075839043 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.075984001 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.075998068 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.120446920 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.120520115 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.120839119 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.121464014 CEST	49838	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.121488094 CEST	443	49838	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.124542952 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.124588013 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.124686003 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.124839067 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.124855995 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.710208893 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.710876942 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.710896969 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.712850094 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.712856054 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.756408930 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.757044077 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.757076025 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.758743048 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.758749008 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.802403927 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.802890062 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.802926064 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.803371906 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.803383112 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.832779884 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.833313942 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.833337069 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.833765984 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.833771944 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.847935915 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.848211050 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.848295927 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.848567963 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.848582983 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.848596096 CEST	49839	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.848601103 CEST	443	49839	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.851803064 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.851829052 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.851973057 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.852108002 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.852118969 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.883825064 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.884290934 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.884310961 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.884752035 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.884758949 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.893539906 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.893624067 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.893677950 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.893693924 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.893718004 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.893959045 CEST	49840	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.893980980 CEST	443	49840	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.896297932 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.896337032 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.896703959 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.896703959 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.896750927 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.938014984 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.938139915 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.938271999 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.938410044 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.938426018 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.938442945 CEST	49841	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.938450098 CEST	443	49841	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.941047907 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.941076994 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.941147089 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.941315889 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.941328049 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.972307920 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.972341061 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.972393990 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.972403049 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.972440004 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.972701073 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.972718000 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.972728014 CEST	49842	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.972733974 CEST	443	49842	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.975461006 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.975503922 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:21.975655079 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.975752115 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:21.975765944 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.023884058 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.023992062 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.024064064 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.024228096 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.024247885 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.024255991 CEST	49843	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.024266005 CEST	443	49843	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.078000069 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.078052998 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.078130960 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.078315973 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.078330994 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.603205919 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.603774071 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.603804111 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.605879068 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.605882883 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.656090975 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.656651974 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.656680107 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.660551071 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.660564899 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.708240032 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.708798885 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.708818913 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.709319115 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.709323883 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.740382910 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.740478992 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.740603924 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.741152048 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.741152048 CEST	49844	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.741166115 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.741172075 CEST	443	49844	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.744077921 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.744110107 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.744168997 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.744354010 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.744366884 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.763179064 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.763638973 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.763664007 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.764230967 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.764235973 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.794514894 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.794600010 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.794667959 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.794871092 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.794889927 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.794919968 CEST	49845	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.794925928 CEST	443	49845	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.797652006 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.797693014 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.797785044 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.797952890 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.797965050 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.833007097 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.833733082 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.833750010 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.834439039 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.834445953 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.905013084 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.905116081 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.905282021 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.905345917 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.905345917 CEST	49847	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.905365944 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.905369997 CEST	443	49847	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.908343077 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.908390999 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.908510923 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.908654928 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.908669949 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.970917940 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.970987082 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.971050024 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.971251011 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.971272945 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.971285105 CEST	49848	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.971293926 CEST	443	49848	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.973886013 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.973918915 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.974169970 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.974531889 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.974543095 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.975967884 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.975990057 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.976032019 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.976056099 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.976105928 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.976248026 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.976272106 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.976293087 CEST	49846	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.976305008 CEST	443	49846	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.978410006 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.978440046 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:22.978553057 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.978677988 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:22.978694916 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.489013910 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.489521027 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.489542007 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.489979982 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.489985943 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.537471056 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.538058996 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.538073063 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.538764000 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.538769007 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.622623920 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.622694016 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.622756004 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.623006105 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.623027086 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.623045921 CEST	49849	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.623054028 CEST	443	49849	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.626104116 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.626147985 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.626247883 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.626425028 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.626442909 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673224926 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673280001 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673331976 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673336029 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.673376083 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.673645020 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.673645973 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673667908 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.673682928 CEST	49850	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.673690081 CEST	443	49850	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.674381971 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.674401999 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.675072908 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.675081015 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.676460028 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.676491022 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.676587105 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.676744938 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.676758051 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.727576971 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.728060961 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.728076935 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.728693962 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.728699923 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.768204927 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.768795013 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.768815994 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.769257069 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.769268990 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.816402912 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.816473961 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.816538095 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.816766024 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.816787004 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.816792965 CEST	49851	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.816798925 CEST	443	49851	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.819720984 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.819761038 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.819832087 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.820031881 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.820053101 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.874054909 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.874094963 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.874161005 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.874169111 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.874234915 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.874543905 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.874564886 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.874581099 CEST	49852	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.874587059 CEST	443	49852	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.877926111 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.877960920 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.878195047 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.878329992 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.878341913 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.907871962 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.907979965 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.908097982 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.908397913 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.908421993 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.908431053 CEST	49853	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.908440113 CEST	443	49853	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.911093950 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.911135912 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:23.911247015 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.911454916 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:23.911478996 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.387763977 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.388782024 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.388798952 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.390060902 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.390069962 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.445396900 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.446363926 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.446378946 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.446845055 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.446850061 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.528666019 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.528808117 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.529470921 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.532066107 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.532082081 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.532114029 CEST	49854	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.532119989 CEST	443	49854	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.537540913 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.537590027 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.537815094 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.538028002 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.538043976 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.586189032 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.587117910 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.587129116 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.588246107 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.588344097 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.588391066 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.588396072 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.588407993 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.588982105 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.588994980 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.589005947 CEST	49855	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.589011908 CEST	443	49855	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.592523098 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.592549086 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.592670918 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.592778921 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.592787981 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.637314081 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.638127089 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.638134003 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.638901949 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.638906002 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.655812025 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.656310081 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.656317949 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.657695055 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.657699108 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.725996971 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.726028919 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.726078987 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.726082087 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.726154089 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.726541042 CEST	49856	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.726557970 CEST	443	49856	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.730858088 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.730909109 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.730984926 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.731240988 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.731252909 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.775866032 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.775942087 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.776081085 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.776340961 CEST	49857	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.776364088 CEST	443	49857	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.782144070 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.782167912 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.782282114 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.782500029 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.782512903 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.793916941 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.794006109 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.794116020 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.794312000 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.794337034 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.794348001 CEST	49858	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.794353008 CEST	443	49858	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.798517942 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.798547983 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:24.798633099 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.798832893 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:24.798847914 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.283298969 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.283766985 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.283796072 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.284255028 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.284259081 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.357940912 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.358460903 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.358484983 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.359014034 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.359019995 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.419272900 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.419418097 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.419492006 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.422909975 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.422925949 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.422938108 CEST	49859	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.422944069 CEST	443	49859	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.437633038 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.437711000 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.437778950 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.438507080 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.438522100 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.441977978 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.442007065 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.442070961 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.442091942 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.495907068 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.495919943 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.499660969 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.499690056 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.499748945 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.499799967 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.504040956 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.504054070 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.504436016 CEST	49860	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.504456043 CEST	443	49860	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.509349108 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.509383917 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.509651899 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.509871960 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.509881020 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.511626005 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.512005091 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.512022018 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.512753010 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.512758017 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.541975975 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.542877913 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.542891979 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.543592930 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.543600082 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.639058113 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.640137911 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.640161037 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.640170097 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.640450001 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.640472889 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.653471947 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.653548956 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.653769970 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.654320955 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.654335022 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.654364109 CEST	49861	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.654371023 CEST	443	49861	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.657937050 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.680044889 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.680125952 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.680182934 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.680676937 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.680706024 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.680716991 CEST	49862	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.680723906 CEST	443	49862	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.685501099 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.685527086 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.773252010 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.791636944 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.791735888 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.791753054 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.802587986 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.805035114 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.805049896 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.819170952 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:25.823206902 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:25.867326021 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.140614986 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.140681028 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.140697002 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.150705099 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.150717974 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.161757946 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.161773920 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.163019896 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.163024902 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.275428057 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.278208017 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.278281927 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.284499884 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.286654949 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.286674023 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.287586927 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.287591934 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.291773081 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.291786909 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.292112112 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.293517113 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.300579071 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.300658941 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.300681114 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.310431004 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.310453892 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.311482906 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.311494112 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.313009024 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.313019037 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.339329004 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.417704105 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.417751074 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.417804956 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.417851925 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.417853117 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.418603897 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.418617964 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.419286013 CEST	49864	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.419291973 CEST	443	49864	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.422082901 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.422100067 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.425353050 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.425467968 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.425514936 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.425825119 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.425843000 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.425848961 CEST	49865	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.425854921 CEST	443	49865	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.429016113 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.429023027 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.444287062 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.446369886 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.449702024 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.495893955 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.495918989 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.498274088 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.498616934 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.498640060 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.556927919 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.559644938 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.562664032 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.564861059 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.581378937 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.583607912 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.631333113 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.632384062 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.635922909 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.635945082 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.639142990 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.645576000 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.691323042 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.694227934 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.697247028 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.697256088 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.699644089 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.701930046 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.717502117 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.719743967 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.767333031 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.770499945 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.773622036 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.773658037 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.779694080 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.783730030 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.831259966 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.847755909 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.847790003 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.851660967 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.853946924 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.862711906 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.903342962 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.908587933 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.913799047 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.913856983 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.918057919 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.922599077 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.967334032 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.981899977 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.988917112 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:26.988940001 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:26.995572090 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.033441067 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.038851976 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.047454119 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.053652048 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.097515106 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.106551886 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.123363018 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.129179955 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.167053938 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.173749924 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.183331013 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.190701008 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.235333920 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.240663052 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.244564056 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.244597912 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.257194996 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.261019945 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.300792933 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.325417995 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.325445890 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.329431057 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.371334076 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.371893883 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.375122070 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.375155926 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.379503965 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.383589029 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.394685030 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.400156975 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.447339058 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.459644079 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.475409985 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.475466013 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.505877018 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.510339022 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.510688066 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.513022900 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.528436899 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.533154011 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.579330921 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.582314014 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.592166901 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.592214108 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.609751940 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.613866091 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.644690990 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.663372993 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.664064884 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.667237997 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.710386038 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.715240002 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.725971937 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.730062962 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.749826908 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.754179001 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.795331955 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.797099113 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.801577091 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.801626921 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.843853951 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.848119974 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.848157883 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.859715939 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.864650011 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.884423971 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.886815071 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.927341938 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.931354046 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.933568954 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.933618069 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.977435112 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:27.983208895 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:27.983236074 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.006748915 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.006776094 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.009254932 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.020539045 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.022604942 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.063325882 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.067643881 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.072336912 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.072359085 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.117160082 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.119894028 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.119918108 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.140573978 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.143201113 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.154299974 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.164038897 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.201415062 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.203929901 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.207041979 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.209214926 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.255333900 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.255942106 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.258723974 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.258763075 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.277322054 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.279913902 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.297981977 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.300662041 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.337796926 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.364762068 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.386092901 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.391529083 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.392570019 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.395116091 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.413650036 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.419766903 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.434484005 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.437743902 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.483325958 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.499712944 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.505316019 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.505378962 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.525820017 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.528997898 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.547327042 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.549647093 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.569343090 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.571821928 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.617630005 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.620467901 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.639405966 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.641599894 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.663319111 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.665935040 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.683648109 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.685996056 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.705579996 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.708292961 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.754632950 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.757164001 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.777556896 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.779900074 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.801039934 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.803479910 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.820611954 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.822859049 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.842200994 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.844542027 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.887342930 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.892343044 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.894774914 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.894848108 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.914113998 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.916552067 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.937813997 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.940144062 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.957118988 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.959405899 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:28.979074955 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:28.981700897 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.027337074 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.029079914 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.032481909 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.032557011 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.050622940 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.053498030 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.073893070 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.076930046 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.093493938 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.096060991 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.115847111 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.118546009 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.159347057 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.166450977 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.169748068 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.169800043 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.188507080 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.191258907 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.211299896 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.213716030 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.241123915 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.243475914 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.253184080 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.255373955 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.303339958 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.304371119 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.306894064 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.306936026 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.325541973 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.327755928 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.348098993 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.350389957 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.378254890 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.380991936 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.389369965 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.391611099 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.435336113 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.440979958 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.443583965 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.443619013 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.461672068 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.464245081 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.484333038 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.486704111 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.514867067 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.518126011 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.525286913 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.528654099 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.575331926 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.577421904 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.579802036 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.579833031 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.598047972 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.600461006 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.621015072 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.623719931 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.652380943 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.655078888 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.662559986 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.665043116 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.707344055 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.714468002 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.723762989 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.723845005 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.734333992 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.736778975 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.757853985 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.760339975 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.789501905 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.791914940 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.799161911 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.801372051 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.847330093 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.859154940 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.862232924 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.862298012 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.871248960 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.873766899 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.894284010 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.896599054 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.926044941 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.928288937 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.934938908 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.936978102 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.979331970 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.996599913 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:29.998898029 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:29.998944044 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.007894993 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.009948969 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.030853033 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.033030987 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.062891960 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.062984943 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.068365097 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.071300983 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.120919943 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.120954990 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.123532057 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.134789944 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.137527943 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.145030022 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.145122051 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.145138979 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.147587061 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.167263031 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.167335033 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.169863939 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.202891111 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.205984116 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.247332096 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.257565022 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.260699034 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.260746956 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.271387100 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.274019957 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.281563997 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.283941031 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.304164886 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.306893110 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.340032101 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.386538982 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.394939899 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.418359995 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.418575048 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.418592930 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.464668989 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:30.464690924 CEST	443	49863	13.107.253.72	192.168.2.7
Oct 24, 2024 11:18:30.511544943 CEST	49863	443	192.168.2.7	13.107.253.72
Oct 24, 2024 11:18:33.443459988 CEST	443	49810	104.98.116.138	192.168.2.7
Oct 24, 2024 11:18:33.443528891 CEST	49810	443	192.168.2.7	104.98.116.138
Oct 24, 2024 11:18:42.052517891 CEST	59850	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:42.057996988 CEST	53	59850	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:42.058207035 CEST	59850	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:42.058301926 CEST	59850	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:42.063585043 CEST	53	59850	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:42.063832998 CEST	53	59850	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:47.570754051 CEST	51592	53	192.168.2.7	162.159.36.2
Oct 24, 2024 11:18:47.576168060 CEST	53	51592	162.159.36.2	192.168.2.7
Oct 24, 2024 11:18:47.576272011 CEST	51592	53	192.168.2.7	162.159.36.2
Oct 24, 2024 11:18:47.576414108 CEST	51592	53	192.168.2.7	162.159.36.2
Oct 24, 2024 11:18:47.582035065 CEST	53	51592	162.159.36.2	192.168.2.7
Oct 24, 2024 11:18:48.183701992 CEST	53	51592	162.159.36.2	192.168.2.7
Oct 24, 2024 11:18:48.189213991 CEST	51592	53	192.168.2.7	162.159.36.2
Oct 24, 2024 11:18:48.196335077 CEST	53	51592	162.159.36.2	192.168.2.7
Oct 24, 2024 11:18:48.196391106 CEST	51592	53	192.168.2.7	162.159.36.2
Oct 24, 2024 11:18:57.261444092 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:18:57.261481047 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:19:04.626281977 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:04.626331091 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:04.626713037 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:04.627176046 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:04.627192020 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:05.480896950 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:05.481188059 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:05.481205940 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:05.481703997 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:05.482224941 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:05.482307911 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:05.527080059 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:12.399975061 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:19:12.400055885 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:19:12.400166035 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:19:12.529864073 CEST	49783	443	192.168.2.7	99.83.228.139
Oct 24, 2024 11:19:12.529902935 CEST	443	49783	99.83.228.139	192.168.2.7
Oct 24, 2024 11:19:15.476501942 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:15.476578951 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:15.476630926 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:17.308237076 CEST	51600	443	192.168.2.7	142.250.186.36
Oct 24, 2024 11:19:17.308268070 CEST	443	51600	142.250.186.36	192.168.2.7
Oct 24, 2024 11:19:18.376306057 CEST	52392	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:19:18.381774902 CEST	53	52392	1.1.1.1	192.168.2.7
Oct 24, 2024 11:19:18.381854057 CEST	52392	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:19:18.381931067 CEST	52392	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:19:18.387284040 CEST	53	52392	1.1.1.1	192.168.2.7
Oct 24, 2024 11:19:18.969454050 CEST	53	52392	1.1.1.1	192.168.2.7
Oct 24, 2024 11:19:18.969841957 CEST	52392	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:19:18.976367950 CEST	53	52392	1.1.1.1	192.168.2.7
Oct 24, 2024 11:19:18.976605892 CEST	52392	53	192.168.2.7	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 11:18:00.898571014 CEST	53	57517	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:00.911247015 CEST	53	53667	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:01.029078007 CEST	123	123	192.168.2.7	20.101.57.9
Oct 24, 2024 11:18:01.279093981 CEST	123	123	20.101.57.9	192.168.2.7
Oct 24, 2024 11:18:02.081238985 CEST	53	62360	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:02.260834932 CEST	62831	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:02.260968924 CEST	52950	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:02.280586004 CEST	53	62831	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:02.291255951 CEST	53	52950	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:02.670068026 CEST	123	123	192.168.2.7	20.101.57.9
Oct 24, 2024 11:18:02.919948101 CEST	123	123	20.101.57.9	192.168.2.7
Oct 24, 2024 11:18:03.245877981 CEST	53	65401	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:04.454622030 CEST	58135	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:04.454837084 CEST	60322	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:04.465697050 CEST	53	58135	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:04.500457048 CEST	53	60322	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:04.575871944 CEST	57760	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:04.576452971 CEST	57492	53	192.168.2.7	1.1.1.1
Oct 24, 2024 11:18:04.583070993 CEST	53	57760	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:04.583606958 CEST	53	57492	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:19.114294052 CEST	53	53589	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:37.989183903 CEST	53	61766	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:42.051093102 CEST	53	51932	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:47.569760084 CEST	53	57586	162.159.36.2	192.168.2.7
Oct 24, 2024 11:18:48.198085070 CEST	53	51825	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:49.484873056 CEST	53	56802	1.1.1.1	192.168.2.7
Oct 24, 2024 11:18:54.981847048 CEST	138	138	192.168.2.7	192.168.2.255
Oct 24, 2024 11:19:00.851463079 CEST	53	52613	1.1.1.1	192.168.2.7
Oct 24, 2024 11:19:18.375833035 CEST	53	62376	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 11:18:02.291325092 CEST	192.168.2.7	1.1.1.1	c246	(Port unreachable)	Destination Unreachable
Oct 24, 2024 11:18:04.500541925 CEST	192.168.2.7	1.1.1.1	c246	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 11:18:02.260834932 CEST	192.168.2.7	1.1.1.1	0xe556	Standard query (0)	links.us1.defend.egress.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:02.260968924 CEST	192.168.2.7	1.1.1.1	0xc9fa	Standard query (0)	links.us1.defend.egress.com	65	IN (0x0001)	false
Oct 24, 2024 11:18:04.454622030 CEST	192.168.2.7	1.1.1.1	0xafdd	Standard query (0)	links.us1.defend.egress.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.454837084 CEST	192.168.2.7	1.1.1.1	0x25df	Standard query (0)	links.us1.defend.egress.com	65	IN (0x0001)	false
Oct 24, 2024 11:18:04.575871944 CEST	192.168.2.7	1.1.1.1	0x29a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.576452971 CEST	192.168.2.7	1.1.1.1	0xc790	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 11:18:02.280586004 CEST	1.1.1.1	192.168.2.7	0xe556	No error (0)	links.us1.defend.egress.com		75.2.120.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:02.280586004 CEST	1.1.1.1	192.168.2.7	0xe556	No error (0)	links.us1.defend.egress.com		99.83.228.139	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.465697050 CEST	1.1.1.1	192.168.2.7	0xafdd	No error (0)	links.us1.defend.egress.com		99.83.228.139	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.465697050 CEST	1.1.1.1	192.168.2.7	0xafdd	No error (0)	links.us1.defend.egress.com		75.2.120.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.583070993 CEST	1.1.1.1	192.168.2.7	0x29a0	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:04.583606958 CEST	1.1.1.1	192.168.2.7	0xc790	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.19	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.22	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.23	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.20	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:16.419872046 CEST	1.1.1.1	192.168.2.7	0x12f9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:34.199465036 CEST	1.1.1.1	192.168.2.7	0x66ff	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:34.199465036 CEST	1.1.1.1	192.168.2.7	0x66ff	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:49.522785902 CEST	1.1.1.1	192.168.2.7	0x8f71	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:18:49.522785902 CEST	1.1.1.1	192.168.2.7	0x8f71	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:19:04.598206997 CEST	1.1.1.1	192.168.2.7	0x9aab	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:19:04.598206997 CEST	1.1.1.1	192.168.2.7	0x9aab	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

links.us1.defend.egress.com

https:

fs.microsoft.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 24, 2024 11:18:25.495919943 CEST	13.107.253.72	443	192.168.2.7	49863	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49705	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:02 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:02 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091802Z-r1755647c66zs9x4962sbyaz1w00000007qg000000004mcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:02 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 09:18:03 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49706	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:02 UTC	2634	OUT	GET /Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nl [TRUNCATED] Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:18:03 UTC	1325	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; Expires=Thu, 31 Oct 2024 09:18:03 GMT; Path=/ Set-Cookie: AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; Expires=Thu, 31 Oct 2024 09:18:03 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, max-age=0 Pragma: no-cache Set-Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; path=/; samesite=strict; httponly X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload blazor-enhanced-nav: allow
2024-10-24 09:18:03 UTC	2623	IN	Data Raw: 61 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 67 72 65 73 73 20 44 65 66 65 6e 64 20 55 72 6c 20 53 63 61 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 69 74 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 61 73 Data Ascii: a38<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Egress Defend Url Scanner</title> <base href="/"> <link href="css/site.css" rel="stylesheet" as
2024-10-24 09:18:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49707	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:03 UTC	3000	OUT	GET /css/site.css HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY
2024-10-24 09:18:03 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:03 GMT Content-Type: text/css Content-Length: 3664 Connection: close Set-Cookie: AWSALB=ojxOzcWdUzZjSrA7rWH3Nt9sPFcTZzuaamBa8fn8hsJjXqfqB/4qWMP+LJQaxgumeRSJW+jftEo2nNKfz7uEcAvmHkBaFHuwtEcoCNq1EVaPo6iadn0uL/OiY9Et; Expires=Thu, 31 Oct 2024 09:18:03 GMT; Path=/ Set-Cookie: AWSALBCORS=ojxOzcWdUzZjSrA7rWH3Nt9sPFcTZzuaamBa8fn8hsJjXqfqB/4qWMP+LJQaxgumeRSJW+jftEo2nNKfz7uEcAvmHkBaFHuwtEcoCNq1EVaPo6iadn0uL/OiY9Et; Expires=Thu, 31 Oct 2024 09:18:03 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebaf50" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:03 UTC	3664	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 76 65 6e 69 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 41 76 65 6e 69 72 4c 54 53 74 64 2d 42 6f 6f 6b 5f 30 2e 6f 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 76 65 6e 69 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 Data Ascii: @font-face { font-family: 'Avenir'; font-style: normal; font-weight: bold; src: url('/fonts/AvenirLTStd-Book_0.otf') format('truetype');}@font-face { font-family: 'Avenir'; font-style: normal; font-weight: light; src: ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49709	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:03 UTC	2999	OUT	GET /~/js/JsInteropFuncions.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY
2024-10-24 09:18:04 UTC	1092	IN	HTTP/1.1 404 Not Found Date: Thu, 24 Oct 2024 09:18:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=pe/H+q2MUMYnPvUeHW1k5rGZeMsSnQ/ubUKh/tuEqMtqK22DZWvZmk1BQSzqL2V0xs3oiKsKAhwnOaFgdk+APGbBJH/Qo8ZY9nRV5e5O0yeHu012g1GdUkbvs2NB; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/ Set-Cookie: AWSALBCORS=pe/H+q2MUMYnPvUeHW1k5rGZeMsSnQ/ubUKh/tuEqMtqK22DZWvZmk1BQSzqL2V0xs3oiKsKAhwnOaFgdk+APGbBJH/Qo8ZY9nRV5e5O0yeHu012g1GdUkbvs2NB; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, max-age=0 Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload blazor-enhanced-nav: allow
2024-10-24 09:18:04 UTC	2585	IN	Data Raw: 61 31 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 67 72 65 73 73 20 44 65 66 65 6e 64 20 55 72 6c 20 53 63 61 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 69 74 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 61 73 Data Ascii: a12<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Egress Defend Url Scanner</title> <base href="/"> <link href="css/site.css" rel="stylesheet" as
2024-10-24 09:18:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49710	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:03 UTC	3061	OUT	GET /images/egress-logo-dark.svg HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY
2024-10-24 09:18:04 UTC	1070	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:04 GMT Content-Type: image/svg+xml Content-Length: 29277 Connection: close Set-Cookie: AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/ Set-Cookie: AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebd35d" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:04 UTC	15314	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 31 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 30 34 37 31 20 36 2e 30 36 35 31 39 4c 31 34 2e 33 33 33 39 20 31 33 2e 38 37 31 39 4c 31 36 2e 36 36 38 34 20 31 37 2e 36 37 33 31 4c 32 39 2e 33 38 31 36 20 39 2e 38 36 37 33 37 4c 32 37 2e 30 34 37 31 20 36 2e 30 36 36 31 39 56 36 2e 30 36 35 31 39 5a 22 20 66 69 6c 6c 3d 22 23 46 37 46 37 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 33 30 34 20 31 37 2e 32 36 37 33 43 32 34 2e 38 31 31 33 20 31 39 2e 32 34 34 Data Ascii: <svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/><path d="M25.1304 17.2673C24.8113 19.244
2024-10-24 09:18:04 UTC	13963	IN	Data Raw: 35 2e 36 32 37 32 20 31 32 38 2e 33 32 32 20 34 35 2e 34 30 31 37 20 31 32 38 2e 30 39 31 20 34 35 2e 32 33 32 36 43 31 32 37 2e 38 37 20 34 35 2e 30 35 36 34 20 31 32 37 2e 35 36 20 34 34 2e 39 36 38 38 20 31 32 37 2e 31 36 31 20 34 34 2e 39 36 38 38 43 31 32 36 2e 37 38 37 20 34 34 2e 39 36 38 38 20 31 32 36 2e 34 38 31 20 34 35 2e 30 35 36 34 20 31 32 36 2e 32 34 33 20 34 35 2e 32 33 32 36 43 31 32 36 2e 30 31 35 20 34 35 2e 34 30 38 37 20 31 32 35 2e 38 34 31 20 34 35 2e 36 33 34 32 20 31 32 35 2e 37 32 37 20 34 35 2e 39 31 30 31 43 31 32 35 2e 36 32 20 34 36 2e 31 37 37 38 20 31 32 35 2e 35 35 39 20 34 36 2e 34 35 33 37 20 31 32 35 2e 35 34 33 20 34 36 2e 37 33 36 35 43 31 32 35 2e 35 33 36 20 34 36 2e 38 35 39 33 20 31 32 35 2e 35 33 32 20 34 37 2e Data Ascii: 5.6272 128.322 45.4017 128.091 45.2326C127.87 45.0564 127.56 44.9688 127.161 44.9688C126.787 44.9688 126.481 45.0564 126.243 45.2326C126.015 45.4087 125.841 45.6342 125.727 45.9101C125.62 46.1778 125.559 46.4537 125.543 46.7365C125.536 46.8593 125.532 47.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49708	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:03 UTC	3007	OUT	GET /_framework/blazor.polyfill.min.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY
2024-10-24 09:18:04 UTC	1082	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:04 GMT Content-Type: application/javascript Content-Length: 2397 Connection: close Set-Cookie: AWSALB=930uuKZc3iIjSfm4GEN2niI6lySw0c9D2zJ94EGsLEot6jyxuWEQvb8Al/c2xejOuw5BbpZ7pvi4mZQSCyh8052qYODVg1C6GuOUFt8oycWBMYHXA84oYuAQbhuw; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/ Set-Cookie: AWSALBCORS=930uuKZc3iIjSfm4GEN2niI6lySw0c9D2zJ94EGsLEot6jyxuWEQvb8Al/c2xejOuw5BbpZ7pvi4mZQSCyh8052qYODVg1C6GuOUFt8oycWBMYHXA84oYuAQbhuw; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache ETag: 8b41f523cc9870bf36be7927991b7a2694e4c9f24414a16f1aa27f6a8ce1fc35 X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:04 UTC	2397	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 69 6d 70 6f 72 74 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 69 6c 65 4e 61 6d 65 2c 20 77 65 62 52 6f 6f 74 50 61 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 74 68 4a 6f 69 6e 28 70 61 74 68 31 2c 20 70 61 74 68 32 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 74 68 31 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 70 61 74 68 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: window._import_ = function (fileName, webRootPath) { if (webRootPath === undefined \|\| webRootPath === null) { webRootPath = ""; } function pathJoin(path1, path2) { if (path1 === null \|\| path1 === undefined) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49711	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:03 UTC	3001	OUT	GET /_framework/blazor.server.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; AWSALBCORS=IHImc0xBsD1EjxbPe0+QS9ZGOyTGHVlIHIw1GNQgctToep54ZWwjx3AtLAD29lZ/eL1ZpsvtG4ARvx0AvBU7PbAuGelW4V4eZO4jPD75V6UjjOlhSJAX1YdOv9/9; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY
2024-10-24 09:18:04 UTC	1098	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:04 GMT Content-Type: text/javascript Content-Length: 151912 Connection: close Set-Cookie: AWSALB=uOIEfsYzRf04hTA9gen25Y5a+8Tg8Cc3Xf08+i//I5rlWciWC1a72oYUpKh8RBxBl5VKCQ3Qa9IOle4JtkrvtDz9q2D7IkVG9YeV8pB+1Rm3DClNC5m546WmB3J7; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/ Set-Cookie: AWSALBCORS=uOIEfsYzRf04hTA9gen25Y5a+8Tg8Cc3Xf08+i//I5rlWciWC1a72oYUpKh8RBxBl5VKCQ3Qa9IOle4JtkrvtDz9q2D7IkVG9YeV8pB+1Rm3DClNC5m546WmB3J7; Expires=Thu, 31 Oct 2024 09:18:04 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1dada2bd14359e8" Last-Modified: Fri, 19 Jul 2024 22:34:29 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:04 UTC	15286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 73 2c 73 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 73 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 6b 28 65 29 7b 74 68 69 73 2e 61 66 74 65 72 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 49 6e 66 6f 53 74 6f 72 65 2e 61 64 64 47 6c 6f 62 61 6c 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 29 7d 73 65 74 53 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 74 2c 6e 29 7d 73 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: k(e){this.afterClickCallbacks.push(e),this.eventInfoStore.addGlobalListener("click")}setStopPropagation(e,t,n){this.getEventHandlerInfosForElement(e,!0).stopPropagation(t,n)}setPreventDefault(e,t,n){this.getEventHandlerInfosForElement(e,!0).preventDefault
2024-10-24 09:18:04 UTC	430	IN	Data Raw: 70 6c 61 63 65 28 65 29 7d 65 6c 73 65 20 74 3f 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 65 29 3a 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 7d 28 65 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 29 3b 65 6c 73 65 20 69 66 28 22 63 6c 69 65 6e 74 73 69 64 65 2d 72 6f 75 74 65 72 22 3d 3d 3d 6f 29 42 65 28 72 2c 21 31 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 2c 74 2e 68 69 73 74 6f 72 79 45 6e 74 72 79 53 74 61 74 65 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 22 73 65 72 76 65 72 73 69 64 65 2d 65 6e 68 61 6e 63 65 64 22 21 3d 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 55 6e 73 75 70 70 6f 72 74 65 64 20 70 61 67 65 20 6c 6f 61 64 20 6d 65 63 68 61 6e 69 73 6d 3a 20 24 7b 6f 7d 60 29 3b 43 Data Ascii: place(e)}else t?location.replace(e):location.href=e}(e,t.replaceHistoryEntry);else if("clientside-router"===o)Be(r,!1,t.replaceHistoryEntry,t.historyEntryState,n);else{if("serverside-enhanced"!==o)throw new Error(`Unsupported page load mechanism: ${o}`);C
2024-10-24 09:18:04 UTC	13312	IN	Data Raw: 70 61 74 68 6e 61 6d 65 26 26 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3d 3d 3d 74 2e 73 65 61 72 63 68 7d 28 65 29 29 72 65 74 75 72 6e 20 4c 65 28 65 2c 6e 2c 72 29 2c 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 74 21 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 26 26 53 65 28 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2b 31 29 29 7d 28 65 29 3b 63 6f 6e 73 74 20 73 3d 57 65 28 29 3b 28 6f 7c 7c 21 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 68 61 73 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 69 6e 67 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 29 7c 7c 61 77 61 69 74 20 46 65 28 65 2c 72 2c 74 2c 73 29 29 26 26 28 5f 65 3d 21 30 2c 4c 65 28 65 2c 6e 2c 72 29 2c 61 77 61 69 74 20 48 Data Ascii: pathname&&location.search===t.search}(e))return Le(e,n,r),void function(e){const t=e.indexOf("#");t!==e.length-1&&Se(e.substring(t+1))}(e);const s=We();(o\|\|!(null==s?void 0:s.hasLocationChangingEventListeners)\|\|await Fe(e,r,t,s))&&(_e=!0,Le(e,n,r),await H
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 6f 6e 20 78 74 28 29 7b 6c 65 74 20 65 3d 22 58 2d 53 69 67 6e 61 6c 52 2d 55 73 65 72 2d 41 67 65 6e 74 22 3b 72 65 74 75 72 6e 20 43 74 2e 69 73 4e 6f 64 65 26 26 28 65 3d 22 55 73 65 72 2d 41 67 65 6e 74 22 29 2c 5b 65 2c 41 74 28 53 74 2c 50 74 28 29 2c 43 74 2e 69 73 4e 6f 64 65 3f 22 4e 6f 64 65 4a 53 22 3a 22 42 72 6f 77 73 65 72 22 2c 55 74 28 29 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 2c 74 2c 6e 2c 72 29 7b 6c 65 74 20 6f 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 69 67 6e 61 6c 52 2f 22 3b 63 6f 6e 73 74 20 73 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 6f 2b 3d 60 24 7b 73 5b 30 5d 7d 2e 24 7b 73 5b 31 5d 7d 60 2c 6f 2b 3d 60 20 28 24 7b 65 7d 3b 20 60 2c 6f 2b 3d 74 26 26 22 22 21 3d 3d 74 3f 60 24 7b 74 7d 3b 20 60 3a Data Ascii: on xt(){let e="X-SignalR-User-Agent";return Ct.isNode&&(e="User-Agent"),[e,At(St,Pt(),Ct.isNode?"NodeJS":"Browser",Ut())]}function At(e,t,n,r){let o="Microsoft SignalR/";const s=e.split(".");return o+=`${s[0]}.${s[1]}`,o+=` (${e}; `,o+=t&&""!==t?`${t}; `:
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 69 6e 67 20 61 20 72 65 73 75 6c 74 2e 60 29 7d 5f 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 6f 73 65 64 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 44 65 62 75 67 2c 60 48 75 62 43 6f 6e 6e 65 63 74 69 6f 6e 2e 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 6f 73 65 64 28 24 7b 65 7d 29 20 63 61 6c 6c 65 64 20 77 68 69 6c 65 20 69 6e 20 73 74 61 74 65 20 24 7b 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 7d 2e 60 29 2c 74 68 69 73 2e 5f 73 74 6f 70 44 75 72 69 6e 67 53 74 61 72 74 45 72 72 6f 72 3d 74 68 69 73 2e 5f 73 74 6f 70 44 75 72 69 6e 67 53 74 61 72 74 45 72 72 6f 72 7c 7c 65 7c 7c 6e 65 77 20 24 74 28 22 54 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 63 6c 6f 73 65 64 20 62 Data Ascii: ing a result.`)}_connectionClosed(e){this._logger.log(_t.Debug,`HubConnection.connectionClosed(${e}) called while in state ${this._connectionState}.`),this._stopDuringStartError=this._stopDuringStartError\|\|e\|\|new $t("The underlying connection was closed b
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 2c 20 6f 72 20 61 20 70 72 6f 78 79 20 69 73 20 72 65 66 75 73 69 6e 67 2f 62 75 66 66 65 72 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 68 65 63 6b 20 74 68 61 74 20 73 74 69 63 6b 79 20 73 65 73 73 69 6f 6e 73 20 61 72 65 20 65 6e 61 62 6c 65 64 2e 22 29 29 7d 2c 6f 2e 6f 6e 6f 70 65 6e 3d 28 29 3d 3e 7b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 60 53 53 45 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 24 7b 74 68 69 73 2e 5f 75 72 6c 7d 60 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 53 6f 75 72 63 65 3d 6f 2c 73 3d 21 30 2c Data Ascii: s not present on the server, or a proxy is refusing/buffering the connection. If you have multiple servers check that sticky sessions are enabled."))},o.onopen=()=>{this._logger.log(_t.Information,`SSE connected to ${this._url}`),this._eventSource=o,s=!0,
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 6f 72 28 22 49 6e 76 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 4a 53 4f 4e 20 68 75 62 20 70 72 6f 74 6f 63 6f 6c 2e 20 45 78 70 65 63 74 65 64 20 61 20 73 74 72 69 6e 67 2e 22 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 5b 5d 3b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 62 74 2e 69 6e 73 74 61 6e 63 65 29 3b 63 6f 6e 73 74 20 6e 3d 77 74 2e 70 61 72 73 65 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 6e 29 7b 63 6f 6e 73 74 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 74 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 61 79 6c 6f 61 64 2e 22 29 3b 73 77 69 74 63 68 28 6e 2e 74 79 70 65 29 7b 63 61 73 65 20 7a 74 2e 49 Data Ascii: or("Invalid input for JSON hub protocol. Expected a string.");if(!e)return[];null===t&&(t=bt.instance);const n=wt.parse(e),r=[];for(const e of n){const n=JSON.parse(e);if("number"!=typeof n.type)throw new Error("Invalid payload.");switch(n.type){case zt.I
2024-10-24 09:18:04 UTC	16384	IN	Data Raw: 6e 65 64 2e 22 29 3b 76 61 72 20 74 2c 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 6e 3f 6e 2e 63 61 6c 6c 28 65 29 3a 28 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 76 61 6c 75 65 73 3f 5f 5f 76 61 6c 75 65 73 28 65 29 3a 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 2c 74 3d 7b 7d 2c 72 28 22 6e 65 78 74 22 29 2c 72 28 22 74 68 72 6f 77 22 29 2c 72 28 22 72 65 74 75 72 6e 22 29 2c 74 5b 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 74 5b 6e 5d 3d 65 5b 6e 5d 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: ned.");var t,n=e[Symbol.asyncIterator];return n?n.call(e):(e="function"==typeof __values?__values(e):e[Symbol.iterator](),t={},r("next"),r("throw"),r("return"),t[Symbol.asyncIterator]=function(){return this},t);function r(n){t[n]=e[n]&&function(t){return
2024-10-24 09:18:04 UTC	7570	IN	Data Raw: 6e 2c 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 65 2e 69 6e 76 6f 63 61 74 69 6f 6e 49 64 5d 29 3b 72 65 74 75 72 6e 20 5a 6e 2e 77 72 69 74 65 28 74 2e 73 6c 69 63 65 28 29 29 7d 5f 77 72 69 74 65 43 6c 6f 73 65 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 5b 7a 74 2e 43 6c 6f 73 65 2c 6e 75 6c 6c 5d 29 3b 72 65 74 75 72 6e 20 5a 6e 2e 77 72 69 74 65 28 65 2e 73 6c 69 63 65 28 29 29 7d 5f 77 72 69 74 65 41 63 6b 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 5b 7a 74 2e 41 63 6b 2c 65 2e 73 65 71 75 65 6e 63 65 49 64 5d 29 3b 72 65 74 75 72 6e 20 5a 6e 2e 77 72 69 74 65 28 74 2e 73 6c 69 63 65 28 29 29 7d 5f 77 72 69 74 65 53 65 71 75 65 6e 63 65 28 65 Data Ascii: n,e.headers\|\|{},e.invocationId]);return Zn.write(t.slice())}_writeClose(){const e=this._encoder.encode([zt.Close,null]);return Zn.write(e.slice())}_writeAck(e){const t=this._encoder.encode([zt.Ack,e.sequenceId]);return Zn.write(t.slice())}_writeSequence(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49723	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	855	OUT	GET /_framework/blazor.polyfill.min.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T
2024-10-24 09:18:05 UTC	1082	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: application/javascript Content-Length: 2397 Connection: close Set-Cookie: AWSALB=liTCSwdnHbde0vIZZb+dMHS4pjCcWSRG7nFz043S5heKvIA+Jwvn2uoXD/BBJ6zbmUAKBnBAFvrKZ6yMXfMIUAsi4BobGwieCa8+0CQoCC901bdVnPwn7GGUggBz; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/ Set-Cookie: AWSALBCORS=liTCSwdnHbde0vIZZb+dMHS4pjCcWSRG7nFz043S5heKvIA+Jwvn2uoXD/BBJ6zbmUAKBnBAFvrKZ6yMXfMIUAsi4BobGwieCa8+0CQoCC901bdVnPwn7GGUggBz; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache ETag: 8b41f523cc9870bf36be7927991b7a2694e4c9f24414a16f1aa27f6a8ce1fc35 X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:05 UTC	2397	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 69 6d 70 6f 72 74 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 69 6c 65 4e 61 6d 65 2c 20 77 65 62 52 6f 6f 74 50 61 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 74 68 4a 6f 69 6e 28 70 61 74 68 31 2c 20 70 61 74 68 32 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 74 68 31 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 70 61 74 68 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: window._import_ = function (fileName, webRootPath) { if (webRootPath === undefined \|\| webRootPath === null) { webRootPath = ""; } function pathJoin(path1, path2) { if (path1 === null \|\| path1 === undefined) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49722	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	849	OUT	GET /images/egress-logo-dark.svg HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T
2024-10-24 09:18:05 UTC	1070	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: image/svg+xml Content-Length: 29277 Connection: close Set-Cookie: AWSALB=07bIL9UmY9uJQALGqDHM5FpNFvtEn/W3LlOfkQ13ouZVOx/58nj9E2jH82oYhi7ao1Ud+TscHGdkrKfahnkJFkmBn/57Orez8hSrik6tGS6qxMfsYM4ANqbP8xT2; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/ Set-Cookie: AWSALBCORS=07bIL9UmY9uJQALGqDHM5FpNFvtEn/W3LlOfkQ13ouZVOx/58nj9E2jH82oYhi7ao1Ud+TscHGdkrKfahnkJFkmBn/57Orez8hSrik6tGS6qxMfsYM4ANqbP8xT2; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebd35d" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:05 UTC	15314	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 31 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 30 34 37 31 20 36 2e 30 36 35 31 39 4c 31 34 2e 33 33 33 39 20 31 33 2e 38 37 31 39 4c 31 36 2e 36 36 38 34 20 31 37 2e 36 37 33 31 4c 32 39 2e 33 38 31 36 20 39 2e 38 36 37 33 37 4c 32 37 2e 30 34 37 31 20 36 2e 30 36 36 31 39 56 36 2e 30 36 35 31 39 5a 22 20 66 69 6c 6c 3d 22 23 46 37 46 37 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 33 30 34 20 31 37 2e 32 36 37 33 43 32 34 2e 38 31 31 33 20 31 39 2e 32 34 34 Data Ascii: <svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/><path d="M25.1304 17.2673C24.8113 19.244
2024-10-24 09:18:05 UTC	13963	IN	Data Raw: 35 2e 36 32 37 32 20 31 32 38 2e 33 32 32 20 34 35 2e 34 30 31 37 20 31 32 38 2e 30 39 31 20 34 35 2e 32 33 32 36 43 31 32 37 2e 38 37 20 34 35 2e 30 35 36 34 20 31 32 37 2e 35 36 20 34 34 2e 39 36 38 38 20 31 32 37 2e 31 36 31 20 34 34 2e 39 36 38 38 43 31 32 36 2e 37 38 37 20 34 34 2e 39 36 38 38 20 31 32 36 2e 34 38 31 20 34 35 2e 30 35 36 34 20 31 32 36 2e 32 34 33 20 34 35 2e 32 33 32 36 43 31 32 36 2e 30 31 35 20 34 35 2e 34 30 38 37 20 31 32 35 2e 38 34 31 20 34 35 2e 36 33 34 32 20 31 32 35 2e 37 32 37 20 34 35 2e 39 31 30 31 43 31 32 35 2e 36 32 20 34 36 2e 31 37 37 38 20 31 32 35 2e 35 35 39 20 34 36 2e 34 35 33 37 20 31 32 35 2e 35 34 33 20 34 36 2e 37 33 36 35 43 31 32 35 2e 35 33 36 20 34 36 2e 38 35 39 33 20 31 32 35 2e 35 33 32 20 34 37 2e Data Ascii: 5.6272 128.322 45.4017 128.091 45.2326C127.87 45.0564 127.56 44.9688 127.161 44.9688C126.787 44.9688 126.481 45.0564 126.243 45.2326C126.015 45.4087 125.841 45.6342 125.727 45.9101C125.62 46.1778 125.559 46.4537 125.543 46.7365C125.536 46.8593 125.532 47.

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49716	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091805Z-r1755647c66ldfgxa3qp9d53us00000009e0000000006rm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:05 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49717	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: b8a73167-901e-0015-0f59-23b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091805Z-17fbfdc98bbq2x5bzrteug30v800000006yg000000006g7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:05 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49720	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091805Z-17fbfdc98bbnpjstwqrbe0re7n0000000710000000003fay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:05 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49718	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091805Z-17fbfdc98bbvf2fnx6t6w0g25n000000071g0000000050zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:05 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49719	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091805Z-r1755647c66gb86l6k27ha2m1c00000008500000000000ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:05 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49726	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	3016	OUT	GET /_blazor/initializers HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T
2024-10-24 09:18:05 UTC	1000	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/ Set-Cookie: AWSALBCORS=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:05 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-24 09:18:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49725	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	849	OUT	GET /_framework/blazor.server.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T
2024-10-24 09:18:06 UTC	1098	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: text/javascript Content-Length: 151912 Connection: close Set-Cookie: AWSALB=ghfuniggcZmMpvrUKKu5hyzgqNJJVtfoscO1d/M3Wgidh6TPSi1GfbaoODlaqmyx5c8k0T1tBN+mo29ulPQX2wxjlGkKy2WPuklCMzHlbPLBA93ascx9PK1eDT35; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/ Set-Cookie: AWSALBCORS=ghfuniggcZmMpvrUKKu5hyzgqNJJVtfoscO1d/M3Wgidh6TPSi1GfbaoODlaqmyx5c8k0T1tBN+mo29ulPQX2wxjlGkKy2WPuklCMzHlbPLBA93ascx9PK1eDT35; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1dada2bd14359e8" Last-Modified: Fri, 19 Jul 2024 22:34:29 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:06 UTC	15286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 73 2c 73 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 73 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 6b 28 65 29 7b 74 68 69 73 2e 61 66 74 65 72 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 49 6e 66 6f 53 74 6f 72 65 2e 61 64 64 47 6c 6f 62 61 6c 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 29 7d 73 65 74 53 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 74 2c 6e 29 7d 73 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: k(e){this.afterClickCallbacks.push(e),this.eventInfoStore.addGlobalListener("click")}setStopPropagation(e,t,n){this.getEventHandlerInfosForElement(e,!0).stopPropagation(t,n)}setPreventDefault(e,t,n){this.getEventHandlerInfosForElement(e,!0).preventDefault
2024-10-24 09:18:06 UTC	430	IN	Data Raw: 70 6c 61 63 65 28 65 29 7d 65 6c 73 65 20 74 3f 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 65 29 3a 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 7d 28 65 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 29 3b 65 6c 73 65 20 69 66 28 22 63 6c 69 65 6e 74 73 69 64 65 2d 72 6f 75 74 65 72 22 3d 3d 3d 6f 29 42 65 28 72 2c 21 31 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 2c 74 2e 68 69 73 74 6f 72 79 45 6e 74 72 79 53 74 61 74 65 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 22 73 65 72 76 65 72 73 69 64 65 2d 65 6e 68 61 6e 63 65 64 22 21 3d 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 55 6e 73 75 70 70 6f 72 74 65 64 20 70 61 67 65 20 6c 6f 61 64 20 6d 65 63 68 61 6e 69 73 6d 3a 20 24 7b 6f 7d 60 29 3b 43 Data Ascii: place(e)}else t?location.replace(e):location.href=e}(e,t.replaceHistoryEntry);else if("clientside-router"===o)Be(r,!1,t.replaceHistoryEntry,t.historyEntryState,n);else{if("serverside-enhanced"!==o)throw new Error(`Unsupported page load mechanism: ${o}`);C
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 70 61 74 68 6e 61 6d 65 26 26 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3d 3d 3d 74 2e 73 65 61 72 63 68 7d 28 65 29 29 72 65 74 75 72 6e 20 4c 65 28 65 2c 6e 2c 72 29 2c 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 74 21 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 26 26 53 65 28 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2b 31 29 29 7d 28 65 29 3b 63 6f 6e 73 74 20 73 3d 57 65 28 29 3b 28 6f 7c 7c 21 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 68 61 73 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 69 6e 67 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 29 7c 7c 61 77 61 69 74 20 46 65 28 65 2c 72 2c 74 2c 73 29 29 26 26 28 5f 65 3d 21 30 2c 4c 65 28 65 2c 6e 2c 72 29 2c 61 77 61 69 74 20 48 Data Ascii: pathname&&location.search===t.search}(e))return Le(e,n,r),void function(e){const t=e.indexOf("#");t!==e.length-1&&Se(e.substring(t+1))}(e);const s=We();(o\|\|!(null==s?void 0:s.hasLocationChangingEventListeners)\|\|await Fe(e,r,t,s))&&(_e=!0,Le(e,n,r),await H
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 69 73 2e 5f 6e 65 78 74 52 65 63 65 69 76 69 6e 67 53 65 71 75 65 6e 63 65 49 64 3d 31 2c 74 68 69 73 2e 5f 6c 61 74 65 73 74 52 65 63 65 69 76 65 64 53 65 71 75 65 6e 63 65 49 64 3d 30 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 65 64 42 79 74 65 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 49 6e 50 72 6f 67 72 65 73 73 3d 21 31 2c 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 3d 65 2c 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 3d 74 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 53 69 7a 65 3d 6e 7d 61 73 79 6e 63 20 5f 73 65 6e 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 2e 77 72 69 74 65 4d 65 73 73 61 67 65 28 65 29 3b 6c 65 74 20 6e 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 69 66 28 74 Data Ascii: is._nextReceivingSequenceId=1,this._latestReceivedSequenceId=0,this._bufferedByteCount=0,this._reconnectInProgress=!1,this._protocol=e,this._connection=t,this._bufferSize=n}async _send(e){const t=this._protocol.writeMessage(e);let n=Promise.resolve();if(t
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 65 63 74 69 6f 6e 20 6d 6f 76 65 64 20 74 6f 20 74 68 65 20 27 24 7b 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 7d 27 20 66 72 6f 6d 20 74 68 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 65 20 64 75 72 69 6e 67 20 72 65 63 6f 6e 6e 65 63 74 20 61 74 74 65 6d 70 74 2e 20 44 6f 6e 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 2e 60 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 71 74 2e 44 69 73 63 6f 6e 6e 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 63 6f 6d 70 6c 65 74 65 43 6c 6f 73 65 28 29 29 3b 72 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 3a 6e 65 77 20 45 72 72 6f 72 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 4e 65 78 74 52 Data Ascii: ection moved to the '${this._connectionState}' from the reconnecting state during reconnect attempt. Done reconnecting.`),void(this._connectionState===qt.Disconnecting&&this._completeClose());r=e instanceof Error?e:new Error(e.toString()),o=this._getNextR
2024-10-24 09:18:06 UTC	2182	IN	Data Raw: 73 2e 5f 77 65 62 53 6f 63 6b 65 74 3d 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 54 72 61 63 65 2c 22 28 57 65 62 53 6f 63 6b 65 74 73 20 74 72 61 6e 73 70 6f 72 74 29 20 73 6f 63 6b 65 74 20 63 6c 6f 73 65 64 2e 22 29 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 26 26 28 21 74 68 69 73 2e 5f 69 73 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 7c 7c 21 31 21 3d 3d 65 2e 77 61 73 43 6c 65 61 6e 26 26 31 65 33 3d 3d 3d 65 2e 63 6f 64 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 65 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 6e 65 77 20 45 72 72 6f 72 28 60 57 65 62 53 6f 63 6b 65 74 20 63 6c 6f 73 65 64 20 77 69 74 68 20 73 74 Data Ascii: s._webSocket=void 0),this._logger.log(_t.Trace,"(WebSockets transport) socket closed."),this.onclose&&(!this._isCloseEvent(e)\|\|!1!==e.wasClean&&1e3===e.code?e instanceof Error?this.onclose(e):this.onclose():this.onclose(new Error(`WebSocket closed with st
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 77 20 24 74 28 65 29 29 7d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 65 64 3d 21 30 7d 73 65 6e 64 28 65 29 7b 72 65 74 75 72 6e 22 43 6f 6e 6e 65 63 74 65 64 22 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 6e 64 20 64 61 74 61 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 20 74 68 65 20 27 43 6f 6e 6e 65 63 74 65 64 27 20 53 74 61 74 65 2e 22 29 29 3a 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 7c 7c 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 3d 6e 65 77 20 66 6e 28 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 29 29 2c 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 Data Ascii: w $t(e))}this._connectionStarted=!0}send(e){return"Connected"!==this._connectionState?Promise.reject(new Error("Cannot send data if the connection is not in the 'Connected' State.")):(this._sendQueue\|\|(this._sendQueue=new fn(this.transport)),this._sendQue
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 3d 28 53 6e 3d 6e 75 6c 6c 3d 3d 3d 70 72 6f 63 65 73 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 72 6f 63 65 73 73 3f 76 6f 69 64 20 30 3a 70 72 6f 63 65 73 73 2e 65 6e 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 53 6e 3f 76 6f 69 64 20 30 3a 53 6e 2e 54 45 58 54 5f 44 45 43 4f 44 45 52 29 3f 32 30 30 3a 30 3a 45 6e 2c 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 74 79 70 65 3d 65 2c 74 68 69 73 2e 64 61 74 61 3d 74 7d 2c 42 6e 3d 28 50 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e Data Ascii: (null===(Sn=null===process\|\|void 0===process?void 0:process.env)\|\|void 0===Sn?void 0:Sn.TEXT_DECODER)?200:0:En,Mn=function(e,t){this.type=e,this.data=t},Bn=(Pn=function(e,t){return Pn=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.
2024-10-24 09:18:06 UTC	16384	IN	Data Raw: 28 65 29 7b 75 28 61 5b 30 5d 5b 33 5d 2c 65 29 7d 76 61 72 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 6c 28 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 6c 28 22 74 68 72 6f 77 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 65 28 74 29 2c 61 2e 73 68 69 66 74 28 29 2c 61 2e 6c 65 6e 67 74 68 26 26 6c 28 61 5b 30 5d 5b 30 5d 2c 61 5b 30 5d 5b 31 5d 29 7d 7d 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 6f 44 65 63 6f 64 65 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3a 66 6f 72 28 3b 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 61 64 48 65 61 64 42 79 74 65 28 29 2c 74 3d 76 6f 69 64 20 30 3b 69 66 28 65 3e 3d 32 32 34 29 74 3d 65 2d 32 35 36 3b 65 Data Ascii: (e){u(a[0][3],e)}var n}function h(e){l("next",e)}function d(e){l("throw",e)}function u(e,t){e(t),a.shift(),a.length&&l(a[0][0],a[0][1])}}(this,arguments)},e.prototype.doDecodeSync=function(){e:for(;;){var e=this.readHeadByte(),t=void 0;if(e>=224)t=e-256;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49727	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:05 UTC	3056	OUT	GET /images/egress-icon.png HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T; AWSALBCORS=7CJ9870yx1NvsrM9JJYpDdIihQtKXc5S/F1jBcpA0z2xZpZESids4fsoc0UejbMfEFovRl6VrDQ4dLx1v7YdA7JtvXJJWU/wstvOvDJNyuKLdBxe2iNnzggNbz/T
2024-10-24 09:18:05 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:05 GMT Content-Type: image/png Content-Length: 4436 Connection: close Set-Cookie: AWSALB=dG0HIKgkQkKhUuyECuoW7zXoLiVuEBBUmqyRsVNGM2wqZoqQmy9UO+19aWxr24xIpsXb07ncT4ovPs2RfncLdGoqvvI6iuXvyyogkOlJA4oGxLLqjBhVfKS/aWvS; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/ Set-Cookie: AWSALBCORS=dG0HIKgkQkKhUuyECuoW7zXoLiVuEBBUmqyRsVNGM2wqZoqQmy9UO+19aWxr24xIpsXb07ncT4ovPs2RfncLdGoqvvI6iuXvyyogkOlJA4oGxLLqjBhVfKS/aWvS; Expires=Thu, 31 Oct 2024 09:18:05 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebb054" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:05 UTC	4436	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 74 08 06 00 00 00 54 9a 16 27 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 10 e9 49 44 41 54 78 5e ed 9d 0b 94 54 75 1d c7 7f ff 7b 67 57 70 85 d4 44 8c 79 2c a8 28 22 a0 e2 a3 44 3d 29 a6 9e 42 cd ac c0 e3 11 76 66 d1 88 d2 d4 3a 9a 95 16 be 32 3b 9e f2 11 15 0a 33 bb 20 a6 52 f9 44 2d cb 67 64 a4 59 e6 5b e4 b1 33 b3 2b 49 59 0a 8b fb 98 b9 ff be bf 7b ff 2b bb ec 6b 76 ee ff ce bd 33 ec 87 73 67 7e ff df 70 76 1e df fb 7f ff fe ff bf a0 4a 20 d9 1c 25 23 3f 81 a4 88 e0 1a 0b 4f 98 0c 39 96 24 ed e6 fc 07 aa 21 21 ab 89 44 1b 7c 1f 10 49 5c e2 7d f8 b6 90 34 d2 24 f2 1b 48 5a Data Ascii: PNGIHDRttT'sRGBgAMAapHYsodIDATx^Tu{gWpDy,("D=)Bvf:2;3 RD-gdY[3+IY{+kv3sg~pvJ %#?O9$!!D\|I\}4$HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49729	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091806Z-r1755647c66nfj7t97c2qyh6zg00000006d0000000002byz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49728	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091806Z-17fbfdc98bbgzrcvp7acfz2d30000000071g00000000526s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49730	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091806Z-17fbfdc98bb9tt772yde9rhbm8000000075g000000000n3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49732	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:06 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091806Z-r1755647c66m4jttnz6nb8kzng0000000820000000002s5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:06 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49731	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:06 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091806Z-r1755647c66lljn2k9s29ch9ts00000009g00000000058yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:06 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49735	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	3240	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2; AWSALBCORS=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2
2024-10-24 09:18:07 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: application/json Content-Length: 316 Connection: close Set-Cookie: AWSALB=0SVA71WGfUC2jC9frE20LDVnNbY6Npqwug+Um295AvK6cE9s8gFVnfVdcWLVhIO8/azwIuBij210HmM76Qd60QhLjK+dKLGoTwetHtfPL7teQy33q/+nR1JyjDDG; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/ Set-Cookie: AWSALBCORS=0SVA71WGfUC2jC9frE20LDVnNbY6Npqwug+Um295AvK6cE9s8gFVnfVdcWLVhIO8/azwIuBij210HmM76Qd60QhLjK+dKLGoTwetHtfPL7teQy33q/+nR1JyjDDG; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:07 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 36 72 74 32 31 2d 54 52 71 43 6d 49 37 34 4d 4e 73 5f 64 5f 77 67 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 50 34 74 32 2d 57 31 32 4d 6b 70 56 42 71 6b 61 33 46 4f 64 4f 41 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"6rt21-TRqCmI74MNs_d_wg","connectionToken":"P4t2-W12MkpVBqka3FOdOA","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49737	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	842	OUT	GET /_blazor/initializers HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2; AWSALBCORS=PnKVp8NRyW3gsBOqZaO2vpgpOqXYXuozBE/2cohPwUJdAw4Ld2X6uhBm6txtnvvLn5YhcjpEnSRC1zEIsaTWojP9EW7EpmvM3YJcY9AjN+Jxuz9x067undS8sbE2
2024-10-24 09:18:07 UTC	1000	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=LE0J+tPZI7LVSkNpXWRzA3rF2XcZ/Yc64aUva/AFuti1QVqVM3eRBn/qEVA0UHN922edrCNO3DwOrPm1zbkuynyQNq7uDg9f1F9IJdkrcml7stcGqISVy5y7KkGS; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/ Set-Cookie: AWSALBCORS=LE0J+tPZI7LVSkNpXWRzA3rF2XcZ/Yc64aUva/AFuti1QVqVM3eRBn/qEVA0UHN922edrCNO3DwOrPm1zbkuynyQNq7uDg9f1F9IJdkrcml7stcGqISVy5y7KkGS; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:07 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-24 09:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49736	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:06 UTC	844	OUT	GET /images/egress-icon.png HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=dG0HIKgkQkKhUuyECuoW7zXoLiVuEBBUmqyRsVNGM2wqZoqQmy9UO+19aWxr24xIpsXb07ncT4ovPs2RfncLdGoqvvI6iuXvyyogkOlJA4oGxLLqjBhVfKS/aWvS; AWSALBCORS=dG0HIKgkQkKhUuyECuoW7zXoLiVuEBBUmqyRsVNGM2wqZoqQmy9UO+19aWxr24xIpsXb07ncT4ovPs2RfncLdGoqvvI6iuXvyyogkOlJA4oGxLLqjBhVfKS/aWvS
2024-10-24 09:18:07 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: image/png Content-Length: 4436 Connection: close Set-Cookie: AWSALB=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/ Set-Cookie: AWSALBCORS=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebb054" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:07 UTC	4436	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 74 08 06 00 00 00 54 9a 16 27 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 10 e9 49 44 41 54 78 5e ed 9d 0b 94 54 75 1d c7 7f ff 7b 67 57 70 85 d4 44 8c 79 2c a8 28 22 a0 e2 a3 44 3d 29 a6 9e 42 cd ac c0 e3 11 76 66 d1 88 d2 d4 3a 9a 95 16 be 32 3b 9e f2 11 15 0a 33 bb 20 a6 52 f9 44 2d cb 67 64 a4 59 e6 5b e4 b1 33 b3 2b 49 59 0a 8b fb 98 b9 ff be bf 7b ff 2b bb ec 6b 76 ee ff ce bd 33 ec 87 73 67 7e ff df 70 76 1e df fb 7f ff fe ff bf a0 4a 20 d9 1c 25 23 3f 81 a4 88 e0 1a 0b 4f 98 0c 39 96 24 ed e6 fc 07 aa 21 21 ab 89 44 1b 7c 1f 10 49 5c e2 7d f8 b6 90 34 d2 24 f2 1b 48 5a Data Ascii: PNGIHDRttT'sRGBgAMAapHYsodIDATx^Tu{gWpDy,("D=)Bvf:2;3 RD-gdY[3+IY{+kv3sg~pvJ %#?O9$!!D\|I\}4$HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 09:18:07 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=26819 Date: Thu, 24 Oct 2024 09:18:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49742	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff230e40-901e-0016-5092-1fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091807Z-r1755647c66n5bjpba5s4mu9d000000009k000000000352k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49738	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091807Z-r1755647c66h2wzt2z0cr0zc7400000003sg0000000011f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49739	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091807Z-17fbfdc98bbn5xh71qanksxprn0000000750000000004k0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49740	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091807Z-17fbfdc98bb8xnvm6t4x6ec5m400000006v00000000069by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49741	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091807Z-17fbfdc98bbq2x5bzrteug30v80000000760000000000cy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49743	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:07 UTC	1022	OUT	GET /_blazor?id=P4t2-W12MkpVBqka3FOdOA HTTP/1.1 Host: links.us1.defend.egress.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://links.us1.defend.egress.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=0SVA71WGfUC2jC9frE20LDVnNbY6Npqwug+Um295AvK6cE9s8gFVnfVdcWLVhIO8/azwIuBij210HmM76Qd60QhLjK+dKLGoTwetHtfPL7teQy33q/+nR1JyjDDG; AWSALBCORS=0SVA71WGfUC2jC9frE20LDVnNbY6Npqwug+Um295AvK6cE9s8gFVnfVdcWLVhIO8/azwIuBij210HmM76Qd60QhLjK+dKLGoTwetHtfPL7teQy33q/+nR1JyjDDG Sec-WebSocket-Key: FSSjHksz2f5bvyF8urWthQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-24 09:18:07 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:07 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Set-Cookie: AWSALB=BMhSpwvH1iq+OlH+OgzT4hdsPWpzvcstJQrL3qgdpFF26qsqgchoUL+9oGWtad1CGZYwy7p/1RRQ6qzfn5x6s5n7nKFA5ybvkZwE7Dovct9vUvw8G1RmfTLFqjfa; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/ Set-Cookie: AWSALBCORS=BMhSpwvH1iq+OlH+OgzT4hdsPWpzvcstJQrL3qgdpFF26qsqgchoUL+9oGWtad1CGZYwy7p/1RRQ6qzfn5x6s5n7nKFA5ybvkZwE7Dovct9vUvw8G1RmfTLFqjfa; Expires=Thu, 31 Oct 2024 09:18:07 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49744	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-r1755647c66nfj7t97c2qyh6zg00000006bg000000003w6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49745	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-r1755647c66sn7s9kfw6gzvyp000000009fg000000005n8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49751	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	858	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4; AWSALBCORS=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4
2024-10-24 09:18:08 UTC	986	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=NO+5x+tyqAdI5x3WUwMqeGMzMecuC38mxTBKQskQx638CXcwyxaXfCvgAm40+yYbZeIwWCn4NL2iMYeeaeYGOdvChoX/DrDgBlhRIzG5QT8BB+vFVaryDiDv5JXw; Expires=Thu, 31 Oct 2024 09:18:08 GMT; Path=/ Set-Cookie: AWSALBCORS=NO+5x+tyqAdI5x3WUwMqeGMzMecuC38mxTBKQskQx638CXcwyxaXfCvgAm40+yYbZeIwWCn4NL2iMYeeaeYGOdvChoX/DrDgBlhRIzG5QT8BB+vFVaryDiDv5JXw; Expires=Thu, 31 Oct 2024 09:18:08 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49746	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b4b04932-601e-0050-10e3-202c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-r1755647c66ldfgxa3qp9d53us00000009k0000000003n74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49747	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-17fbfdc98bb6q7cv86r4xdspkg000000071g000000006gru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:08 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49748	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-17fbfdc98bb96dqv0e332dtg600000000740000000000b1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 09:18:08 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26898 Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 09:18:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49753	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	3240	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4; AWSALBCORS=xLFbHDdqCb3m7f4iO1ORZWgTht/tn2HecUeOcRFg4D1K65wCGau9lnpgCZEUbznU8T4onvTcRG/zdglaP5qyfsS+Z3E6dTIbULwuf9FDXi7ecWCIauWvj/E56kK4
2024-10-24 09:18:08 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: application/json Content-Length: 316 Connection: close Set-Cookie: AWSALB=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG; Expires=Thu, 31 Oct 2024 09:18:08 GMT; Path=/ Set-Cookie: AWSALBCORS=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG; Expires=Thu, 31 Oct 2024 09:18:08 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:08 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 43 65 6f 79 35 61 51 52 47 34 77 7a 4f 63 2d 43 71 45 79 5a 72 67 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 44 45 69 59 4d 78 65 45 72 61 72 70 4a 66 6e 5f 2d 4b 41 6e 4f 41 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"Ceoy5aQRG4wzOc-CqEyZrg","connectionToken":"DEiYMxeErarpJfn_-KAnOA","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-17fbfdc98bbqc8zsbguzmabx6800000006w0000000005c59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:08 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a019224c-501e-0047-645d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091808Z-17fbfdc98bb96dqv0e332dtg60000000072g000000001hr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-r1755647c66kv68zfmyfrbcqzg000000081g000000003m7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-r1755647c66n5bjpba5s4mu9d000000009pg0000000005g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-r1755647c66ldfgxa3qp9d53us00000009kg000000002kfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49759	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	3188	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488026 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG; AWSALBCORS=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG
2024-10-24 09:18:09 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Set-Cookie: AWSALB=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW; Expires=Thu, 31 Oct 2024 09:18:09 GMT; Path=/ Set-Cookie: AWSALBCORS=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW; Expires=Thu, 31 Oct 2024 09:18:09 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49760	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	858	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG; AWSALBCORS=Yg8aTzEQyOZ/HDFMgFJVylgwnpezFxYmw9zV5cIf3S1dmQWFm6EB5ozRbvI9otwbxN38ef6muR87pzRbL2bUF/m4HViQVxFqRDjut+UVnHB3hoFOnU//PzbJXveG
2024-10-24 09:18:09 UTC	986	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=4EkaFt6GIjgRWPIIVXuN2TACmWvGfgiWZHP5FKSpptFVbBt7YVDvoZj1AvFCjBMJ58blJ8SgN8Fb5IJiJFS7WcLewZ9w8Ywc/5s8NaUOzQJQ2vtuwivNx3D5uhK4; Expires=Thu, 31 Oct 2024 09:18:09 GMT; Path=/ Set-Cookie: AWSALBCORS=4EkaFt6GIjgRWPIIVXuN2TACmWvGfgiWZHP5FKSpptFVbBt7YVDvoZj1AvFCjBMJ58blJ8SgN8Fb5IJiJFS7WcLewZ9w8Ywc/5s8NaUOzQJQ2vtuwivNx3D5uhK4; Expires=Thu, 31 Oct 2024 09:18:09 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-17fbfdc98bb9tt772yde9rhbm8000000074g000000001fw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ba25aa5e-401e-0015-7950-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-17fbfdc98bb6j78ntkx6e2fx4c0000000700000000003ge2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-r1755647c66ldfgxa3qp9d53us00000009mg000000001yg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-17fbfdc98bbg2mc9qrpn009kgs000000075g000000003x7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:09 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:09 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: dd484488-801e-0035-08d8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091809Z-17fbfdc98bblvnlh5w88rcarag00000007a0000000000fk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49767	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	3188	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488888 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW; AWSALBCORS=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW
2024-10-24 09:18:10 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: application/octet-stream Content-Length: 3 Connection: close Set-Cookie: AWSALB=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/ Set-Cookie: AWSALBCORS=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:10 UTC	3	IN	Data Raw: 7b 7d 1e Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49766	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	3278	OUT	POST /_blazor?id=DEiYMxeErarpJfn_-KAnOA HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 38 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW; AWSALBCORS=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW
2024-10-24 09:18:10 UTC	38	OUT	Data Raw: 7b 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 62 6c 61 7a 6f 72 70 61 63 6b 22 2c 22 76 65 72 73 69 6f 6e 22 3a 31 7d 1e Data Ascii: {"protocol":"blazorpack","version":1}
2024-10-24 09:18:10 UTC	970	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=kO7QviLa97orOIjiRWYT28wQw6cMYyVPSaWgByt3sLCotSwYV9r8LXBuGCTuW+Fe/rwi03Jr4yJnq82IjYNctE90NlYRTJhadU0aDTjQP484v8IbslfS0Q36Nulg; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/ Set-Cookie: AWSALBCORS=kO7QviLa97orOIjiRWYT28wQw6cMYyVPSaWgByt3sLCotSwYV9r8LXBuGCTuW+Fe/rwi03Jr4yJnq82IjYNctE90NlYRTJhadU0aDTjQP484v8IbslfS0Q36Nulg; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49768	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	871	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488026 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW; AWSALBCORS=9Qm5k1qoi4MiboAIt4d6AVVXe6fUcTzWB9rs3m/qXlHNwDRehqkNcXFWF3PINRMCY28kwIfc1qHUOuFR1wm9BoPRT+cdwmOytj/+FjKC7M5AWxbwmI9Df3E8cdEW
2024-10-24 09:18:11 UTC	1079	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: application/octet-stream Content-Length: 101 Connection: close Set-Cookie: AWSALB=pNclZbCk1Opnpc9vYnoryTSwDhodCWnlleLofFpZL+nGwXdO6AF1ex4URju4vqoJhISFPUygWoCn7P5gHx46AYOlhaZsMlQe8yAix5Z5XKopYJmIF1mFu6DD60ll; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/ Set-Cookie: AWSALBCORS=pNclZbCk1Opnpc9vYnoryTSwDhodCWnlleLofFpZL+nGwXdO6AF1ex4URju4vqoJhISFPUygWoCn7P5gHx46AYOlhaZsMlQe8yAix5Z5XKopYJmIF1mFu6DD60ll; Expires=Thu, 31 Oct 2024 09:18:10 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:11 UTC	101	IN	Data Raw: 64 96 01 80 c0 b0 4a 53 2e 42 65 67 69 6e 49 6e 76 6f 6b 65 4a 53 95 02 d9 29 42 6c 61 7a 6f 72 2e 5f 69 6e 74 65 72 6e 61 6c 2e 61 74 74 61 63 68 57 65 62 52 65 6e 64 65 72 65 72 49 6e 74 65 72 6f 70 be 5b 31 2c 7b 22 5f 5f 64 6f 74 4e 65 74 4f 62 6a 65 63 74 22 3a 31 7d 2c 7b 7d 2c 7b 7d 5d 03 00 90 Data Ascii: dJS.BeginInvokeJS)Blazor._internal.attachWebRendererInterop[1,{"__dotNetObject":1},{},{}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091810Z-r1755647c66dj7986akr8tvaw400000008v00000000026p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091810Z-17fbfdc98bbrx2rj4asdpg8sbs00000002xg0000000068mx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091810Z-17fbfdc98bbg2mc9qrpn009kgs000000076g000000003d19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091810Z-17fbfdc98bblvnlh5w88rcarag000000074g000000005heg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:10 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:10 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091810Z-r1755647c66xkk8sn093pbsnz800000000rg000000000emh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 09:18:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49774	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	3280	OUT	POST /_blazor?id=DEiYMxeErarpJfn_-KAnOA HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 3417 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/octet-stream X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; AWSALBCORS=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8
2024-10-24 09:18:11 UTC	3417	OUT	Data Raw: d7 1a 95 01 80 a1 30 ac 53 74 61 72 74 43 69 72 63 75 69 74 94 d9 24 68 74 74 70 73 3a 2f 2f 6c 69 6e 6b 73 2e 75 73 31 2e 64 65 66 65 6e 64 2e 65 67 72 65 73 73 2e 63 6f 6d 2f da 07 d0 68 74 74 70 73 3a 2f 2f 6c 69 6e 6b 73 2e 75 73 31 2e 64 65 66 65 6e 64 2e 65 67 72 65 73 73 2e 63 6f 6d 2f 57 61 72 6e 69 6e 67 3f 63 72 49 64 3d 36 37 31 39 63 31 66 65 30 61 30 35 39 34 62 64 30 65 33 65 66 65 38 36 26 44 6f 6d 61 69 6e 3d 6c 63 61 74 74 65 72 74 6f 6e 2e 63 6f 6d 26 4c 61 6e 67 3d 65 6e 26 42 61 73 65 36 34 55 72 6c 3d 65 4e 6f 6c 56 65 66 4f 70 45 67 4d 66 4b 4c 64 6a 77 78 7a 30 75 6c 45 7a 6a 6e 7a 35 77 51 4d 44 44 44 6b 44 45 39 5f 7a 5a 37 55 51 68 32 71 33 4d 59 75 75 36 74 31 48 5a 65 5f 66 6e 36 32 75 61 55 67 6d 50 72 64 31 6d 58 52 44 76 6e Data Ascii: 0StartCircuit$https://links.us1.defend.egress.com/https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn
2024-10-24 09:18:11 UTC	970	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=j1RL/SMbs587ghIC41DDm0rFmQoMN3J0w0NXop+BA3lrx2qgDf8PIvB1WYEmVLMyqfi0nLNqRpwh4pbvoCu+TG86LZxb2jQHy5PAcDtTzQxToHSoZjOqd0uF1r9f; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/ Set-Cookie: AWSALBCORS=j1RL/SMbs587ghIC41DDm0rFmQoMN3J0w0NXop+BA3lrx2qgDf8PIvB1WYEmVLMyqfi0nLNqRpwh4pbvoCu+TG86LZxb2jQHy5PAcDtTzQxToHSoZjOqd0uF1r9f; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49776	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	855	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; AWSALBCORS=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8
2024-10-24 09:18:11 UTC	1078	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: application/octet-stream Content-Length: 29 Connection: close Set-Cookie: AWSALB=lUchzo6na+riwunCkoB59zNYcOQZ/xbQpohgYTHmasMH1n6A4VgFTAVcPCuan+DjwDsLONfii0UgUM+9hd2RErSa435EZFh53yAt7JpPO7gKe3xK2J8dX48hasgp; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/ Set-Cookie: AWSALBCORS=lUchzo6na+riwunCkoB59zNYcOQZ/xbQpohgYTHmasMH1n6A4VgFTAVcPCuan+DjwDsLONfii0UgUM+9hd2RErSa435EZFh53yAt7JpPO7gKe3xK2J8dX48hasgp; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:11 UTC	29	IN	Data Raw: 1c 96 01 80 c0 b2 4a 53 2e 41 74 74 61 63 68 43 6f 6d 70 6f 6e 65 6e 74 92 00 a1 30 90 Data Ascii: JS.AttachComponent0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49777	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	871	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488888 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; AWSALBCORS=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8
2024-10-24 09:18:11 UTC	1080	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: application/octet-stream Content-Length: 1412 Connection: close Set-Cookie: AWSALB=DWMJeCxPKcgHlblNcKf5UK/j8vogM7dHFuE6zmk91sE+2hCLSsTQahKiQhGWnknwOBJFO/3mwFEiPnlmmmi1XvikKlj2sRObgjQ4lUiA0I/iBr6I3aYYaaYtuT6u; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/ Set-Cookie: AWSALBCORS=DWMJeCxPKcgHlblNcKf5UK/j8vogM7dHFuE6zmk91sE+2hCLSsTQahKiQhGWnknwOBJFO/3mwFEiPnlmmmi1XvikKlj2sRObgjQ4lUiA0I/iBr6I3aYYaaYtuT6u; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 09:18:11 UTC	1412	IN	Data Raw: 9d 09 96 01 80 c0 ae 4a 53 2e 52 65 6e 64 65 72 42 61 74 63 68 92 02 c5 04 84 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 01 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 04 00 00 00 ff ff ff ff 02 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 07 00 00 00 ff ff ff ff 03 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 0a 00 00 00 ff ff ff ff 04 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 0c 00 00 00 ff ff ff ff 05 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 18 00 00 00 ff ff ff ff 06 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 19 00 00 00 ff ff ff ff 07 00 00 00 00 00 00 00 18 00 00 00 30 00 00 00 48 00 00 00 60 00 00 00 78 00 00 00 90 00 00 00 1c 00 00 00 04 00 00 00 04 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 Data Ascii: JS.RenderBatch0H`x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49775	75.2.120.244	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	3188	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761489761 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8; AWSALBCORS=iuEF7TppB54bhafms5NbxqhwNsnX4i9CW5eoRogAbVn2bbrmm5lV4p6lGrlPz/bnaoi5p45jTAcQJI5EbzrfcMPJ9BEM1ZHlgPMI7odDZuO3XhABbQtRHmz9Ebs8
2024-10-24 09:18:12 UTC	1052	IN	HTTP/1.1 204 No Content Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/plain Connection: close Set-Cookie: AWSALB=HQ2sXUYmjJbGprgzec3pzSprKh0qMvhDGzomU14wtEJ7t9Xh9lDEa/8jHWERKCxHktQxDCqKSfaQBYa+I7kO+IAIqJ47clEWzXiaQn5x3Yn1zWBWMhimajrkiObJ; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/ Set-Cookie: AWSALBCORS=HQ2sXUYmjJbGprgzec3pzSprKh0qMvhDGzomU14wtEJ7t9Xh9lDEa/8jHWERKCxHktQxDCqKSfaQBYa+I7kO+IAIqJ47clEWzXiaQn5x3Yn1zWBWMhimajrkiObJ; Expires=Thu, 31 Oct 2024 09:18:11 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091811Z-17fbfdc98bbvwcxrk0yzwg4d58000000075g000000002k7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:11 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091811Z-r1755647c66h2wzt2z0cr0zc7400000003kg000000006btp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091811Z-17fbfdc98bb2fzn810kvcg2zng000000079g000000000ehz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 5d0ca943-801e-0067-2ecf-20fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091811Z-r1755647c66n5bjpba5s4mu9d000000009f00000000061fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:11 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091811Z-17fbfdc98bb7qlzm4x52d2225c0000000700000000004xxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49783	99.83.228.139	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	855	OUT	GET /_blazor?id=DEiYMxeErarpJfn_-KAnOA HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8BNvZ7yTKKJBnWlSSW-fQyrVDCx165x4aOvFLgNQq1gK3jxSIp4rVGYYqZHNuKEy4JG_LeYSDI67AOlm8KV41yQm39KetnHHsAMOZI9615beddUPJRKQKBrht-ri4gwHA0N8_mvEQ5-UKScOVWT7HzY; AWSALB=DWMJeCxPKcgHlblNcKf5UK/j8vogM7dHFuE6zmk91sE+2hCLSsTQahKiQhGWnknwOBJFO/3mwFEiPnlmmmi1XvikKlj2sRObgjQ4lUiA0I/iBr6I3aYYaaYtuT6u; AWSALBCORS=DWMJeCxPKcgHlblNcKf5UK/j8vogM7dHFuE6zmk91sE+2hCLSsTQahKiQhGWnknwOBJFO/3mwFEiPnlmmmi1XvikKlj2sRObgjQ4lUiA0I/iBr6I3aYYaaYtuT6u
2024-10-24 09:19:12 UTC	566	IN	HTTP/1.1 504 Gateway Time-out Server: awselb/2.0 Date: Thu, 24 Oct 2024 09:19:12 GMT Content-Type: text/html Content-Length: 534 Connection: close Set-Cookie: AWSALB=u/RLF32LXkfhBM5lTpwvK7aFKwKAFrAqm5mWxKtBwmqVqqZK6Wd1ulyAs+C2RQzFjq1gvOFuCDKA4XSIxL6VHITtmC35IbdfPuwweIoqLRiTtCLf6DdRZt4mF/S7; Expires=Thu, 31 Oct 2024 09:18:12 GMT; Path=/ Set-Cookie: AWSALBCORS=u/RLF32LXkfhBM5lTpwvK7aFKwKAFrAqm5mWxKtBwmqVqqZK6Wd1ulyAs+C2RQzFjq1gvOFuCDKA4XSIxL6VHITtmC35IbdfPuwweIoqLRiTtCLf6DdRZt4mF/S7; Expires=Thu, 31 Oct 2024 09:18:12 GMT; Path=/; SameSite=None; Secure
2024-10-24 09:19:12 UTC	534	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 Data Ascii: <html><head><title>504 Gateway Time-out</title></head><body><center><h1>504 Gateway Time-out</h1></center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62ae5dc2-001e-0079-2456-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091812Z-17fbfdc98bb94gkbvedtsa5ef4000000072g00000000487n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091812Z-17fbfdc98bb4k5z6ayu7yh2rsn0000000760000000001upq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091812Z-r1755647c66f2zlraraf0y5hrs00000007yg000000005v10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091812Z-17fbfdc98bbrx2rj4asdpg8sbs00000003500000000004u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:12 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091812Z-r1755647c66s2pfjx11r8ys39000000000t0000000004uny x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:13 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 522c57e6-d01e-0065-4887-20b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091813Z-r1755647c66kmfl29f2su56tc40000000ab0000000002gxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:13 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091813Z-17fbfdc98bbpc9nz0r22pywp080000000730000000005hms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:13 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091813Z-r1755647c66n5bjpba5s4mu9d000000009g0000000005kqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:13 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 8ae0ddcf-601e-0002-0c50-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091813Z-17fbfdc98bbn5xh71qanksxprn000000075g0000000045yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:13 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091813Z-r1755647c66x7vzx9armv8e3cw00000000mg0000000003ce x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:14 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091814Z-r1755647c66z4pt7cv1pnqayy400000009eg000000005gqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:14 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091814Z-17fbfdc98bbx4f4q0941cebmvs000000073g000000000hx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:14 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091814Z-17fbfdc98bb7qlzm4x52d2225c0000000740000000001uuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:14 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f2e4413f-c01e-000b-5f59-23e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091814Z-17fbfdc98bbndwgn5b4pg7s8bs00000006yg0000000046fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:14 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091814Z-17fbfdc98bbpc9nz0r22pywp08000000077g000000001w2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:15 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:15 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091815Z-17fbfdc98bbvvplhck7mbap4bw00000000eg000000000c1c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:15 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:15 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:15 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091815Z-17fbfdc98bbgzrcvp7acfz2d300000000770000000000y30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:15 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:15 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091815Z-17fbfdc98bbg2mc9qrpn009kgs000000074g0000000044rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:15 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:15 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091815Z-r1755647c66z4pt7cv1pnqayy400000009ng000000001023 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:15 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:15 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:15 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091815Z-17fbfdc98bbndwgn5b4pg7s8bs00000007300000000015ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:15 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:16 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091816Z-17fbfdc98bb4k5z6ayu7yh2rsn000000072g000000004h3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:16 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ba028032-401e-00ac-39db-200a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091816Z-r1755647c66cdf7jx43n17haqc0000000a80000000004xwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:16 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091816Z-r1755647c66fnxpdavnqahfp1w00000007tg000000001y8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:16 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091816Z-r1755647c66mgrw7zd8m1pn55000000007xg0000000069ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:16 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091816Z-r1755647c66n5bjpba5s4mu9d000000009ng000000000zx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:17 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2067cf5d-601e-0001-3659-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091817Z-17fbfdc98bbgzrcvp7acfz2d300000000730000000003seq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:17 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:17 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 310b9d61-301e-0051-4f21-2138bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091817Z-r1755647c66vrwbmeqw88hpesn00000009d00000000000g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:17 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:17 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091817Z-17fbfdc98bbnpjstwqrbe0re7n000000074g000000000rcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:17 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091817Z-17fbfdc98bbnhb2b0umpa641c80000000700000000004cbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:17 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091817Z-17fbfdc98bb6j78ntkx6e2fx4c0000000740000000000a50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:18 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091818Z-17fbfdc98bbvcvlzx1n0fduhm000000007a0000000000ee8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:18 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091818Z-r1755647c66j878m0wkraqty3800000007zg0000000058bc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:18 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:18 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091818Z-17fbfdc98bbq2x5bzrteug30v800000007400000000022eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:18 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:18 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:18 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091818Z-17fbfdc98bbn5xh71qanksxprn0000000730000000005r9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:18 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:18 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091818Z-r1755647c66s2pfjx11r8ys39000000000tg000000004qb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-r1755647c66m4jttnz6nb8kzng00000007zg000000004pah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:19 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-r1755647c66mgrw7zd8m1pn55000000007zg0000000042zk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:19 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-17fbfdc98bbwfg2nvhsr4h37pn00000007300000000047qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:19 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-r1755647c66xkk8sn093pbsnz800000000h00000000032wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:19 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:19 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-17fbfdc98bbvvplhck7mbap4bw00000000fg000000000etu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:19 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:19 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091819Z-r1755647c66fnxpdavnqahfp1w00000007qg000000004r8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:19 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-r1755647c66z4pt7cv1pnqayy400000009e00000000089pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-17fbfdc98bb7qlzm4x52d2225c000000071g00000000432y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-17fbfdc98bb6j78ntkx6e2fx4c000000070g000000003htv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-r1755647c66nxct5p0gnwngmx000000008q0000000006a23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-17fbfdc98bbngfjxtncsq24exs00000000mg000000001n8b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-17fbfdc98bb6q7cv86r4xdspkg000000077g000000000ts6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-r1755647c66zs9x4962sbyaz1w00000007tg000000001g35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 11479f8e-d01e-00ad-32c9-20e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-r1755647c66x46wg1q56tyyk6800000008wg000000000wwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:20 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:20 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091820Z-17fbfdc98bbgzrcvp7acfz2d300000000720000000005cyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:21 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:21 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091821Z-r1755647c66dj7986akr8tvaw400000008u0000000002zte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:21 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091821Z-r1755647c66lljn2k9s29ch9ts00000009ng0000000011gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:21 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091821Z-r1755647c66l72xfkr6ug378ks00000008g00000000013m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:21 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:21 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091821Z-r1755647c66n5bjpba5s4mu9d000000009g0000000005kzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:21 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:21 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:21 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091821Z-r1755647c66vrwbmeqw88hpesn00000009900000000044ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:22 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dc072958-d01e-0065-5150-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091822Z-17fbfdc98bblptj7fr9s141cpc000000073000000000366c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:22 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d2e4573f-901e-0067-4de3-20b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091822Z-r1755647c66kmfl29f2su56tc40000000a6000000000755n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:22 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 33f58e49-701e-0053-6bb3-203a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091822Z-r1755647c66x7vzx9armv8e3cw00000000gg000000000eqz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:22 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091822Z-r1755647c66j878m0wkraqty38000000082g0000000022k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:22 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091822Z-r1755647c66sn7s9kfw6gzvyp000000009n00000000017yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:23 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091823Z-17fbfdc98bb75b2fuh11781a0n00000006z0000000003v5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:23 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091823Z-r1755647c66nxct5p0gnwngmx000000008u0000000002y59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:23 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:23 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091823Z-17fbfdc98bb96dqv0e332dtg6000000007200000000024t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:23 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:23 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091823Z-17fbfdc98bbcrtjhdvnfuyp288000000074000000000514m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091823Z-r1755647c66tmf6g4720xfpwpn0000000ab0000000002erb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:24 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:24 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091824Z-r1755647c66x7vzx9armv8e3cw00000000kg000000000rws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:24 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:24 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:24 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0466c600-e01e-0052-4c95-1fd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091824Z-r1755647c66cdf7jx43n17haqc0000000abg0000000022ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:24 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091824Z-r1755647c66prnf6k99z0m3kzc00000009ng000000000zc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:24 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 09861b75-b01e-005c-4550-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091824Z-17fbfdc98bb8xnvm6t4x6ec5m4000000072g0000000000a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091824Z-17fbfdc98bbvvplhck7mbap4bw00000000bg000000000fyr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:25 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 475da012-701e-0001-146c-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091825Z-17fbfdc98bb7qlzm4x52d2225c000000074g000000001bk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:25 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:25 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091825Z-r1755647c66x7vzx9armv8e3cw00000000fg000000000eu9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:25 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091825Z-r1755647c668mbb8rg8s8fbge400000006gg000000000su8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:25 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091825Z-17fbfdc98bbpc9nz0r22pywp08000000076g000000002ta5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:26 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091826Z-17fbfdc98bbnpjstwqrbe0re7n00000006yg000000005vb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:18:26 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 09:18:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:18:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T091826Z-r1755647c66vrwbmeqw88hpesn000000098g00000000415g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:18:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Target ID:	0
Start time:	05:17:56
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:17:58
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2196,i,17227430046646712005,2420801444140375319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:18:01
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	TCP traffic: 192.168.2.7:59850 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:52392 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:51592 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72

Source: global traffic	DNS traffic detected: DNS query: links.us1.defend.egress.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6556, Parent PID: 5796

General