Edit tour

Windows Analysis Report
https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=

Overview

General Information

Sample URL:	https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=
Analysis ID:	1541909
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTTP GET or POST without a user agent

Queries the volume information (name, serial number etc) of a device

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2212,i,7468168222127439658,6562450614758436169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

HxOutlook.exe (PID: 6952 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca MD5: 6F8EAC2C377C8F16D91CB5AC8B8DBF5F)

HxAccounts.exe (PID: 2908 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca MD5: 6FEB00C9A2C3FF66230658B3012BAB6A)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:57139 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.7:56973 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /ab?clientId=34B81480-FAB4-4DA6-B9F9-8E6B7A4BF3C9 HTTP/1.1X-OfficeApp-BuildVersion: 16.0.11629.20316Accept-Encoding: gzip, deflateX-OfficeApp-Platform: universalX-OfficeApp-Language: en-CHX-OutlookMobile-Architecture: x64X-OutlookMobile-BuildFlavor: shipX-OutlookMobile-Environment: ProductionX-OfficeApp-MsoVersion: 10.0.19045X-OutlookMobile-HxServiceAccounts: NoneContent-Length: 0Content-Encoding: gzipHost: outlookmobile-office365-tas.msedge.netConnection: Keep-AliveCache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM= HTTP/1.1Host: go2.sentinelone.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ab?clientId=34B81480-FAB4-4DA6-B9F9-8E6B7A4BF3C9 HTTP/1.1X-OfficeApp-BuildVersion: 16.0.11629.20316Accept-Encoding: gzip, deflateX-OfficeApp-Platform: universalX-OfficeApp-Language: en-CHX-OutlookMobile-Architecture: x64X-OutlookMobile-BuildFlavor: shipX-OutlookMobile-Environment: ProductionX-OfficeApp-MsoVersion: 10.0.19045X-OutlookMobile-HxServiceAccounts: NoneContent-Length: 0Content-Encoding: gzipHost: outlookmobile-office365-tas.msedge.netConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: go2.sentinelone.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/780dddc8-18a1-5781-895a-a690464fa89chttp://test-exp-s2s.msedge.net
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/http://test-exp-s2s.msedge.net/ab/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.aadrm.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.aadrm.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.cortana.ai
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.office.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.onedrive.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://api.scheduler.
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp, 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://app.powerbi.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://augloop.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 00000012.00000002.2087446703.000001CAE6000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 00000012.00000002.2087446703.000001CAE6000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 00000012.00000002.2087446703.000001CAE6000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://canary.designerapp.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.entity.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/https://config.edge.skype.net/config/v1/standardprotectionsl
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/stricthandlechecksdisableextensionpointscontrolflowguardbloc
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cortana.ai
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cortana.ai/api
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://cr.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://d.docs.live.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dev.cortana.ai
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://devnull.onenote.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://directory.services.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ecs.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://graph.windows.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://graph.windows.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://invites.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://lifecycle.office.com
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp, 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://make.powerautomate.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://management.azure.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://management.azure.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://messaging.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://mss.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ncus.contentsync.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: HxAccounts.exe, 00000012.00000002.2087518679.000001CAE6013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.com
Source: HxAccounts.exe, 00000012.00000002.2087518679.000001CAE6013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com0
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officeapps.live.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://onedrive.live.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office365.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office365.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://powerlift-user.acompli.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://res.cdn.office.net
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://service.powerapps.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://settings.outlook.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://staging.cortana.ai
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://substrate.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://tasks.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://wus2.contentsync.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	String found in binary or memory: https://www.yammer.com
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/xI
Source: HxAccounts.exe, 00000012.00000002.2091913997.000001CAED4BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com5

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 57141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 57061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57007
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57133
Source: unknown	Network traffic detected: HTTP traffic on port 56996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57135
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 57037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57137
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57023
Source: unknown	Network traffic detected: HTTP traffic on port 57095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57021
Source: unknown	Network traffic detected: HTTP traffic on port 57026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57142
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57148
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57034
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57036
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57151
Source: unknown	Network traffic detected: HTTP traffic on port 57025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57031
Source: unknown	Network traffic detected: HTTP traffic on port 57048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57032
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57045
Source: unknown	Network traffic detected: HTTP traffic on port 57105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57047
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 57003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 56983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 57139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 57036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 57013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 57085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown	Network traffic detected: HTTP traffic on port 57128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 57001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 57118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 57063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57107
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57114
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57110
Source: unknown	Network traffic detected: HTTP traffic on port 57002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 56984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 57035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57119
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57116
Source: unknown	Network traffic detected: HTTP traffic on port 57140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57118
Source: unknown	Network traffic detected: HTTP traffic on port 56995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57125
Source: unknown	Network traffic detected: HTTP traffic on port 57024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 57097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57093
Source: unknown	Network traffic detected: HTTP traffic on port 57075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57095
Source: unknown	Network traffic detected: HTTP traffic on port 57000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 57012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 57087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57055
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57051
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57062
Source: unknown	Network traffic detected: HTTP traffic on port 57099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57079
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57076
Source: unknown	Network traffic detected: HTTP traffic on port 57044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57073
Source: unknown	Network traffic detected: HTTP traffic on port 57077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown	Network traffic detected: HTTP traffic on port 57137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57080
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56976
Source: unknown	Network traffic detected: HTTP traffic on port 57147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56977
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56978
Source: unknown	Network traffic detected: HTTP traffic on port 56991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56982
Source: unknown	Network traffic detected: HTTP traffic on port 57067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56984
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56992
Source: unknown	Network traffic detected: HTTP traffic on port 57020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56993
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57059 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:57139 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/5@4/4

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

File created: C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2212,i,7468168222127439658,6562450614758436169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM="
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2212,i,7468168222127439658,6562450614758436169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ninput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: \REGISTRY\A\{4b92fb22-2ac0-09f1-12c9-b6de912228b9}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office Test\Special\PerfImm

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: settings.dat.13.dr

Binary or memory string: VMware, Inc. VMware20,1

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://api.diagnosticssdf.office.com	0%	URL Reputation	safe
https://login.microsoftonline.com/	0%	URL Reputation	safe
https://shell.suite.office.com:1443	0%	URL Reputation	safe
https://designerapp.azurewebsites.net	0%	URL Reputation	safe
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/	0%	URL Reputation	safe
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://outlook.office365.com/connectors	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://api.addins.omex.office.net/appinfo/query	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/tenantassociationkey	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://powerlift.acompli.net	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://cortana.ai	0%	URL Reputation	safe
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://cloudfiles.onenote.com/upload.aspx	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
https://entitlement.diagnosticssdf.office.com	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://ofcrecsvcapi-int.azurewebsites.net/	0%	URL Reputation	safe
https://canary.designerapp.	0%	URL Reputation	safe
https://ic3.teams.office.com	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	URL Reputation	safe
https://cr.office.com	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://portal.office.com/account/?ref=ClientMeControl	0%	URL Reputation	safe
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://graph.ppe.windows.net	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://powerlift-user.acompli.net	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	0%	URL Reputation	safe
https://api.scheduler.	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://api.aadrm.com	0%	URL Reputation	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://globaldisco.crm.dynamics.com	0%	URL Reputation	safe
https://messaging.engagement.office.com/	0%	URL Reputation	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://dev0-api.acompli.net/autodetect	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/feedback	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/groups	0%	URL Reputation	safe
https://web.microsoftstream.com/video/	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://dataservice.o365filtering.com/	0%	URL Reputation	safe
https://officesetup.getmicrosoftkey.com	0%	URL Reputation	safe
https://analysis.windows.net/powerbi/api	0%	URL Reputation	safe
https://prod-global-autodetect.acompli.net/autodetect	0%	URL Reputation	safe
https://substrate.office.com	0%	URL Reputation	safe
https://outlook.office365.com/autodiscover/autodiscover.json	0%	URL Reputation	safe
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://safelinks.protection.outlook.com/api/GetPolicy	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://apis.live.net/v5.0/	0%	URL Reputation	safe
https://officepyservice.office.net/service.functionality	0%	URL Reputation	safe
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	0%	URL Reputation	safe
https://templatesmetadata.office.net/	0%	URL Reputation	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://messaging.lifecycle.office.com/	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://mss.office.com	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://management.azure.com	0%	URL Reputation	safe
https://outlook.office365.com	0%	URL Reputation	safe
https://login.windows.net	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://incidents.diagnostics.office.com	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/ios	0%	URL Reputation	safe
https://make.powerautomate.com	0%	URL Reputation	safe
https://api.addins.omex.office.net/api/addins/search	0%	URL Reputation	safe
https://insertmedia.bing.office.net/odc/insertmedia	0%	URL Reputation	safe
https://outlook.office365.com/api/v1.0/me/Activities	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
mkto-ab140048.com	104.17.70.206	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
go2.sentinelone.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.diagnosticssdf.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://shell.suite.office.com:1443	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://designerapp.azurewebsites.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/connectors	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://cdn.entity.	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/appinfo/query	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://powerlift.acompli.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://cortana.ai	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://cloudfiles.onenote.com/upload.aspx	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://entitlement.diagnosticssdf.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://ofcrecsvcapi-int.azurewebsites.net/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://canary.designerapp.	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://ic3.teams.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://config.edge.skype.net/config/v1/	HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.yammer.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.microsoftstream.com/api/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://cr.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://portal.office.com/account/?ref=ClientMeControl	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/registrar/prod	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://graph.ppe.windows.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://powerlift-user.acompli.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://officeci.azurewebsites.net/api/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com5	HxAccounts.exe, 00000012.00000002.2091913997.000001CAED4BF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://api.scheduler.	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://store.office.cn/addinstemplate	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/rps	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/autosuggest/api/v1/init?cvid=	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://globaldisco.crm.dynamics.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://messaging.engagement.office.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com/xI	HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://dev0-api.acompli.net/autodetect	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/feedback	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://web.microsoftstream.com/video/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://dataservice.o365filtering.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://officesetup.getmicrosoftkey.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://analysis.windows.net/powerbi/api	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://prod-global-autodetect.acompli.net/autodetect	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://substrate.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://login.windows.net/	HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://outlook.office365.com/autodiscover/autodiscover.json	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://d.docs.live.net	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://safelinks.protection.outlook.com/api/GetPolicy	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://ncus.contentsync.	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false		unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://apis.live.net/v5.0/	HxAccounts.exe, 00000012.00000002.2087676271.000001CAE602B000.00000004.00000020.00020000.00000000.sdmp, 8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/service.functionality	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://templatesmetadata.office.net/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://messaging.lifecycle.office.com/	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://mss.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://management.azure.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://login.windows.net	HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://wus2.contentsync.	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://incidents.diagnostics.office.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://make.powerautomate.com	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/odc/insertmedia	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com	HxAccounts.exe, 00000012.00000002.2091795240.000001CAED487000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://outlook.office365.com/api/v1.0/me/Activities	8AC87BC8-836B-4E08-9134-65C22638A056.13.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.70.206	mkto-ab140048.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541909
Start date and time:	2024-10-25 10:01:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/5@4/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, BackgroundTransferHost.exe, HxTsr.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 64.233.167.84, 172.217.18.110, 34.104.35.123, 52.109.28.46, 13.107.42.16, 20.109.210.53, 51.104.136.2, 199.232.214.172, 13.85.23.206, 40.69.42.241, 172.217.16.195
Excluded domains from analysis (whitelisted): config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, settings-prod-neu-2.northeurope.cloudapp.azure.com, clientservices.googleapis.com, time.windows.com, clients2.google.com, atm-settingsfe-prod-geo2.trafficmanager.net, config-edge-skype.l-0007.l-msedge.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, officeclient.microsoft.com, l-0007.l-msedge.net, config.edge.skype.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, outlookmobile-office365-tas.msedge.net, edgedl.me.gvt1.com, l-0007.config.skype.com, config.officeapps.live.com, clients.l.google.com, settings.data.microsoft.com, europe.configsvc1.live.com.akadns.net, uks-azsc-config.officeapps.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\8AC87BC8-836B-4E08-9134-65C22638A056

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	175027
Entropy (8bit):	5.29315794209563
Encrypted:	false
SSDEEP:	1536:Di2XPRAqFbz41gwErLe7HW8QM/hMdcAZl1p5ihs7gXXSEIJROdYgo:9He7HW8QM/FXfZfo
MD5:	0E14053F5B7E625F9127D6B4D3492DA2
SHA1:	ACFCB0D4FD0D5CEAC5634980D81253E121CA6CB4
SHA-256:	250C75B40A90AF91D76360107D707FBEE5E474B5D20163401F93E8677E660FAD
SHA-512:	5150F945A146FBDA5B45BA4B3C84241AF0EDAFAAD25A7275A618772F2D3AAE02E769C66A5CBD6316211062D5D597F46CFE76F2C8AF7A1B3578D8580B9D993304
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-25T08:02:32">.. Build: 16.0.18209.40127-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.12682537457811463
Encrypted:	false
SSDEEP:	12:BdmXXPqF69Fq5j+fYK8CQkXg1Q1UMCl2M+aqc2EfK8C48XH:/s1NYKfQcSMClCaoEfKf40
MD5:	B60E4F0875A790233BF8C4A50B61E486
SHA1:	52ECADD0CF472BFB59AFD0B494CA33ED49CFB1FF
SHA-256:	6FF9D71EEF37EADFF4B2A70F3FEC4C71E3990C6E6FA830E7C6CFB60965115F65
SHA-512:	D24496221804250B7CDE854058226162A202F9721F241F8FD3CD2EEDBF11C1D5654D9848F90F1994E55E13646EEE02095538C704F58B83D8D84FB66905D1BE59
Malicious:	false
Reputation:	low
Preview:	............................................................................l.......\..........................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................}.oX............aNB.&..........H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g.g.e.r...C.:.\.U.s.e.r.s.\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g...e.t.l...........P.P.....\....a..............................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.12202281892477011
Encrypted:	false
SSDEEP:	12:eSgdCnPqF69Fq5j+I8CokXg1Q1UMCl2M+aqc2EOCqb7:eSgdY1mfocSMClCaoEFqb7
MD5:	12D994E6DDFE11A3822270719ADEB94F
SHA1:	19903D5C7467EE29884DF88B979CAFC35D5A5D01
SHA-256:	8FC9EE1A2E835BB298F5B05D3D37DD5BB239EBBE312C4CA56C882FC4B6A7BF5B
SHA-512:	4262946B179FB00F0FAA6BF538AED4BFE1532B805C101ADD4ECA938F796ADEB4237BDC7FA158DC85DAFC51045567A3EBE9CB3C0617B15234ADC180085BB95BD7
Malicious:	false
Reputation:	low
Preview:	............................................................................J.......(...........................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................}.oX...........*.=.&..........H.x.M.A.l.w.a.y.s.O.n.L.o.g...C.:.\.U.s.e.r.s.\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.m.A.l.w.a.y.s.O.n.L.o.g...e.t.l.............P.P.....(..................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	2.5548681175508263
Encrypted:	false
SSDEEP:	3072:b5ANVM/E7Tc6ftCg8vNKuLwgBEj6OGK1UoLWwPA5n6x1QWAEFRbZqO/q7eEtbngf:Jpsp6m63C4
MD5:	2840ECB131E40A22D05C696F0B273D7C
SHA1:	1D7FA015405101576A89C7DE1D06A4EA5F4A6176
SHA-256:	12A498D6D5B84E3834824C6D758CB20A7534759BAFEBEEEC0CA6C5F8623B8868
SHA-512:	AAB64549D7EBB6320A2CF8CDA75660B6A538190181CF991A3708962A38122D944E631194EC4EA1503A156CE3B6E7FF79FA5A603FC5AC382AA11CFD7DF87DFCCB
Malicious:	false
Reputation:	low
Preview:	regf........b.Q.7.................. ....P......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm../=.&.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG1

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	286720
Entropy (8bit):	4.021957077439739
Encrypted:	false
SSDEEP:	3072:y5ANVM/E7Tc6ftCg8vNKuLwgBEj6OGK1UoLWwPA5n6x1QWAEFRbZqO/q7eEtbngf:upsp6m63C4
MD5:	9E8E6E88488AB1588D7C762115A2E94F
SHA1:	D64F7CF5A1DE88ACF90FBF706BF80EA5FA2890E6
SHA-256:	EEB0E379F0517DDEE42B9E8FDAF6CFE761ECE2DDC2EB99465F89C4D6EF2CC53D
SHA-512:	F1D89431B29B2ABB1AECBA1194E89F2A123F36491D03D5FCFB8D33ADFA6A0A96A8730DD507C268536B3C445D316002EC27BE746CA0D60E56BC15327984FDAD2A
Malicious:	false
Reputation:	low
Preview:	regf........b.Q.7.................. ....P......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm../=.&.................................................................................................................................................................................................................................................................................................................................................HvLE.^...........P........(...)...x.......P..hbin................b.Q.7..........nk,.T...7...... ...........................x...............................Test....p...sk..h...h.......t.......H...X.............4.........?.......................?....................... ... ...............YQ..fr]%dc;.............nk ..\..&..............................x6..h...............8...V...........ConfigSettings..p...sk..x...x...9...t.......H...X.............4.........?.......................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:02:16.418234110 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 25, 2024 10:02:17.074599028 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 25, 2024 10:02:17.074814081 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:17.746216059 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:17.747539997 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:17.918092966 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:18.824302912 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 25, 2024 10:02:22.883060932 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:23.261925936 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:23.652499914 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 25, 2024 10:02:24.168091059 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:25.668180943 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:27.464998960 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:27.465037107 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:27.543137074 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:28.143671036 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.143727064 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.143801928 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.144218922 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.144258976 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.144529104 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.144748926 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.144767046 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.145658016 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.145673990 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.654858112 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:28.886437893 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.886600018 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.890901089 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.890935898 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.891154051 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.891191006 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.892400980 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.892486095 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.892741919 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.892802000 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.894007921 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.894097090 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.894366026 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.894479990 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.894577026 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.894587040 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:28.950819016 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.950839996 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:28.950858116 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:29.071146011 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:29.078274965 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:29.078447104 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:29.078546047 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:29.079605103 CEST	49704	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:29.079624891 CEST	443	49704	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:30.649414062 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:30.649460077 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:30.649545908 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:30.650002956 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:30.650021076 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.027395964 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.027453899 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.027538061 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.027730942 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.027749062 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.391362906 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.391436100 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.395440102 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.395462036 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.395876884 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.405436039 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.451335907 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.624082088 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.624155998 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.624202967 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.624231100 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.624253988 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.624284029 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.624304056 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.651146889 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.651225090 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.651272058 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.651295900 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.651547909 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.651547909 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.741173983 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.741238117 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.741281986 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.741302967 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.741334915 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.741345882 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.767553091 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.767613888 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.767663002 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.767682076 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.767715931 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.767735004 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.769522905 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.769582033 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.769615889 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.769624949 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.769681931 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.769681931 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.771471977 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.771517992 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.771559000 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.771569014 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.771601915 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.771622896 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.858663082 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.858735085 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.858757019 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.858814001 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.858825922 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.858870983 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.874018908 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:31.874118090 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:31.874205112 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:31.883743048 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.883791924 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.883831024 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.883847952 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.883876085 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.883888006 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.884867907 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.884912968 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.884936094 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.884943962 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.884978056 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.884989023 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.885885954 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.885926962 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.885946989 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.885955095 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.886007071 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.886017084 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.886848927 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:31.886889935 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:31.886984110 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.887029886 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.887062073 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.887069941 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.887109995 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.887121916 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.888119936 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.888163090 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.888220072 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.888231993 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.888269901 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.888282061 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.891436100 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.904230118 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.905133963 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.905149937 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.906233072 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.906297922 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.913772106 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.913845062 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.970427036 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:31.970446110 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:31.974987030 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975049019 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975089073 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.975099087 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975151062 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.975229025 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975294113 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.975301981 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975351095 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:31.975420952 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:31.975474119 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.023098946 CEST	49708	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.023127079 CEST	443	49708	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.157912970 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:32.176578045 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.176692963 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.176790953 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.179219961 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.179277897 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.179343939 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.179981947 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.180006981 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.180083036 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.182773113 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.182784081 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.182939053 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.183669090 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.183706999 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.196602106 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.196634054 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.196697950 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.196741104 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.198071003 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.198086023 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.199337006 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.199435949 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.199512959 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.199731112 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.199768066 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.626971960 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.627094030 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.728106976 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:32.728162050 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:32.728233099 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:32.729104996 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:32.729124069 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:32.752109051 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.752177000 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.752456903 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.752516985 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.754105091 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.799331903 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896081924 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896147013 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896150112 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896182060 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896202087 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896219969 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896225929 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896264076 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896269083 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896317005 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896322012 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896363974 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896414042 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896456003 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896461010 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896502018 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896507978 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896548033 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.896589041 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.896632910 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.897209883 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.897254944 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.897259951 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.897300005 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.897983074 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.898031950 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.898041010 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.898080111 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.900371075 CEST	49711	443	192.168.2.7	13.107.5.88
Oct 25, 2024 10:02:32.900391102 CEST	443	49711	13.107.5.88	192.168.2.7
Oct 25, 2024 10:02:32.921606064 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.922022104 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.922044992 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.922441006 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.922445059 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.925837040 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.926765919 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.926790953 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.927666903 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.927673101 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.928694010 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.928767920 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.929866076 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.929883003 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.930525064 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.930530071 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.931190968 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.931197882 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.931852102 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.931858063 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.947118044 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.947783947 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.947803020 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:32.952588081 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:32.952599049 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053092957 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053160906 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053225040 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.053245068 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053282022 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.053344011 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053390026 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.053446054 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.053462982 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.053476095 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.053482056 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056164026 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056232929 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056297064 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056382895 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056425095 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056421995 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056426048 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056425095 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056451082 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056463957 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056508064 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056514025 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056562901 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056574106 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056617022 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056632996 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056654930 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056677103 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056683064 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056756973 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056763887 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.056797028 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.056799889 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058640003 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058659077 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058703899 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058727026 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058756113 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058835030 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058835030 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058840990 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058850050 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.058964014 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058983088 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.058994055 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.059016943 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.059045076 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.059068918 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.059175014 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.059184074 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.059211016 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.059226990 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.060983896 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.061021090 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.061109066 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.061371088 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.061389923 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.081033945 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.081228018 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.081286907 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.086297035 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.086323977 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.086338997 CEST	49716	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.086347103 CEST	443	49716	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.093816042 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.093852997 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.093909025 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.094204903 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.094223976 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.356184959 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 25, 2024 10:02:33.590488911 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.590596914 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.596390963 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.596441031 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.596846104 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.639461040 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.683386087 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.779863119 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.780519962 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.780560970 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.781030893 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.781038046 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.788624048 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.788983107 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.789007902 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.789485931 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.789490938 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.801520109 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.802037001 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.802061081 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.802561045 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.802567959 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.807396889 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.807810068 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.807842970 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.808305979 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.808311939 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.830410957 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.830825090 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.830842972 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.831310034 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.831325054 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.885128975 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.885307074 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.885337114 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.885422945 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.885467052 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.885467052 CEST	49717	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.885492086 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.885529041 CEST	443	49717	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.906685114 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.906879902 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.906951904 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.907028913 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.907028913 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.907066107 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.907089949 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.909722090 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.909759998 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.909866095 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.910060883 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.910075903 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.919137955 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.919440031 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.919497013 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.919537067 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.919550896 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.919563055 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.919569969 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.921479940 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.921519995 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.921588898 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.921719074 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.921732903 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.922950029 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.923002958 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.923089027 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.923329115 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:33.923341990 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:33.930989981 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.931143999 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.931207895 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.931229115 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.931242943 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.931255102 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.931262970 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.933161974 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.933171988 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.933237076 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.933343887 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.933353901 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.940629959 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.940783978 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.940846920 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.940880060 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.940880060 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.940896988 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.940905094 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.942853928 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.942862034 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.942929983 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.943063021 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.943072081 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.960616112 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.960891008 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.960947037 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.960969925 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.960980892 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.960992098 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.960997105 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.962923050 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.962955952 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:33.963135958 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.963176966 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:33.963184118 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.650430918 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.652786970 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:34.659260035 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.671104908 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.679801941 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.699649096 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.700048923 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.707912922 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.773617029 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:34.773683071 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:34.853226900 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.853269100 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.853311062 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.864018917 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.864048004 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.864677906 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.864685059 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.865421057 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.865434885 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.865896940 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.865912914 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.998157978 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.998239994 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.998343945 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:34.998599052 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:34.998661041 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.002856970 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.255805969 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.255830050 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.256607056 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.256613016 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.256932020 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.256956100 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.258754969 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.258775949 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.259341955 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.259347916 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.259681940 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.259694099 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.260185003 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.260189056 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.272670031 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:35.272696018 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.273196936 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.274285078 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:35.274900913 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.274924994 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.274936914 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.274943113 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.304244041 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.304281950 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.304371119 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.305418015 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.305448055 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.305692911 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.305810928 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.305824041 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.306207895 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.306221962 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.319331884 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.385732889 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.385786057 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.385940075 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.385946035 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.385982037 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.386008024 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.386091948 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.386111975 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.386143923 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.391712904 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.391722918 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.391731977 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.391736031 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.400280952 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.400280952 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.400296926 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.400316000 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.410213947 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.410221100 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.410254955 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.410259008 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.449245930 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.449281931 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.449347973 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.480144024 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.480218887 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.480299950 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.480444908 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.480462074 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.485582113 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.485601902 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.485655069 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.486073017 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.486082077 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.486154079 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:35.486187935 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:35.518389940 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.518644094 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.518701077 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:35.551417112 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:35.551417112 CEST	49726	443	192.168.2.7	184.28.90.27
Oct 25, 2024 10:02:35.551429033 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:35.551438093 CEST	443	49726	184.28.90.27	192.168.2.7
Oct 25, 2024 10:02:36.026261091 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.026909113 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.026936054 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.027488947 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.027496099 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.041707993 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.042051077 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.042069912 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.042485952 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.042491913 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.157049894 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.157157898 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.157236099 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.157495975 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.157495975 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.157521963 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.157535076 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.160460949 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.160499096 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.160582066 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.160784960 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.160799980 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.205197096 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.205405951 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.205483913 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.221975088 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.229063988 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.235939026 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.236522913 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.236537933 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.236900091 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.236918926 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.236931086 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.236937046 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.237143993 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.237163067 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.237462044 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.237504959 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.237903118 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.237915993 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.238634109 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.238646030 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.239196062 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.239200115 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.242050886 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.242091894 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.242176056 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.242305994 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.242322922 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.365295887 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.365464926 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.365520954 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.365961075 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.365981102 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.366020918 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.366029024 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.366889954 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.367037058 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.367096901 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.368246078 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.368407011 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.368469954 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.369879961 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.369972944 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.370048046 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.370064020 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.370064020 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.370080948 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.370090008 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.378607988 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.378614902 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.378623009 CEST	49734	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.378628016 CEST	443	49734	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.379734993 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.379770994 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.382606983 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.382653952 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.382720947 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.383095026 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.383111954 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.384306908 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.384344101 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.384408951 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.384604931 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.384634972 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.879693985 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.922760010 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.922795057 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:36.923295021 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:36.923301935 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.004153013 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.005064964 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.005095005 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.005793095 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.005799055 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.046422005 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.046655893 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.047188997 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.050224066 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.050240993 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.050276041 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.050283909 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.055965900 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.056008101 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.056737900 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.057261944 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.057277918 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.132178068 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.132253885 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.134224892 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.134386063 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.134455919 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.135616064 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.135694981 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.136301994 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.136316061 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.139870882 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.139884949 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.140316963 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.140327930 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.141973019 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.141993999 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.146074057 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.146173000 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.146249056 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.146783113 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.146817923 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.162784100 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.175246000 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.175262928 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.175633907 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.175641060 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.263430119 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.263557911 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.263786077 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.280436993 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.280567884 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.280675888 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.308325052 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.308531046 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.308706045 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.313967943 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.313967943 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.314050913 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.314084053 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.332374096 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.332442999 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.334542036 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.334563017 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.334578037 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.334585905 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.345484018 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.345523119 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.345590115 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.348989964 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.349050045 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.349292994 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.349956989 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.349993944 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.350009918 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.350040913 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.350130081 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.350243092 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.350267887 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.351341963 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.351372004 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.790649891 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.801073074 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.801105976 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.801754951 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.801759958 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.882674932 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.883435011 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.883479118 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.883892059 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.883904934 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.927551031 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.927854061 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.927898884 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.928191900 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.928210974 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.928220987 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.928227901 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.932168961 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.932216883 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:37.932276964 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.932694912 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:37.932713985 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.010993958 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.011147976 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.011214972 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.017026901 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.017071962 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.017101049 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.017117977 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.023817062 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.023916960 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.024002075 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.024288893 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.024326086 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.086318970 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.087399006 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.087416887 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.087961912 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.087966919 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.087991953 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.088546038 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.088630915 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.088907003 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.088921070 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.132262945 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.132702112 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.132750988 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.133078098 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.133091927 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.216077089 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.216222048 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.216270924 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.217993975 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.217993975 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.218010902 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.218015909 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.218902111 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.219543934 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.219616890 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.220748901 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.220793009 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.220841885 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.220860004 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.225441933 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.225482941 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.225621939 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.225996017 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.226013899 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.228872061 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.228923082 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.228980064 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.229141951 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.229171038 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.269509077 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.269586086 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.269658089 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.347259045 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.347310066 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.347372055 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.347388983 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.355150938 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.355170965 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.355227947 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.355380058 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.355412960 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.399370909 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:38.401477098 CEST	49751	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:38.401505947 CEST	443	49751	104.98.116.138	192.168.2.7
Oct 25, 2024 10:02:38.401592016 CEST	49751	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:38.404854059 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 25, 2024 10:02:38.411819935 CEST	49751	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:38.411851883 CEST	443	49751	104.98.116.138	192.168.2.7
Oct 25, 2024 10:02:38.678389072 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.709448099 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.709475994 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.711606979 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.711613894 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.753633022 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.833693981 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.833760023 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.840411901 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.840502024 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.840553999 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.842760086 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.842782974 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.881016970 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.881035089 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.881063938 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.881069899 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.899239063 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.899269104 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.899338007 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.943725109 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.943742037 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.966949940 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.967097998 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:38.967250109 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:38.972534895 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.002890110 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.025788069 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.025788069 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.025862932 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.025898933 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.027781010 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.027805090 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.028388977 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.028398037 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.032785892 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.032859087 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.033674002 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.033698082 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.037941933 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.037982941 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.038048983 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.038444996 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.038464069 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.140103102 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.156419039 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.156588078 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.156847954 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.164558887 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.164726019 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.164793015 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.190135002 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.190186977 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.190819979 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.190833092 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.193666935 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.193694115 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.193702936 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.193711042 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.203948975 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.203989983 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.204021931 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.204036951 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.294740915 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.294773102 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.294987917 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.314343929 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.314435959 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.314527035 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.403781891 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.403800964 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.405133009 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.405133963 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.405174971 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.405196905 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.420191050 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.420248032 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.420320034 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.420423985 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.420444012 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.479985952 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.480017900 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:39.480164051 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.485636950 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:39.485656977 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.713284016 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.713742971 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.713753939 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.714235067 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.714240074 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.716450930 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.716924906 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.716948986 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.717215061 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.717221975 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.836332083 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.836633921 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.836647987 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.836976051 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.836982012 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.840367079 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.840728045 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.840739012 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841067076 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841099977 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.841105938 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841270924 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841330051 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.841356039 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.841367006 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841398001 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.841403961 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.841600895 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.842091084 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.842129946 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.842442036 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.842458010 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.843735933 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.843769073 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.843833923 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.843926907 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.843935013 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.848515034 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.848690987 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.848761082 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.848824978 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.848824978 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.848845959 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.848858118 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.850895882 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.850986958 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.851078033 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.851218939 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.851249933 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.967665911 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.967912912 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.967969894 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.968018055 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.968036890 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.968049049 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.968055964 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970148087 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.970182896 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970241070 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.970350027 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.970357895 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970704079 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970761061 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970808983 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.970952034 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.970963001 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.970999002 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.971003056 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.972908020 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.972949028 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.973030090 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.973145008 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.973160982 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.975354910 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.975454092 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.975523949 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.975570917 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.975598097 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.975625992 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.975640059 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.977412939 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.977422953 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:40.977495909 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.977596045 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:40.977607012 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.637525082 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.637960911 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.638014078 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.638484955 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.638504028 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.640588045 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.640921116 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.640953064 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.641357899 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.641366005 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.704243898 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.704557896 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.704580069 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.704927921 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.704933882 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.720345974 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.720634937 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.720652103 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.721044064 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.721050024 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.729326010 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.729619026 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.729644060 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.730063915 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.730074883 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.766181946 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.766388893 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.766448021 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.766503096 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.766503096 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.766537905 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.766562939 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.768913984 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.768951893 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.769010067 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.769123077 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.769134045 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.771014929 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.771239042 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.771301031 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.771339893 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.771358967 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.771370888 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.771378040 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.773399115 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.773468971 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.773555040 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.773744106 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.773777008 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.835915089 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.836205959 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.836265087 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.836301088 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.836322069 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.836332083 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.836338997 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.838283062 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.838314056 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.838392973 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.838571072 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.838591099 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.851274014 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.851353884 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.851592064 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.851614952 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.851622105 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.851653099 CEST	49763	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.851658106 CEST	443	49763	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.853153944 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.853188038 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.853285074 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.853394985 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.853409052 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.861510038 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.861718893 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.861779928 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.861870050 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.861870050 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.861891985 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.861912966 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.864042044 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.864056110 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.864206076 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.864294052 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:41.864301920 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:41.899220943 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:41.899301052 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:41.899341106 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:42.499150038 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.499737978 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.499789953 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.501225948 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.501241922 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.540441990 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.542283058 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.542313099 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.542768955 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.542777061 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.572972059 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.573458910 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.573477030 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.574019909 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.574028015 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.599353075 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.604217052 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.604233980 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.609565020 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.609571934 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.612711906 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.615340948 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.615350008 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.621057987 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.621062994 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.627295017 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.627490997 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.627568960 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.630646944 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.630673885 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.630702019 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.630717993 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.678159952 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.678416014 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.678508997 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.699152946 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.699172020 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.707259893 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.707791090 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.707887888 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.710055113 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.710055113 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.710073948 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.710086107 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.711489916 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.711523056 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.711745977 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.713498116 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.713511944 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.715868950 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.715930939 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.716015100 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.716686964 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.716717005 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.717410088 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.717442036 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.717493057 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.717623949 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.717631102 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.748130083 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.748209000 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.748342037 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.748538971 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.748560905 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.748580933 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.748588085 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.752815008 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.752883911 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.752958059 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.756256104 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.756297112 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.756371021 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.756640911 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.756653070 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.756673098 CEST	49769	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.756676912 CEST	443	49769	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.756994009 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.757024050 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.759135962 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.759160995 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:42.759222984 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.759327888 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:42.759337902 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.444214106 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.444637060 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.444680929 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.445147038 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.445166111 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.451989889 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.452430010 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.452446938 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.452758074 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.452764988 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.458411932 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.458707094 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.458726883 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.459084988 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.459089994 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.488539934 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.488832951 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.488851070 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.489202976 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.489213943 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.518409014 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.518704891 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.518716097 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.519035101 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.519038916 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.560317039 CEST	49709	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:02:43.560353041 CEST	443	49709	142.250.186.100	192.168.2.7
Oct 25, 2024 10:02:43.572776079 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.573076963 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.573143959 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.573210955 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.573210955 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.573244095 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.573271036 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.575685978 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.575721979 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.575886965 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.576020002 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.576031923 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.581257105 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.581442118 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.581496000 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.581537962 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.581547022 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.581556082 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.581559896 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.584049940 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.584088087 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.584166050 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.584319115 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.584337950 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.588849068 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.589070082 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.589132071 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.589155912 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.589169979 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.589179039 CEST	49773	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.589184999 CEST	443	49773	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.591531992 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.591542006 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.591614008 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.591720104 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.591728926 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.618195057 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.618297100 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.618346930 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.618415117 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.618433952 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.618465900 CEST	49774	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.618480921 CEST	443	49774	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.620342016 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.620359898 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.620455980 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.620547056 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.620565891 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.630604982 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:43.630697012 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:43.630753994 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:43.652708054 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.652837038 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.652985096 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.653188944 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.653197050 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.653204918 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.653208971 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.655344009 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.655365944 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:43.655520916 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.656801939 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:43.656812906 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.318110943 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.318561077 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.318573952 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.318952084 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.318958044 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.320611954 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.320923090 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.320940971 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.321331024 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.321336985 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.330548048 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.330918074 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.330925941 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.331288099 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.331293106 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.371757030 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.372169018 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.372176886 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.372577906 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.372582912 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.392323971 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.392616987 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.392631054 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.392945051 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.392951012 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.449481010 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.449608088 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.449681044 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.450258017 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.450275898 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.450288057 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.450295925 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.453437090 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.453501940 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.453589916 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.453856945 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.453886032 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.461618900 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.461779118 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.461855888 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.461987972 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.462004900 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.462016106 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.462022066 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.466795921 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.466834068 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.466941118 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.467048883 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.467057943 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.492233038 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.492393970 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.492455959 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.492476940 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.492486954 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.492496967 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.492501020 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.494400024 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.494461060 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.494545937 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.494662046 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.494680882 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.504606009 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.504715919 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.504781008 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.504801989 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.504817009 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.504827976 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.504832983 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.506974936 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.507019997 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.507082939 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.507206917 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.507224083 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.522866011 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.523202896 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.523256063 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.523282051 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.523298025 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.523319960 CEST	49780	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.523327112 CEST	443	49780	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.525027990 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.525094032 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:44.525286913 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.525407076 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:44.525440931 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.325350046 CEST	49705	443	192.168.2.7	104.17.70.206
Oct 25, 2024 10:02:45.325392008 CEST	443	49705	104.17.70.206	192.168.2.7
Oct 25, 2024 10:02:45.858144999 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.860362053 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.860407114 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.860776901 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.860785961 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.862054110 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.862390041 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.862452984 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.862874985 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.862890005 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.863545895 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.863872051 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.863883018 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.863898993 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.863941908 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.864178896 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.864212036 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.864275932 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.864280939 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.864506960 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.864538908 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.864824057 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.864839077 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:45.864873886 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:45.864885092 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031183958 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031208038 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031229019 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031260014 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031294107 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031303883 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031328917 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031338930 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031358957 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031486988 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031506062 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031518936 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031527042 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031625986 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031649113 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.031685114 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.031692982 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.032983065 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.033025980 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.033070087 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.033087015 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.034605026 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.034632921 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.034770966 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.034811020 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.034863949 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.034925938 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.035250902 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.035269022 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.035399914 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.035427094 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.035732985 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.035763979 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.035991907 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.036108017 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.036118031 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039581060 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039657116 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039664030 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039709091 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039752960 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039849997 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039866924 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039874077 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039879084 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039884090 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039930105 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039937019 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.039963007 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.039968014 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.041677952 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.041719913 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.041795969 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.041950941 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.041966915 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.042146921 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.042157888 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.042243958 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.042319059 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.042326927 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.558635950 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 25, 2024 10:02:46.769987106 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.770559072 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.770576954 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.770973921 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.770979881 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.781833887 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.782494068 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.782494068 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.782520056 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.782540083 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.782963037 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.783004045 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.783231974 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.783252954 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.783431053 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.783443928 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.783591032 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.783596039 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.783830881 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.783834934 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.789170980 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.789484024 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.789536953 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.789810896 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.789824963 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.900065899 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.900139093 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.900419950 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.900454044 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.900454044 CEST	49786	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.900474072 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.900484085 CEST	443	49786	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.903486967 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.903548956 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.904006004 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.904345036 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.904365063 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.912734985 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.912894011 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.913007021 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.913007975 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.913079977 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.913101912 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.913789988 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.914104939 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.914206028 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.914206982 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.914319992 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.914371014 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.914386988 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.914851904 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.914973021 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.914973021 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.915092945 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.915096045 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.915940046 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.915966988 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.916237116 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.916378975 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.916393995 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.917016983 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917087078 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.917370081 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917380095 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.917396069 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917474985 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917474985 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917505980 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.917582989 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.917588949 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.921444893 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.921607971 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.921731949 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.921731949 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.921802044 CEST	49787	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.921822071 CEST	443	49787	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.923527002 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.923556089 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:46.923777103 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.923777103 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:46.923827887 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.639523029 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.639991999 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.640054941 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.640455961 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.640470982 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.655380964 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.655786991 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.655814886 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.656200886 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.656209946 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.668087959 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.668432951 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.668463945 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.668840885 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.668852091 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.676959991 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.677299023 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.677326918 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.677727938 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.677750111 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.690311909 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.690608025 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.690634012 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.690936089 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.690943956 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.768510103 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.768840075 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.768910885 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.768995047 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.768995047 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.769043922 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.769090891 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.771298885 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.771341085 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.771405935 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.771567106 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.771576881 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.784450054 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.784853935 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.784940004 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.784981012 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.784981012 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.785001040 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.785013914 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.786708117 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.786753893 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.786827087 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.786935091 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.786950111 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.799740076 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.799925089 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.799982071 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.800020933 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.800020933 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.800036907 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.800045967 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.801719904 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.801728964 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.801819086 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.801928997 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.801935911 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.810234070 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.810376883 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.810436964 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.810481071 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.810481071 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.810498953 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.810511112 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.812190056 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.812227964 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.812316895 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.812433004 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.812455893 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.826702118 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.826838970 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.826891899 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.826921940 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.826934099 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.826945066 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.826951981 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.828785896 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.828823090 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:47.828933001 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.829056025 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:47.829071999 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.504376888 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.505040884 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.505058050 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.505719900 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.505724907 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.516952991 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.517477989 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.517520905 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.517858982 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.517868042 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.544157982 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.544732094 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.544761896 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.545392990 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.545402050 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.546144962 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.546462059 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.546480894 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.547019005 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.547024965 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.578744888 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.579191923 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.579210997 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.579538107 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.579544067 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635234118 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635265112 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635328054 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.635353088 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635370970 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635417938 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.635699987 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.635716915 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.635729074 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.635734081 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.639601946 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.639640093 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.639843941 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.640125990 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.640140057 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.658905983 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.659106016 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.659183979 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.659240007 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.659240007 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.659260988 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.659274101 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.662019014 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.662067890 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.662148952 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.662396908 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.662411928 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.674674988 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.674729109 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.674827099 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.674851894 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.674875975 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.674937010 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.675009966 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.675009966 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.675023079 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.675033092 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.677328110 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.677366018 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.677711010 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.677891016 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.677908897 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.679666042 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.679738045 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.679831982 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.679919958 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.679924965 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.679934978 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.679939032 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.682028055 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.682056904 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.682116032 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.682310104 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.682321072 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710644960 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710679054 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710753918 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.710764885 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710813046 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.710819960 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710832119 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.710882902 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.710884094 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.710917950 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.710926056 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.713388920 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.713448048 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:48.713732004 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.713932991 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:48.713958979 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.376050949 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.376615047 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.376629114 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.377258062 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.377263069 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.391446114 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.395828962 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.395843029 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.408205986 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.408211946 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.425721884 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.427158117 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.427181005 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.427943945 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.427948952 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.446083069 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.462650061 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.462675095 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.463066101 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.463077068 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.480612040 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.494621992 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.494632959 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.504014015 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.504019976 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.507759094 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.507785082 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.507833958 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.507842064 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.508105993 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.508327007 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.520025969 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.520025969 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.520040989 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.520051003 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.533579111 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.533885002 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.533943892 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.535985947 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.536003113 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.536015034 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.536020041 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.540134907 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.540164948 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.540221930 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.540688992 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.540700912 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.542089939 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.542140961 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.542210102 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.542378902 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.542406082 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.558099985 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.558172941 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.558253050 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.558736086 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.558747053 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.558798075 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.558804035 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.564595938 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.564623117 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.564672947 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.564976931 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.564990044 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.590956926 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.591084003 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.591150045 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.591236115 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.591262102 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.591288090 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.591305017 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.595969915 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.595999956 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.596065044 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.596437931 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.596451998 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.633116007 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.633279085 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.633331060 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.633629084 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.633637905 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.633644104 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.633649111 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.640043974 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.640059948 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:49.640326023 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.642467022 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:49.642481089 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.283778906 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.284241915 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.284280062 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.284656048 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.284670115 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.287528038 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.287816048 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.287836075 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.288229942 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.288235903 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.297712088 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.298028946 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.298046112 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.298352003 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.298358917 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.332559109 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.332923889 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.332945108 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.333302975 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.333308935 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.383584023 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.383953094 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.383966923 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.384350061 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.384356976 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.394772053 CEST	56973	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:50.400185108 CEST	53	56973	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:50.400279999 CEST	56973	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:50.400325060 CEST	56973	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:50.405872107 CEST	53	56973	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:50.413228989 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.413337946 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.413424969 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.413526058 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.413554907 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.413582087 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.413597107 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.415801048 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.415894985 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.415967941 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.416100025 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.416134119 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.418791056 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.418963909 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.419020891 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.419157982 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.419173956 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.419184923 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.419193029 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.420814037 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.420838118 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.420967102 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.421096087 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.421108961 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.462876081 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.463016033 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.463085890 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.463357925 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.463371992 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.463381052 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.463386059 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.463943958 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.464109898 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.464378119 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.464469910 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.464482069 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.464550018 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.464555979 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.465986967 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466022015 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.466106892 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466267109 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466293097 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.466295958 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466387033 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.466460943 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466630936 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.466665983 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.512109041 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.512370110 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.512499094 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.512567043 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.512567043 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.512573957 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.512583017 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.514556885 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.514575005 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.514637947 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.514770031 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:50.514785051 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:50.999805927 CEST	53	56973	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:51.002101898 CEST	56973	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:51.007828951 CEST	53	56973	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:51.007900000 CEST	56973	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:51.150907993 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.151437998 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.151460886 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.152113914 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.152118921 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.184488058 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.184875011 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.184901953 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.185440063 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.185445070 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.205229044 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.205636024 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.205662012 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.206157923 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.206163883 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.215678930 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.216042042 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.216120005 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.216850042 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.216865063 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.254353046 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.254793882 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.254812956 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.255394936 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.255399942 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.281409979 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.281713009 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.281831026 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.281944036 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.281991959 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.282023907 CEST	56974	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.282040119 CEST	443	56974	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.285227060 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.285273075 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.285393000 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.285650969 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.285665035 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319300890 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319386959 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319448948 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.319462061 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319583893 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319632053 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.319933891 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.319942951 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.319973946 CEST	56975	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.319977999 CEST	443	56975	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.322796106 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.322839975 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.322962046 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.323194027 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.323209047 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.334420919 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.334503889 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.334803104 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.334939957 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.334954023 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.334969044 CEST	56976	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.334978104 CEST	443	56976	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.337743998 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.337759972 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.337985039 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.338155031 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.338162899 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.348777056 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.348851919 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.348962069 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.349056005 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.349056005 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.349148035 CEST	56977	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.349188089 CEST	443	56977	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.352046013 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.352072954 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.352193117 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.352459908 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.352485895 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.425307989 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.426441908 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.426516056 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.426615000 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.426625013 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.426637888 CEST	56978	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.426641941 CEST	443	56978	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.429646015 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.429682970 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:51.429775000 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.430016994 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:51.430044889 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.009924889 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.010564089 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.010592937 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.011070013 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.011075020 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.060597897 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.075443029 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.075508118 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.076400042 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.084032059 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.084053993 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.085861921 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.085889101 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.087335110 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.087348938 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.098640919 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.099167109 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.099189997 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.100126028 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.100137949 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.138787985 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.138874054 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.138914108 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.205692053 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.210165024 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.210350990 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.210412025 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.212596893 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.212928057 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.212979078 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.213004112 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.213052034 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.213095903 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.216480017 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.216480017 CEST	56980	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.216497898 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.216506004 CEST	443	56980	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.232199907 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.232368946 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.232429028 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.241133928 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.241133928 CEST	56982	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.241148949 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.241156101 CEST	443	56982	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.243040085 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.243040085 CEST	56983	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.243088007 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.243114948 CEST	443	56983	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.245898008 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.245914936 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.247373104 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.247378111 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.247929096 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.247929096 CEST	56981	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.247948885 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.247970104 CEST	443	56981	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.255626917 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.255666971 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.255728960 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258270025 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258301020 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.258352995 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258403063 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258429050 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.258472919 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258613110 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258625031 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.258647919 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.258661985 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.259042025 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.259052992 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.260793924 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.260833979 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.260890007 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.261317968 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.261332035 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.380115986 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.380285978 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.380343914 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.383415937 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.383434057 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.383445024 CEST	56984	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.383450031 CEST	443	56984	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.484747887 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.484803915 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.485568047 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.485759020 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.485778093 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.990722895 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.991421938 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.991446018 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:52.991839886 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:52.991846085 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.007107973 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.009881973 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.009901047 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.010144949 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.010149956 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.012288094 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.013217926 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.013217926 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.013245106 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.013267994 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.020364046 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.021095991 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.021095991 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.021125078 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.021159887 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.120814085 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.120874882 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.120935917 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.120984077 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.121082067 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.121277094 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.121277094 CEST	56985	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.121310949 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.121332884 CEST	443	56985	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.124074936 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.124121904 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.124346972 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.124346972 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.124382973 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.141288042 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.141808033 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.141865969 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.141933918 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.141951084 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.141983032 CEST	56986	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.141988993 CEST	443	56986	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.144222975 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.144257069 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.144377947 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.144583941 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.144599915 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.145879030 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.145956993 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.146066904 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.146153927 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.146153927 CEST	56988	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.146173000 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.146184921 CEST	443	56988	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.148185968 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.148224115 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.148423910 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.148503065 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.148516893 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.159416914 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.159451008 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.159497976 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.159543037 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.159576893 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.159763098 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.159780025 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.159826994 CEST	56987	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.159841061 CEST	443	56987	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.161475897 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.161565065 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.161688089 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.161847115 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.161890030 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.233959913 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.234831095 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.234831095 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.234848976 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.234867096 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.365679026 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.365834951 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.365984917 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.366025925 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.366025925 CEST	56989	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.366048098 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.366058111 CEST	443	56989	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.368347883 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.368386030 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.368551016 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.368624926 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.368632078 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.870630026 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.874011993 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.874030113 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.874659061 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.874665022 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.883061886 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.883719921 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.883733988 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.884681940 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.884687901 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.886188984 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.886998892 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.887039900 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.887685061 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.887691021 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.900495052 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.900871038 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.900933981 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:53.901305914 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:53.901319981 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.212822914 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.212832928 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.212918043 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.212965012 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.212992907 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.212997913 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213027954 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213066101 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213082075 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213190079 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213210106 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213231087 CEST	56992	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213238955 CEST	443	56992	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213327885 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213339090 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213355064 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213368893 CEST	56991	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.213375092 CEST	443	56991	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213788986 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.213841915 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.214104891 CEST	56990	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.214123964 CEST	443	56990	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217056990 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217071056 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217113018 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217139006 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217170000 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217190981 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217480898 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217495918 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217546940 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217642069 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217659950 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217694998 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.217706919 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217809916 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.217833042 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.334362984 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.334543943 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.334615946 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.334660053 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.334685087 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.334702969 CEST	56993	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.334709883 CEST	443	56993	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.337812901 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.337857962 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.338076115 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.338264942 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.338279963 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.346702099 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.347138882 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.347177982 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.347513914 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.347522020 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.477719069 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.477813959 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.479686975 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.479686975 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.479801893 CEST	56994	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.479821920 CEST	443	56994	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.488509893 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.488605976 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.488842010 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.490433931 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.490470886 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.951004982 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.951508045 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.951555014 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.951983929 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.951992035 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.954301119 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.955028057 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.955028057 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.955051899 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.955069065 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.967092037 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.967794895 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.967794895 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:54.967823982 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:54.967842102 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.062568903 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.063045025 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.063064098 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.063514948 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.063519955 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.081132889 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.081298113 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.081429958 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.081430912 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.081506968 CEST	56995	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.081531048 CEST	443	56995	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.084067106 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084115982 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.084337950 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.084372044 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084372044 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084410906 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.084525108 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.084657907 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084657907 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084868908 CEST	56997	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.084903955 CEST	443	56997	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.086620092 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.086694002 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.086910963 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.086911917 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.086987019 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.102803946 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.102847099 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.102888107 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.102943897 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.103029966 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.103094101 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.103094101 CEST	56996	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.103111029 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.103121042 CEST	443	56996	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.105042934 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.105061054 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.105266094 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.105266094 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.105284929 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.190538883 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.190661907 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.190887928 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.190887928 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.191009998 CEST	56998	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.191028118 CEST	443	56998	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.193403959 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.193454027 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.193655968 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.193655968 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.193713903 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.224340916 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.224797010 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.224893093 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.225188971 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.225204945 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.353815079 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.353984118 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.354141951 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.354141951 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.354264975 CEST	56999	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.354307890 CEST	443	56999	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.356790066 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.356817007 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.356904030 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.357134104 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.357145071 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.406024933 CEST	443	49751	104.98.116.138	192.168.2.7
Oct 25, 2024 10:02:55.406109095 CEST	49751	443	192.168.2.7	104.98.116.138
Oct 25, 2024 10:02:55.817869902 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.818330050 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.818392992 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.818737984 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.818753958 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.832173109 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.832760096 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.832781076 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.833265066 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.833271980 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.852292061 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.852674007 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.852690935 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.853226900 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.853231907 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.950378895 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.950448990 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.950548887 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.950690031 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.950731993 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.950786114 CEST	57001	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.950802088 CEST	443	57001	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.953155041 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.953201056 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.953345060 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.953512907 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.953531027 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.961138964 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.961225986 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.961319923 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.961361885 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.961379051 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.961396933 CEST	57002	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.961402893 CEST	443	57002	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.963260889 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.963287115 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.963349104 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.963471889 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.963484049 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.976865053 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.977226973 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.977257013 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:55.977627993 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:55.977641106 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.007277012 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.007322073 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.007376909 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.007400036 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.007432938 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.007507086 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.007507086 CEST	57000	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.007519007 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.007527113 CEST	443	57000	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.009339094 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.009372950 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.009603024 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.009726048 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.009743929 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.091867924 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.092221975 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.092237949 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.092586994 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.092592001 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.136413097 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.136504889 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.136569023 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.136646986 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.136704922 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.136744022 CEST	57003	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.136759996 CEST	443	57003	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.138780117 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.138825893 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.138904095 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.139012098 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.139043093 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.222883940 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.222933054 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.223001003 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.223056078 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.223186016 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.223200083 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.223234892 CEST	57004	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.223242998 CEST	443	57004	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.225941896 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.225980997 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.226099014 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.226260900 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.226274967 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.690980911 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.691484928 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.691510916 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.691903114 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.691914082 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.703002930 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.703423023 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.703448057 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.703828096 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.703835964 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.755007982 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.755356073 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.755377054 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.755784035 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.755793095 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.830029011 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.830108881 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.830220938 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.830435038 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.830435991 CEST	57005	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.830456972 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.830478907 CEST	443	57005	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.833014965 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.833064079 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.833139896 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.833295107 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.833309889 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.834518909 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.834564924 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.834615946 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.834616899 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.834671021 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.834748983 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.834767103 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.834786892 CEST	57006	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.834794998 CEST	443	57006	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.836720943 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.836759090 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:56.836822033 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.836994886 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:56.837006092 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.078852892 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.078933001 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.079006910 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.079276085 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.079302073 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.079333067 CEST	57007	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.079339027 CEST	443	57007	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.081919909 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.082396984 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.082407951 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.082731962 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.082753897 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.082868099 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.082964897 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.082982063 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.083185911 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.083190918 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.086467981 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.086885929 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.086926937 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.087255955 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.087264061 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.213001013 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.213119984 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.213260889 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.213392019 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.213411093 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.213458061 CEST	57009	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.213464022 CEST	443	57009	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.216866970 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.216902018 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217088938 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217308998 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217322111 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217422962 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217457056 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217515945 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217530012 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217628002 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217858076 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217858076 CEST	57008	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.217902899 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.217931032 CEST	443	57008	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.221259117 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.221296072 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.221467018 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.221597910 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.221611977 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.558835983 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.559706926 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.559750080 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.560334921 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.560350895 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.568567038 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.569309950 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.569327116 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.569539070 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.569545031 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686275005 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686345100 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686403036 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.686429977 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686453104 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686507940 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.686633110 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.686650038 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.686666012 CEST	57010	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.686674118 CEST	443	57010	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.689204931 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.689239979 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.689321995 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.689464092 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.689479113 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.697632074 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.699531078 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.699608088 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.699753046 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.699753046 CEST	57011	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.699773073 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.699784040 CEST	443	57011	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.701597929 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.701689959 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.701775074 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.701924086 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.701957941 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.821362972 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.821703911 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.821717024 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:57.822108030 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:57.822113991 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.070292950 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.070314884 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.070777893 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.070780039 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.070794106 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.070810080 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.071212053 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.071218014 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.071329117 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.071341038 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.187812090 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.187855005 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.187911034 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.187928915 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.187947989 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.187998056 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.188189983 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.188205004 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.188215971 CEST	57012	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.188221931 CEST	443	57012	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.191299915 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.191361904 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.191576958 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.191625118 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.191633940 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.201282024 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.201365948 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.201416016 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.201545000 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.201545000 CEST	57014	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.201553106 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.201560974 CEST	443	57014	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.203130007 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.203208923 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.203263044 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.203308105 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.203308105 CEST	57013	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.203339100 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.203351974 CEST	443	57013	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.204303980 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.204349041 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.204427958 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.204544067 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.204562902 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.205425978 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.205461025 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.205585957 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.205657959 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.205672979 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.427169085 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.427618027 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.427638054 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.428014994 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.428021908 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.447022915 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.447343111 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.447375059 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.447678089 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.447686911 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.558581114 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.558710098 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.558938026 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.559155941 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.559175014 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.559205055 CEST	57015	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.559211969 CEST	443	57015	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.561333895 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.561433077 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.561624050 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.561624050 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.561711073 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.578917027 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.578954935 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.579001904 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.579034090 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.579061985 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.579183102 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.579183102 CEST	57016	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.579205036 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.579221010 CEST	443	57016	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.580960035 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.581013918 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.581229925 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.581229925 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.581269979 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.939924955 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.939990997 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.940104961 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.940710068 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.940711021 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.940746069 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.940748930 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.941231012 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.941239119 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.941371918 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.941371918 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.941384077 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.941416025 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:58.941781044 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:58.941787004 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.070194960 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.070300102 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.070480108 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.070480108 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.070530891 CEST	57019	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.070554018 CEST	443	57019	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.071227074 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.071254015 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.071300983 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.071434021 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.071480036 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.071480036 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.071604967 CEST	57018	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.071639061 CEST	443	57018	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.072513103 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.072594881 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.072663069 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.072988987 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.072994947 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.073029041 CEST	57017	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.073035955 CEST	443	57017	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.074165106 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.074253082 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.074276924 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.074322939 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.074356079 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.074620962 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.075054884 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.075092077 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.075248003 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.075263977 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.075995922 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.076010942 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:02:59.076128960 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.076194048 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:02:59.076205969 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.312570095 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.314939022 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.314965963 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.315526962 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.315534115 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.316431046 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.316812992 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.316876888 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.317152023 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.317166090 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.441610098 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.442048073 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.442117929 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.442517996 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.442533016 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.444281101 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.444665909 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.444685936 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.445050001 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.445055962 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.446800947 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.446964025 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447036982 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447089911 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447091103 CEST	57020	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447125912 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447149038 CEST	443	57020	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447532892 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447629929 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447719097 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447845936 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447845936 CEST	57021	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.447864056 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.447880983 CEST	443	57021	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.448014975 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.448285103 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.448293924 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.448673010 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.448678970 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.450520992 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450568914 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.450606108 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450633049 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.450640917 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450692892 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450781107 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450797081 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.450834990 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.450841904 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.570811987 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.570874929 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.571098089 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.571098089 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.571193933 CEST	57022	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.571221113 CEST	443	57022	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.573421955 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.573468924 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.573630095 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.573723078 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.573738098 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.576670885 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.576745033 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.576852083 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.576893091 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.576940060 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.576941013 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.577042103 CEST	57024	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.577059031 CEST	443	57024	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.578908920 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.578948975 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579122066 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579122066 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579157114 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579340935 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579369068 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579411983 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579443932 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579515934 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579643011 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579649925 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.579739094 CEST	57023	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.579746962 CEST	443	57023	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.581501007 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.581542015 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:00.581742048 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.581824064 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:00.581834078 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.182574034 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.183514118 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.183514118 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.183579922 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.183625937 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.195171118 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.195908070 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.195908070 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.195939064 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.195945024 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.294409037 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.294732094 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.294759035 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.295134068 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.295145988 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.308221102 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.309006929 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.309006929 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.309040070 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.309062958 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.316406012 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.316473007 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.316680908 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.316680908 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.316680908 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.319108009 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.319149017 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.319334030 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.319449902 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.319464922 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.325678110 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.325836897 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.326026917 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.326055050 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.326055050 CEST	57026	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.326071978 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.326086998 CEST	443	57026	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.331594944 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.331624031 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.331796885 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.331967115 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.331980944 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.352710009 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.353074074 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.353106022 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.353493929 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.353501081 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.437824011 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.437891960 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.438127041 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.438127041 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.438175917 CEST	57029	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.438196898 CEST	443	57029	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.440679073 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.440710068 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.440905094 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.441030979 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.441040993 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.490183115 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.490442038 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.490497112 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.490550041 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.490571022 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.490586042 CEST	57028	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.490593910 CEST	443	57028	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.493206978 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.493237972 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.493324995 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.493484974 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.493495941 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.518650055 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.518709898 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.518834114 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.518857956 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.518877029 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.518891096 CEST	57027	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.518897057 CEST	443	57027	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.521089077 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.521104097 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.521213055 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.521368980 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.521379948 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:01.621180058 CEST	57025	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:01.621248007 CEST	443	57025	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.050813913 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.057601929 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.057637930 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.058443069 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.058449030 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.079396009 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.079802990 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.079837084 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.080193996 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.080200911 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.164623976 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.164968967 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.164984941 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.165453911 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.165460110 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.183932066 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.184007883 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.184087038 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.184252977 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.184273958 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.184288025 CEST	57030	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.184294939 CEST	443	57030	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.186721087 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.186750889 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.186836004 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.187000036 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.187007904 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.218802929 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.218985081 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.219069958 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.219228029 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.219243050 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.219254971 CEST	57031	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.219261885 CEST	443	57031	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.223658085 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.223686934 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.223841906 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.224246025 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.224261999 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.225131035 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.225600004 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.225609064 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.226466894 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.226471901 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.265754938 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.266360998 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.266371012 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.267154932 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.267158985 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.295398951 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.295427084 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.295469046 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.295490026 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.295522928 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.295789003 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.295803070 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.295813084 CEST	57032	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.295819044 CEST	443	57032	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.298417091 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.298460007 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.298579931 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.298739910 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.298758030 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.354690075 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.354841948 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.354887962 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.355299950 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.355326891 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.355338097 CEST	57033	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.355341911 CEST	443	57033	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.358643055 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.358675957 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.358751059 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.358911991 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.358926058 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.398845911 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.398932934 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.399008989 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.399149895 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.399168968 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.399180889 CEST	57034	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.399187088 CEST	443	57034	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.403182983 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.403228998 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.403350115 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.403690100 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.403717995 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.931443930 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.932785988 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.932795048 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.933087111 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.933090925 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.973486900 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.973829031 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.973844051 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:02.974261999 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:02.974267006 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.017306089 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.017601967 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.017641068 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.017997980 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.018011093 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.063561916 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.063723087 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.063797951 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.063963890 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.063963890 CEST	57035	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.063982010 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.063988924 CEST	443	57035	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.067065001 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.067090988 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.067230940 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.067334890 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.067342043 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.093153954 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.093527079 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.093545914 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.093934059 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.093940020 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.106854916 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.106909037 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.107033968 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.107055902 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.107100964 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.107139111 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.107156992 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.107167006 CEST	57036	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.107172966 CEST	443	57036	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.109261036 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.109298944 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.109353065 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.109463930 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.109472990 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.143547058 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.143887997 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.143942118 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.144289017 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.144295931 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.145421982 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.145478964 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.145518064 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.145535946 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.145574093 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.145663977 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.145684004 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.145697117 CEST	57037	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.145704031 CEST	443	57037	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.148030043 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.148056030 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.148180008 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.148271084 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.148276091 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224164963 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224270105 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224329948 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.224340916 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224384069 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224433899 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.224433899 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.224452019 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.224474907 CEST	57038	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.224481106 CEST	443	57038	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.226527929 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.226552010 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.226627111 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.226747036 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.226756096 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.511147976 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.511220932 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.511363029 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.511630058 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.511673927 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.511732101 CEST	57039	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.511749029 CEST	443	57039	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.521934032 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.521966934 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.522048950 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.522264957 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.522279978 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.813148022 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.813653946 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.813671112 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.814650059 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.814654112 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.880707979 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.881263971 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.881309032 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.881378889 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.882523060 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.882533073 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.883184910 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.883198023 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:03.884114027 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:03.884119034 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125091076 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125122070 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125171900 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.125178099 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125221968 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.125376940 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125452995 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125458956 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125507116 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.125519037 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125579119 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125600100 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.125639915 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.125663042 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.131864071 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.142836094 CEST	57040	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.142854929 CEST	443	57040	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.145090103 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.145097971 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.145144939 CEST	57042	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.145152092 CEST	443	57042	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.183671951 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.197027922 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.197027922 CEST	57041	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.197053909 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.197065115 CEST	443	57041	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.210884094 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.210895061 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.212192059 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.212198019 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.215744019 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.215780020 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.215841055 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.217572927 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.217590094 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.220185995 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.220277071 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.220407963 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.220729113 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.220763922 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.222520113 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.222532034 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.222598076 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.222729921 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.222743988 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.285912991 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.286540031 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.286570072 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.287221909 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.287235022 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.336342096 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.336602926 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.336662054 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.336786032 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.336797953 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.336808920 CEST	57043	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.336874962 CEST	443	57043	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.341814995 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.341931105 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.342010975 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.342283964 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.342319965 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.424110889 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.424134970 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.424180031 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.424200058 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.424240112 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.424426079 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.424460888 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.424489021 CEST	57044	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.424501896 CEST	443	57044	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.426856041 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.426903963 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.427000999 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.427155018 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.427171946 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.954833031 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.956316948 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.956336021 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.957245111 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.957251072 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.959642887 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.960125923 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.960176945 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.960881948 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.960896969 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.969968081 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.970588923 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.970606089 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:04.971328974 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:04.971333981 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.081159115 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.081362963 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.081607103 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.081952095 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.081968069 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.082010031 CEST	57047	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.082015991 CEST	443	57047	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.085350990 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.085441113 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.085524082 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.085833073 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.085865974 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.095576048 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.095865965 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.095928907 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.095980883 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.095980883 CEST	57046	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.096014023 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.096048117 CEST	443	57046	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.096576929 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.097846031 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.097868919 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.099495888 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.099508047 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.102540970 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.102714062 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.102771997 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.102933884 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.102943897 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.102952957 CEST	57045	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.102957010 CEST	443	57045	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.104773998 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.104810953 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.105022907 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.105298042 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.105317116 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.128498077 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.128613949 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.128703117 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.128979921 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.129021883 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.168045998 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.168984890 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.169007063 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.169812918 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.169816971 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.229662895 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.229765892 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.229885101 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.229955912 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.230062962 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.230063915 CEST	57048	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.230101109 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.230123997 CEST	443	57048	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.234020948 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.234059095 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.234236956 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.234433889 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.234442949 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.337439060 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.337502003 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.337599039 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.337939978 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.337960005 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.337970018 CEST	57049	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.337975979 CEST	443	57049	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.343501091 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.343597889 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.343765974 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.344017982 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.344052076 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.826196909 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.830506086 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.830549955 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.831294060 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.831307888 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.848896980 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.849221945 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.849266052 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.849548101 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.849555016 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.870940924 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.871383905 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.871449947 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.871881008 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.871895075 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.957856894 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.958017111 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.958076000 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.958106995 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.958138943 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.958194971 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.958242893 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.958244085 CEST	57050	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.958276033 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.958297968 CEST	443	57050	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.960688114 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.960719109 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.960812092 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.960916996 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.960930109 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.975847006 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.976147890 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.976157904 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.976507902 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.976512909 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.979382992 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.979763985 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.979824066 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.979857922 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.979857922 CEST	57051	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.979878902 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.979891062 CEST	443	57051	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.982057095 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.982085943 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:05.982146025 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.982259989 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:05.982270956 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.001936913 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.002613068 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.002713919 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.002727032 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.002795935 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.002839088 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.002839088 CEST	57052	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.002881050 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.002912045 CEST	443	57052	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.004595995 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.004664898 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.004774094 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.004904032 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.004924059 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.095474005 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.095839024 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.095871925 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.096201897 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.096214056 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.114051104 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.114394903 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.114449024 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.114490986 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.114490986 CEST	57053	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.114504099 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.114511967 CEST	443	57053	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.116424084 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.116442919 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.116503954 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.116633892 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.116641998 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.357052088 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.357212067 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.357297897 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.357428074 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.357466936 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.357517958 CEST	57054	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.357533932 CEST	443	57054	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.359911919 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.359952927 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.360047102 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.360236883 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.360251904 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.710340023 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.710798979 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.710822105 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.711251020 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.711255074 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.722130060 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.722462893 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.722481012 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.722843885 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.722848892 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.749589920 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.749939919 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.749957085 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.750308037 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.750313044 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.840759039 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.840926886 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.841077089 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.841077089 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.841109037 CEST	57055	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.841121912 CEST	443	57055	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.845238924 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.845330000 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.845428944 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.845691919 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.845726967 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.851352930 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.851703882 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.851717949 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.852427006 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.852433920 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.853509903 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.853667021 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.853720903 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.853852034 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.853873014 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.853883982 CEST	57056	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.853888988 CEST	443	57056	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.858530998 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.858562946 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.858776093 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.862060070 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.862075090 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.881366968 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.881450891 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.881560087 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.881594896 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.881613016 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.881623030 CEST	57057	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.881628036 CEST	443	57057	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.883821011 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.883873940 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.883951902 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.884100914 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.884131908 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985429049 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985474110 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985515118 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.985526085 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985542059 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985603094 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.985697985 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.985707045 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.985716105 CEST	57058	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.985719919 CEST	443	57058	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.987773895 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.987809896 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:06.987876892 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.988001108 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:06.988006115 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.084758043 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.085141897 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.085160971 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.085571051 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.085577965 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.212869883 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.212951899 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.213067055 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.213218927 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.213238001 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.213247061 CEST	57059	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.213253021 CEST	443	57059	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.215768099 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.215848923 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.215925932 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.216114998 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.216146946 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.592103004 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.592561960 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.592576027 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.593035936 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.593041897 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.596221924 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.596963882 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.596963882 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.597045898 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.597079992 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.626105070 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.626804113 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.626804113 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.626831055 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.626880884 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.718540907 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.719486952 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.719486952 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.719504118 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.719507933 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.719943047 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.720021009 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.720207930 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.720232964 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.720232964 CEST	57061	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.720247030 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.720253944 CEST	443	57061	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.722966909 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.723007917 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.723336935 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.723336935 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.723397970 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.728513956 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.728564978 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.728621006 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.728780031 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.728780985 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.728844881 CEST	57060	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.728879929 CEST	443	57060	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.731230974 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.731324911 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.731523037 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.731523037 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.731610060 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.760341883 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.760377884 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.760435104 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.760515928 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.760601997 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.760601997 CEST	57062	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.760618925 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.760639906 CEST	443	57062	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.762952089 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.762984037 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.763207912 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.763207912 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.763233900 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.848123074 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.848505974 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.848633051 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.848633051 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.848663092 CEST	57063	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.848675013 CEST	443	57063	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.851005077 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.851059914 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.851255894 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.851290941 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.851299047 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.985658884 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.986687899 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.986687899 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:07.986778021 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:07.986809969 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.130785942 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.130881071 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.130943060 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.131114960 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.131114960 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.131210089 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.131210089 CEST	57064	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.131253958 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.131292105 CEST	443	57064	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.133826971 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.133858919 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.134145021 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.134241104 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.134253979 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.457782984 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.458266973 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.458293915 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.458697081 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.458704948 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.467483997 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.468225002 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.468225002 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.468305111 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.468338013 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.487582922 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.488239050 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.488239050 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.488261938 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.488274097 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.570724010 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.571238041 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.571305990 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.571516991 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.571533918 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.587467909 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.587639093 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.587697983 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.587733030 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.587749958 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.587783098 CEST	57065	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.587789059 CEST	443	57065	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.590430975 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.590523005 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.590665102 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.590806007 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.590837002 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.596952915 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.597007990 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.597135067 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.597228050 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.597228050 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.597321987 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.597321987 CEST	57066	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.597367048 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.597398996 CEST	443	57066	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.599522114 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.599549055 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.599607944 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.599762917 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.599775076 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618313074 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618360996 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618413925 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.618426085 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618493080 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618541002 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.618612051 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.618619919 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.618628979 CEST	57067	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.618633032 CEST	443	57067	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.620603085 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.620626926 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.620796919 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.620942116 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.620954990 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.699184895 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.699212074 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.699255943 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.699278116 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.699363947 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.699569941 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.699610949 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.699640036 CEST	57068	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.699655056 CEST	443	57068	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.701757908 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.701847076 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.701971054 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.702069044 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.702100992 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.913980961 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.915296078 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.915311098 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:08.916421890 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:08.916426897 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.051790953 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.051961899 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.052011013 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.052191019 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.052206039 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.052215099 CEST	57069	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.052220106 CEST	443	57069	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.055041075 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.055090904 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.055166006 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.055305004 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.055321932 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.346122980 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.346561909 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.346582890 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.347084045 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.347088099 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.349839926 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.350267887 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.350311041 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.350764036 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.350769997 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.398118019 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.398550987 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.398578882 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.398956060 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.398962021 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.474895954 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.474926949 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.474980116 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.475007057 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.475023985 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.475101948 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.475189924 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.475191116 CEST	57072	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.475205898 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.475214958 CEST	443	57072	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.478121996 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.478221893 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.478319883 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.478488922 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.478524923 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.482961893 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.483035088 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.483098984 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.483117104 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.483153105 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.483196974 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.483273029 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.483290911 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.483305931 CEST	57070	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.483323097 CEST	443	57070	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.485888004 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.485920906 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.485980034 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.486113071 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.486125946 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.508706093 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.509287119 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.509350061 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.509615898 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.509630919 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.560193062 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.560348988 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.561465979 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.561465979 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.561525106 CEST	57071	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.561542988 CEST	443	57071	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.564650059 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.564697027 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.565007925 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.565007925 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.565047979 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.646430016 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.646507978 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.646800041 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.646800041 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.647165060 CEST	57073	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.647186995 CEST	443	57073	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.649231911 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.649265051 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.649332047 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.649504900 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.649517059 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.976211071 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.977102041 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.977102041 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:09.977118969 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:09.977134943 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.102483988 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.102555990 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.102663040 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.102740049 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.102740049 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.102793932 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.102793932 CEST	57074	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.102804899 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.102812052 CEST	443	57074	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.105036020 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.105072021 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.105271101 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.105271101 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.105302095 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.221420050 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.222171068 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.222172022 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.222264051 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.222297907 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.237066031 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.237407923 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.237441063 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.237912893 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.237920046 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.301774025 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.302258015 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.302293062 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.302714109 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.302720070 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.354048967 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.354199886 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.354331970 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.354331970 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.354331970 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.356566906 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.356604099 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.356735945 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.356822014 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.356841087 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.368356943 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.368419886 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.368520975 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.368558884 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.368782997 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.368782997 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.368942976 CEST	57076	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.368956089 CEST	443	57076	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.370686054 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.370718002 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.370855093 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.370959044 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.370980978 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.377088070 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.377417088 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.377425909 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.377774954 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.377779007 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.431659937 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.431838989 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.431946039 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.431946039 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.431946039 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.433799982 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.433815956 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.434118032 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.434118032 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.434138060 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.508511066 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.508573055 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.508625031 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.508725882 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.508743048 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.508754969 CEST	57078	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.508759975 CEST	443	57078	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.511038065 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.511058092 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.511123896 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.511221886 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.511226892 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.668204069 CEST	57075	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.668278933 CEST	443	57075	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.746184111 CEST	57077	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.746227026 CEST	443	57077	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.839768887 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.840257883 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.840277910 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.840666056 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.840672016 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.968812943 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.968851089 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.968916893 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.968918085 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.969006062 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.972237110 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.972260952 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.972279072 CEST	57079	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.972286940 CEST	443	57079	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.975357056 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.975389957 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:10.975476027 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.975678921 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:10.975693941 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.083198071 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.083909988 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.083921909 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.084330082 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.084333897 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.126929045 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.127329111 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.127341986 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.127779961 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.127785921 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.157804966 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.158402920 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.158421993 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.158711910 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.158718109 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.212349892 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.212423086 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.212528944 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.212860107 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.212860107 CEST	57080	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.212877035 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.212884903 CEST	443	57080	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.215652943 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.215697050 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.215929985 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.216063023 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.216077089 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.246876955 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.247342110 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.247351885 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.247755051 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.247760057 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.260225058 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.260318995 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.260365963 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.260539055 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.260552883 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.260572910 CEST	57081	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.260579109 CEST	443	57081	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.263129950 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.263164043 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.263303995 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.263417959 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.263434887 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.287127018 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.287189960 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.287287951 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.287291050 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.287365913 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.287456989 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.287456989 CEST	57082	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.287473917 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.287483931 CEST	443	57082	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.289633036 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.289649963 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.289769888 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.289901972 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.289911985 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.378700018 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.378774881 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.378859997 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.379084110 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.379085064 CEST	57083	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.379102945 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.379112005 CEST	443	57083	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.381814957 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.381860018 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.382072926 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.382072926 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.382111073 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.723630905 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.724093914 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.724109888 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.724617958 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.724623919 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.852763891 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.852814913 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.852952957 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.853013992 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.853126049 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.853126049 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.853126049 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.855993032 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.856070042 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.856154919 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.856319904 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.856352091 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.966912031 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.967331886 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.967364073 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:11.967869043 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:11.967875957 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.008070946 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.008572102 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.008588076 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.009040117 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.009044886 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.030237913 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.030581951 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.030622005 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.030972004 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.030986071 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.052495003 CEST	57084	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.052511930 CEST	443	57084	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.100142002 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.100295067 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.100378036 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.100482941 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.100482941 CEST	57085	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.100528955 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.100555897 CEST	443	57085	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.102993011 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.103033066 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.103101969 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.103254080 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.103267908 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.132086039 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.132442951 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.132458925 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.132883072 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.132886887 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.135668993 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.135750055 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.135874987 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.135910988 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.135910988 CEST	57086	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.135929108 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.135936975 CEST	443	57086	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.138879061 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.138966084 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.139046907 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.139242887 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.139276981 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.161298037 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.161334038 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.161387920 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.161534071 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.161663055 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.161706924 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.161739111 CEST	57087	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.161756992 CEST	443	57087	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.164232969 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.164271116 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.164351940 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.164587975 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.164602995 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.263102055 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.263166904 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.263284922 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.263437986 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.263451099 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.263503075 CEST	57088	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.263509035 CEST	443	57088	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.266021013 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.266117096 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.266223907 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.266447067 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.266482115 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.580415010 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.580961943 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.580997944 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.581398964 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.581408024 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.711656094 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.711771965 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.711882114 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.713438034 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.713486910 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.713515997 CEST	57089	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.713531971 CEST	443	57089	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.717319965 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.717375994 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.717494965 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.717725039 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.717740059 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.835479021 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.836045980 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.836081028 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.836714029 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.836721897 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.860474110 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.860975027 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.861025095 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.861543894 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.861558914 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.906580925 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.907090902 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.907119036 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.907694101 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.907706022 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.966957092 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.966983080 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.967016935 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.967087984 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.969408989 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.969434023 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.969446898 CEST	57090	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.969454050 CEST	443	57090	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.972728968 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.972774982 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:12.972862959 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.973042965 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:12.973062992 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.000562906 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.000721931 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.000824928 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.001087904 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.001132965 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.001149893 CEST	57091	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.001166105 CEST	443	57091	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.002974033 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.003528118 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.003557920 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.004110098 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.004121065 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.004722118 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.004766941 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.004935026 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.005111933 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.005131006 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.039171934 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.039210081 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.039273024 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.039338112 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.039374113 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.042917967 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.042943954 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.043030024 CEST	57092	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.043036938 CEST	443	57092	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.046442032 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.046477079 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.046627998 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.046796083 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.046818018 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.135171890 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.135411978 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.135481119 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.135534048 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.135534048 CEST	57093	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.135562897 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.135576010 CEST	443	57093	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.138782024 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.138829947 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.138951063 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.139336109 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.139354944 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.435964108 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.436547995 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.436588049 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.437253952 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.437264919 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.564589024 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.564666986 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.564836025 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.565058947 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.565083981 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.565109968 CEST	57094	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.565118074 CEST	443	57094	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.568087101 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.568130016 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.568425894 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.568648100 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.568662882 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.705188036 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.705849886 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.705881119 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.706542969 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.706549883 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.751501083 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.752108097 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.752146006 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.752552986 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.752559900 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.778476000 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.778971910 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.778990984 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.779603004 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.779612064 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.835571051 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.835649014 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.835788012 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.836051941 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.836071968 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.836087942 CEST	57095	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.836095095 CEST	443	57095	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.839194059 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.839252949 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.839364052 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.839668989 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.839690924 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.869002104 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.869524002 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.869550943 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.869967937 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.869973898 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.883387089 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.883426905 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.883487940 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.883512974 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.883563995 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.883806944 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.883825064 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.883846045 CEST	57096	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.883852005 CEST	443	57096	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.887099981 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.887146950 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.887262106 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.887506008 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.887521982 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.908798933 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.908910990 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.909044981 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.909104109 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.909126043 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.909138918 CEST	57097	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.909146070 CEST	443	57097	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.911819935 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.911885977 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:13.912182093 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.912353039 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:13.912374020 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.004216909 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.004244089 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.004291058 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.004327059 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.004374981 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.004733086 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.004733086 CEST	57098	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.004755020 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.004774094 CEST	443	57098	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.007669926 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.007709026 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.007802010 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.008021116 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.008034945 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.341850042 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.342478991 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.342494965 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.342961073 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.342967987 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.478873014 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.479023933 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.479238987 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.479238987 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.479274988 CEST	57099	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.479293108 CEST	443	57099	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.482743979 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.482775927 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.483115911 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.483452082 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.483472109 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.613620043 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.614243031 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.614272118 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.614836931 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.614842892 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.626492977 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.627480030 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.627480984 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.627510071 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.627520084 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.655220032 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.656222105 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.656223059 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.656255960 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.656285048 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.749526978 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.749593019 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.749706030 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.749753952 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.749893904 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.750145912 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.750145912 CEST	57100	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.750174999 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.750185966 CEST	443	57100	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.752865076 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.757158041 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.757198095 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.757442951 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.757455111 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.757514954 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.758064985 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.758065939 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.758080006 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.758083105 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.758891106 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.759228945 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.759350061 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.759350061 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.759350061 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.761725903 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.761778116 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.762207985 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.762207985 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.762243032 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.786695957 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.787029982 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.787172079 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.787173033 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.787267923 CEST	57102	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.787290096 CEST	443	57102	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.789645910 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.789664030 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.789930105 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.789962053 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.789966106 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.886178017 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.886348963 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.886596918 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.886598110 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.886693001 CEST	57103	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.886735916 CEST	443	57103	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.889497995 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.889553070 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:14.889664888 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.889902115 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:14.889934063 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.061858892 CEST	57101	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.061943054 CEST	443	57101	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.224153996 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.249216080 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.249216080 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.249241114 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.249259949 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.378041029 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.378112078 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.378232956 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.378436089 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.414817095 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.414840937 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.415503979 CEST	57104	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.415510893 CEST	443	57104	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.464641094 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.464689970 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.467694998 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.468482018 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.468502998 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.496447086 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.497327089 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.498675108 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.498676062 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.498708010 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.498718023 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.499418974 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.499439955 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.500149965 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.500154018 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.545475006 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.549005985 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.549027920 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.551238060 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.551243067 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.629255056 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.629426003 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.629492998 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.629990101 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.630003929 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.630013943 CEST	57105	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.630018950 CEST	443	57105	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.633069992 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.633212090 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.633271933 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.633996010 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.634013891 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.634025097 CEST	57106	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.634030104 CEST	443	57106	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.641225100 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.641313076 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.641397953 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.643253088 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.643285990 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.643874884 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.643920898 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.643997908 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.644299984 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.644319057 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.684505939 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.685646057 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.685689926 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.686570883 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.686587095 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.688819885 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.688894987 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.688963890 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.689173937 CEST	57107	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.689189911 CEST	443	57107	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.695676088 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.695705891 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.695774078 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.695982933 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.695993900 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.822268009 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.822437048 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.822526932 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.823075056 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.823127031 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.823158026 CEST	57108	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.823173046 CEST	443	57108	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.831629038 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.831667900 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:15.831732035 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.832258940 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:15.832276106 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.200746059 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.201257944 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.201278925 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.202059031 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.202069044 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.329020977 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.329178095 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.329243898 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.329287052 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.329299927 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.329308033 CEST	57109	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.329313040 CEST	443	57109	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.332427025 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.332463026 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.332542896 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.332750082 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.332761049 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.382536888 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.382988930 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.383004904 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.383363008 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.383368015 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.400509119 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.401299953 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.401359081 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.402170897 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.402185917 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.435461998 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.436886072 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.436909914 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.437844038 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.437850952 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.512392998 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.512829065 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.512890100 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.516526937 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.516526937 CEST	57111	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.516541958 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.516551018 CEST	443	57111	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.522298098 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.522336006 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.525904894 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.526030064 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.526046038 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.533504963 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.533587933 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.533900023 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.533900023 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.533930063 CEST	57110	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.533941031 CEST	443	57110	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.537777901 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.537822962 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.538045883 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.538240910 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.538259029 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.565817118 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.565874100 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.565931082 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.565965891 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.566071033 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.566389084 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.566406012 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.566458941 CEST	57112	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.566466093 CEST	443	57112	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.570669889 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.570705891 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.570935011 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.570935011 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.570966005 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.606205940 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.606887102 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.606899977 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.610383987 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.610390902 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.745110989 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.745223999 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.745685101 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.745685101 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.746035099 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.746036053 CEST	57113	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.746056080 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.746062040 CEST	443	57113	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.753695965 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.753756046 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:16.757863045 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.758003950 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:16.758019924 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.076498985 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.077172995 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.077198982 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.077855110 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.077858925 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.207917929 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.207962990 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.208024025 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.208141088 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.208141088 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.208350897 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.208365917 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.208396912 CEST	57114	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.208403111 CEST	443	57114	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.213675022 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.213711977 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.217838049 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.217838049 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.217868090 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.274450064 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.275099039 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.275132895 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.275774002 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.275784969 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.287494898 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.288249016 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.288279057 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.288671970 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.288690090 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.320908070 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.321710110 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.321733952 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.322730064 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.322735071 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.407150030 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.407234907 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.407341003 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.407716990 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.407742023 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.407777071 CEST	57115	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.407783985 CEST	443	57115	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.413640022 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.413691998 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.417972088 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.417972088 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.418014050 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.418668032 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.418701887 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.418756008 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.418899059 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.419178009 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.419178009 CEST	57116	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.419200897 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.419214964 CEST	443	57116	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.425651073 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.425707102 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.429835081 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.430058002 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.430078983 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.455631018 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.455748081 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.455938101 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.456204891 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.456204891 CEST	57117	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.456218958 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.456228018 CEST	443	57117	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.461613894 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.461661100 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.467396021 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.483630896 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.483670950 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.490722895 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.492677927 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.492736101 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.495635033 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.495651960 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.621625900 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.621828079 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.621895075 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.622011900 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.622011900 CEST	57118	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.622061968 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.622097015 CEST	443	57118	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.624950886 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.624983072 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.625049114 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.625183105 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.625190973 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.964833975 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.965621948 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.965642929 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:17.966841936 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:17.966845989 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.099211931 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.099292040 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.099354982 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.147661924 CEST	57119	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.147681952 CEST	443	57119	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.151453018 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.151498079 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.151618004 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.151910067 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.151921034 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.161307096 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.168078899 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.168092966 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.176716089 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.176726103 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.194058895 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.216383934 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.221369982 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.221398115 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.223396063 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.223402977 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.225790024 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.225805998 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.227380037 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.227385044 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.304840088 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.304872990 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.304919958 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.304927111 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.304990053 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.305491924 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.305511951 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.305530071 CEST	57120	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.305548906 CEST	443	57120	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.310935974 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.310981035 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.311043024 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.311163902 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.311182976 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.353863001 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.353986979 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.354167938 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.354224920 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.354435921 CEST	57122	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.354444027 CEST	443	57122	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.354476929 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.354533911 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.356720924 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.356720924 CEST	57121	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.356738091 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.356746912 CEST	443	57121	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.361872911 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.361908913 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.361969948 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.363061905 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.363076925 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.363136053 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.363385916 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.363398075 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.363569021 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.363584995 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.378953934 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.379868031 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.379897118 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.380505085 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.380511045 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.518884897 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.518934011 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.518990040 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.519012928 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.519067049 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.519115925 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.519412041 CEST	57123	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.519423008 CEST	443	57123	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.525974035 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.526021004 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.531521082 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.569637060 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.569681883 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.896064043 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.896864891 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.896888971 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:18.899635077 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:18.899638891 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.027916908 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.028002977 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.028177023 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.028177023 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.028414965 CEST	57124	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.028429985 CEST	443	57124	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.030621052 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.030653000 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.030801058 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.030864000 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.030873060 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.084657907 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.085500002 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.085500002 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.085542917 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.085560083 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.094793081 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.095451117 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.095451117 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.095463991 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.095477104 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.095746994 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.096276999 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.096276999 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.096295118 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.096304893 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.223932981 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.223965883 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.224031925 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.224061966 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.224193096 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.224421024 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.224421024 CEST	57125	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.224447012 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.224461079 CEST	443	57125	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.225042105 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.225064993 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.225224972 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.225236893 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.225621939 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.226150990 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.226254940 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.226254940 CEST	57127	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.226263046 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.226273060 CEST	443	57127	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.228933096 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.228966951 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.229073048 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.229087114 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.229329109 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.229521036 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.229856014 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.229890108 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.229975939 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.230293989 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.230293989 CEST	57126	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.230309010 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.230317116 CEST	443	57126	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.232399940 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.232402086 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.232412100 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.232450962 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.233381987 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.233414888 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.233444929 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.233535051 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.233539104 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.233551979 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.234627962 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.234635115 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.303554058 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.304260969 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.304277897 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.304929018 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.304935932 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.433348894 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.433382988 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.433459044 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.433491945 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.433707952 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.435161114 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.435178041 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.435214996 CEST	57128	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.435223103 CEST	443	57128	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.443305969 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.443414927 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.443902969 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.443903923 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.443986893 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.754216909 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.754931927 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.754957914 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.755623102 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.755629063 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.884367943 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.884763002 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.884828091 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.884962082 CEST	57130	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.884980917 CEST	443	57130	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.889334917 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.889370918 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.889456987 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.889717102 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.889725924 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.967389107 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.968163967 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.968193054 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.968841076 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.968848944 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.970930099 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.971391916 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.971409082 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.972098112 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.972104073 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.976650953 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.977091074 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.977127075 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:19.977797031 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:19.977803946 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.098825932 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.098917007 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.098989964 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.099380016 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.099405050 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.099421978 CEST	57132	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.099430084 CEST	443	57132	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.103446007 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.103615999 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.103672981 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.103857040 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.103871107 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.103884935 CEST	57133	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.103888988 CEST	443	57133	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.104099989 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.104144096 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.104217052 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.104404926 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.104417086 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.107989073 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.108016968 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.108076096 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.108354092 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.108366013 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.204397917 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.204968929 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.205027103 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.205684900 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.205698013 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.263161898 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.263242006 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.263302088 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.265116930 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.265142918 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.265153885 CEST	57131	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.265161037 CEST	443	57131	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.269726992 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.269758940 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.269830942 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.270037889 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.270049095 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.342200041 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.342236042 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.346509933 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.351331949 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.354577065 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.355209112 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.355240107 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.355252028 CEST	57134	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.355257988 CEST	443	57134	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.359745026 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.359782934 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.359868050 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.360057116 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.360068083 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.662566900 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.663681984 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.663682938 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.663711071 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.663728952 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.800565004 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.800671101 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.800756931 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.800792933 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.801100969 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.801100969 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.801645994 CEST	57135	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.801670074 CEST	443	57135	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.813781023 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:20.813824892 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:20.814125061 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:20.814378023 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:20.814394951 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:20.845096111 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.845967054 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.845967054 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.845993042 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.846016884 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.941631079 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.942814112 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.942843914 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:20.943202019 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:20.943207979 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.016887903 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.017627954 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.017663956 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.017821074 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.017827988 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.074369907 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.074393988 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.074451923 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.074616909 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.074769974 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.074769974 CEST	57137	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.074793100 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.074812889 CEST	443	57137	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.078212023 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.078288078 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.078418016 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.078589916 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.078622103 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.094880104 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.094916105 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.094937086 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.095025063 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.095025063 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.095052958 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.095185995 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.101485968 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.101572990 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.101602077 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.101658106 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.101658106 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.101774931 CEST	57136	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.101788044 CEST	443	57136	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.104212999 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.104259968 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.104638100 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.104638100 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.104672909 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.110775948 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.111565113 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.111565113 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.111582041 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.111603022 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.246234894 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.246265888 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.246341944 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.246457100 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.246457100 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.246963978 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.246989965 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.247028112 CEST	57139	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.247035027 CEST	443	57139	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.250137091 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.250188112 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.250628948 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.250724077 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.250737906 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.262845993 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.262890100 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.262913942 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.263099909 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.263125896 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.263602972 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.270884037 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.270931959 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.271018982 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.273931026 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.273931026 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.274349928 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.274367094 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.274401903 CEST	57138	443	192.168.2.7	13.107.246.45
Oct 25, 2024 10:03:21.274408102 CEST	443	57138	13.107.246.45	192.168.2.7
Oct 25, 2024 10:03:21.277674913 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.277715921 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.279848099 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.279848099 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.279879093 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.547085047 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.547549963 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.547574997 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.547991037 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.547995090 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.683789968 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.683826923 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.683898926 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.683911085 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.683950901 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.684113026 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.684132099 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.684144974 CEST	57140	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.684149981 CEST	443	57140	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.686949015 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.686980963 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.687159061 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.687304020 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.687321901 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.817831039 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.818300009 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.818327904 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.818695068 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.818702936 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.873967886 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.874412060 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.874432087 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.874842882 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.874847889 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.949829102 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.949898005 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.949953079 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.950126886 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.950151920 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.950170040 CEST	57141	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.950177908 CEST	443	57141	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.952770948 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.952857018 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.952945948 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.953142881 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.953172922 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.980370045 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.980798006 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.980823994 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:21.981777906 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:21.981786966 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.008579016 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.008980989 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.008999109 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.009386063 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.009392023 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.017132998 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.017376900 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.017431021 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.017467022 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.017467022 CEST	57142	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.017484903 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.017494917 CEST	443	57142	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.020164967 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.020195961 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.020356894 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.020483017 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.020493031 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.127015114 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.127098083 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.127193928 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.127322912 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.127343893 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.127346039 CEST	57143	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.127355099 CEST	443	57143	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.130019903 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.130054951 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.130139112 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.130309105 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.130319118 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.136913061 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.136986017 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.137037992 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.137125015 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.137125015 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.137135029 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.137161970 CEST	57144	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.137166023 CEST	443	57144	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.139385939 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.139425039 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.139556885 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.139722109 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.139733076 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.426223993 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.426764011 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.426791906 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.427288055 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.427297115 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.558382988 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.558407068 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.558451891 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.558465958 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.558506966 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.558875084 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.558902025 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.558917046 CEST	57145	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.558924913 CEST	443	57145	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.697444916 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.702518940 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.702586889 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.703095913 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.703110933 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.765165091 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.765824080 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.765842915 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.767288923 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.767297983 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.831371069 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.831672907 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.831798077 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.832081079 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.832122087 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.832149029 CEST	57146	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.832164049 CEST	443	57146	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.863974094 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.864815950 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.864850044 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.865571022 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.865582943 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.885579109 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.886095047 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.886152983 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.887285948 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.887298107 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.898469925 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.898530960 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.898593903 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.899075031 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.899101973 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:22.899118900 CEST	57147	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:22.899127960 CEST	443	57147	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.002876997 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.002960920 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.003031015 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.019184113 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.020144939 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.020231009 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.043644905 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.043667078 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.043690920 CEST	57148	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.043697119 CEST	443	57148	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.099540949 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.099540949 CEST	57149	443	192.168.2.7	13.107.246.51
Oct 25, 2024 10:03:23.099612951 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:23.099649906 CEST	443	57149	13.107.246.51	192.168.2.7
Oct 25, 2024 10:03:31.057943106 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:31.058043957 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:31.058126926 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:31.058979988 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:31.059017897 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:32.026510000 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:32.052448034 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:32.052478075 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:32.052905083 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:32.058542013 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:32.058604002 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:32.107649088 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:41.920269012 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:41.920335054 CEST	443	57151	142.250.186.100	192.168.2.7
Oct 25, 2024 10:03:41.920445919 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:43.563128948 CEST	57151	443	192.168.2.7	142.250.186.100
Oct 25, 2024 10:03:43.563179016 CEST	443	57151	142.250.186.100	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:02:26.700525999 CEST	53	53659	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:26.700579882 CEST	53	50828	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:27.593755007 CEST	123	123	192.168.2.7	20.101.57.9
Oct 25, 2024 10:02:27.860934973 CEST	123	123	20.101.57.9	192.168.2.7
Oct 25, 2024 10:02:28.041198015 CEST	54857	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:28.041385889 CEST	51088	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:28.135837078 CEST	53	54857	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:28.136603117 CEST	53	51088	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:28.150253057 CEST	53	60079	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:29.126940012 CEST	123	123	192.168.2.7	20.101.57.9
Oct 25, 2024 10:02:29.384193897 CEST	123	123	20.101.57.9	192.168.2.7
Oct 25, 2024 10:02:31.014225006 CEST	49836	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:31.014545918 CEST	51097	53	192.168.2.7	1.1.1.1
Oct 25, 2024 10:02:31.025104046 CEST	53	49836	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:31.025135994 CEST	53	51097	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:45.723689079 CEST	53	49741	1.1.1.1	192.168.2.7
Oct 25, 2024 10:02:50.394409895 CEST	53	49714	1.1.1.1	192.168.2.7
Oct 25, 2024 10:03:23.358897924 CEST	138	138	192.168.2.7	192.168.2.255
Oct 25, 2024 10:03:27.058904886 CEST	53	51484	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 10:02:28.041198015 CEST	192.168.2.7	1.1.1.1	0x3612	Standard query (0)	go2.sentinelone.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.041385889 CEST	192.168.2.7	1.1.1.1	0x4e65	Standard query (0)	go2.sentinelone.com	65	IN (0x0001)	false
Oct 25, 2024 10:02:31.014225006 CEST	192.168.2.7	1.1.1.1	0x5531	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:31.014545918 CEST	192.168.2.7	1.1.1.1	0xcd0a	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	go2.sentinelone.com	mkto-ab140048.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	mkto-ab140048.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	mkto-ab140048.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	mkto-ab140048.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	mkto-ab140048.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.135837078 CEST	1.1.1.1	192.168.2.7	0x3612	No error (0)	mkto-ab140048.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:28.136603117 CEST	1.1.1.1	192.168.2.7	0x4e65	No error (0)	go2.sentinelone.com	mkto-ab140048.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:02:31.025104046 CEST	1.1.1.1	192.168.2.7	0x5531	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:31.025135994 CEST	1.1.1.1	192.168.2.7	0xcd0a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:02:40.711074114 CEST	1.1.1.1	192.168.2.7	0xdebe	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:40.711074114 CEST	1.1.1.1	192.168.2.7	0xdebe	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:40.711178064 CEST	1.1.1.1	192.168.2.7	0xdebe	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:02:40.711178064 CEST	1.1.1.1	192.168.2.7	0xdebe	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

go2.sentinelone.com

otelrules.azureedge.net

outlookmobile-office365-tas.msedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	104.17.70.206	443	4216	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:28 UTC	754	OUT	GET /MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM= HTTP/1.1 Host: go2.sentinelone.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:02:29 UTC	884	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 08:02:29 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close x-request-id: 9d92694098c01007 Cache-Control: private, no-cache, no-store, max-age=0 referrer-policy: strict-origin x-frame-options: SAMEORIGIN x-content-type-options: nosniff content-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-djC+hWn1yOKl+F9XTpgY4dlw/XKTne8XhGcrt/jNn2Q=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self' CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=Mh_OZ3WkFozpKHf3uE03VTz4tODZFT5Y1ZlgRnilU9w-1729843349-1.0.1.1-Vc4L2GazMiwkznBtE5y802JTcYxORUSuWugP7B4WC8.BAi8wYloxl9NY6fAxxhKFeNaSkyvXKjqucoC0OOlcSg; path=/; expires=Fri, 25-Oct-24 08:32:29 GMT; domain=.go2.sentinelone.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d80af430fdd6ba3-DFW
2024-10-25 08:02:29 UTC	485	IN	Data Raw: 32 30 34 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 55 54 46 2d 38 27 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 27 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 27 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 20 76 61 72 20 72 65 64 69 72 65 63 74 75 72 6c 20 3d 20 27 6d 61 69 6c 74 6f 3a 73 75 70 70 6f 72 74 40 73 31 67 6f 76 2e 6e 65 74 3f 6d 6b 74 5f 74 6f 6b 3d 4d 7a 49 33 4c 55 31 4f 54 53 30 77 4f 44 63 41 41 41 47 57 57 6c 6b 38 67 66 2d 67 51 6e 4b 2d 4a 6a 39 65 63 56 55 44 66 47 44 51 4b 37 31 43 55 32 54 4b 50 70 61 75 73 4e 6b 4e 78 53 70 48 58 36 78 77 62 30 71 43 37 55 6d 57 67 43 62 64 61 77 75 63 7a 32 66 38 62 33 Data Ascii: 204<html><head><meta charset='UTF-8'><meta name='robots' content='noindex'><script language='javascript'> var redirecturl = 'mailto:support@s1gov.net?mkt_tok=MzI3LU1OTS0wODcAAAGWWlk8gf-gQnK-Jj9ecVUDfGDQK71CU2TKPpausNkNxSpHX6xwb0qC7UmWgCbdawucz2f8b3
2024-10-25 08:02:29 UTC	38	IN	Data Raw: 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: cript></head><body></body></html>
2024-10-25 08:02:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:31 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:31 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:31 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080231Z-r197bdfb6b48v72xb403uy6hns00000000vg000000001dme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:31 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-25 08:02:31 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49711	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	530	OUT	GET /ab?clientId=34B81480-FAB4-4DA6-B9F9-8E6B7A4BF3C9 HTTP/1.1 X-OfficeApp-BuildVersion: 16.0.11629.20316 Accept-Encoding: gzip, deflate X-OfficeApp-Platform: universal X-OfficeApp-Language: en-CH X-OutlookMobile-Architecture: x64 X-OutlookMobile-BuildFlavor: ship X-OutlookMobile-Environment: Production X-OfficeApp-MsoVersion: 10.0.19045 X-OutlookMobile-HxServiceAccounts: None Content-Length: 0 Content-Encoding: gzip Host: outlookmobile-office365-tas.msedge.net Connection: Keep-Alive Cache-Control: no-cache
2024-10-25 08:02:32 UTC	439	IN	HTTP/1.1 200 OK Content-Length: 11245 Content-Type: application/json; charset=utf-8 ETag: 1428181342_-1341210645 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: f47bb6a6-ac65-4f75-8d20-1e48800543a9 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3F94AAE0A52F4AEF999FDA188FF99D98 Ref B: DFW311000110011 Ref C: 2024-10-25T08:02:32Z Date: Fri, 25 Oct 2024 08:02:32 GMT Connection: close
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 6f 75 75 6e 69 35 38 36 31 22 2c 22 65 78 70 66 72 66 6c 74 6f 75 75 6e 69 35 38 36 31 22 2c 22 6f 75 66 69 72 31 37 33 31 22 2c 22 6f 75 6d 61 6e 33 32 32 31 22 2c 22 6f 75 75 73 65 36 38 37 31 22 2c 22 6f 75 69 6e 74 31 33 30 31 22 2c 22 6f 75 63 61 6c 38 32 38 31 22 2c 22 6f 75 6d 61 69 31 33 36 31 22 2c 22 6f 75 73 69 6e 37 38 39 31 22 2c 22 6f 75 63 61 6c 34 35 34 31 22 2c 22 6f 75 62 72 65 35 30 30 31 22 2c 22 6f 75 61 74 74 37 31 35 31 22 2c 22 6f 75 68 78 68 36 34 31 31 22 2c 22 6f 75 72 65 70 31 35 39 31 22 2c 22 6f 75 63 61 6c 38 36 38 31 22 2c 22 6f 75 65 6e 68 33 34 37 31 22 2c 22 6f 75 6d 61 69 38 38 38 31 22 2c 22 6f 75 69 6e 74 32 35 37 31 22 2c 22 6f 75 6d 61 72 39 30 34 31 22 2c 22 6f 75 6d 69 63 Data Ascii: {"Features":["ouuni5861","expfrfltouuni5861","oufir1731","ouman3221","ouuse6871","ouint1301","oucal8281","oumai1361","ousin7891","oucal4541","oubre5001","ouatt7151","ouhxh6411","ourep1591","oucal8681","ouenh3471","oumai8881","ouint2571","oumar9041","oumic
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 6f 75 73 74 6f 37 37 32 31 22 2c 22 6f 75 64 6f 6e 37 30 32 31 22 2c 22 6f 75 65 6e 61 32 34 31 30 22 2c 22 6f 75 73 74 6f 34 37 32 22 2c 22 6f 66 66 6c 69 6e 65 73 65 61 72 63 68 61 76 6f 69 64 61 70 70 6f 69 6e 74 6d 65 6e 74 69 6e 73 74 61 6e 63 65 69 6e 64 65 78 69 6e 67 22 2c 22 6f 6d 69 6e 61 6c 6c 64 6f 6e 65 66 69 78 65 64 22 2c 22 73 68 72 69 6e 6b 74 65 6c 65 6d 65 74 72 79 66 6f 72 6d 65 74 61 64 61 74 61 22 2c 22 6f 75 73 65 61 37 38 31 22 2c 22 6f 75 63 61 6c 32 34 36 22 2c 22 64 69 73 6d 69 73 73 22 2c 22 6f 75 75 73 69 35 35 38 22 2c 22 6f 75 6d 33 36 38 34 30 22 2c 22 6f 75 61 6c 77 34 33 37 22 2c 22 75 6e 65 6e 34 30 34 22 2c 22 6f 75 75 73 65 73 6d 74 70 63 6c 69 65 6e 74 76 32 22 2c 22 63 6f 6d 70 72 65 73 73 65 64 73 65 72 76 69 63 65 Data Ascii: ousto7721","oudon7021","ouena2410","ousto472","offlinesearchavoidappointmentinstanceindexing","ominalldonefixed","shrinktelemetryformetadata","ousea781","oucal246","dismiss","ouusi558","oum36840","oualw437","unen404","ouusesmtpclientv2","compressedservice
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 31 22 2c 22 31 74 6f 22 3a 22 6f 75 61 74 74 37 31 35 31 22 2c 22 31 74 6d 22 3a 22 6f 75 68 78 68 36 34 31 31 22 2c 22 31 74 6c 22 3a 22 6f 75 72 65 70 31 35 39 31 22 2c 22 31 74 6b 22 3a 22 6f 75 63 61 6c 38 36 38 31 22 2c 22 31 74 69 22 3a 22 6f 75 65 6e 68 33 34 37 31 22 2c 22 31 74 68 22 3a 22 6f 75 6d 61 69 38 38 38 31 22 2c 22 31 74 62 22 3a 22 6f 75 69 6e 74 32 35 37 31 22 2c 22 31 74 61 22 3a 22 6f 75 6d 61 72 39 30 34 31 22 2c 22 31 74 39 22 3a 22 6f 75 6d 69 63 34 31 36 31 22 2c 22 31 74 38 22 3a 22 6f 75 6d 6f 64 39 33 30 31 22 2c 22 31 74 37 22 3a 22 6f 75 6d 75 6c 37 36 39 31 22 2c 22 31 74 35 22 3a 22 6f 75 6e 61 76 37 30 30 31 22 2c 22 31 74 31 22 3a 22 6f 75 73 65 61 37 31 37 31 22 2c 22 31 73 78 22 3a 22 6f 75 73 75 70 33 34 38 31 22 2c Data Ascii: 1","1to":"ouatt7151","1tm":"ouhxh6411","1tl":"ourep1591","1tk":"oucal8681","1ti":"ouenh3471","1th":"oumai8881","1tb":"ouint2571","1ta":"oumar9041","1t9":"oumic4161","1t8":"oumod9301","1t7":"oumul7691","1t5":"ounav7001","1t1":"ousea7171","1sx":"ousup3481",
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 31 22 2c 22 67 36 36 22 3a 22 6f 75 69 6d 6d 32 33 32 31 22 2c 22 67 6a 32 22 3a 22 6f 75 69 6e 6b 33 31 34 31 22 2c 22 67 70 68 22 3a 22 6f 75 65 6d 6f 38 37 36 31 22 2c 22 67 75 30 22 3a 22 6f 75 65 6e 61 34 30 36 31 63 66 22 2c 22 68 31 68 22 3a 22 6f 75 63 61 6c 34 37 35 31 22 2c 22 68 31 69 22 3a 22 6f 75 73 79 6e 37 30 32 31 22 2c 22 68 76 64 22 3a 22 6f 75 73 68 6f 33 36 33 31 22 2c 22 69 6d 74 22 3a 22 6f 75 73 79 6e 33 37 37 31 22 2c 22 6a 35 6b 22 3a 22 6f 75 75 70 73 31 36 35 31 22 2c 22 6a 75 73 22 3a 22 6f 75 64 65 66 36 35 39 31 22 2c 22 6c 33 61 22 3a 22 6f 75 65 6e 68 39 32 38 31 22 2c 22 6d 6b 38 22 3a 22 6f 75 73 79 6e 38 30 37 31 22 2c 22 6d 6c 62 22 3a 22 6f 75 68 78 73 37 33 34 31 22 2c 22 6e 61 6c 22 3a 22 6f 75 73 79 6e 34 33 30 31 Data Ascii: 1","g66":"ouimm2321","gj2":"ouink3141","gph":"ouemo8761","gu0":"ouena4061cf","h1h":"oucal4751","h1i":"ousyn7021","hvd":"ousho3631","imt":"ousyn3771","j5k":"ouups1651","jus":"oudef6591","l3a":"ouenh9281","mk8":"ousyn8071","mlb":"ouhxs7341","nal":"ousyn4301
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 65 5f 73 75 70 70 6f 72 74 70 6f 70 22 2c 22 36 35 69 74 22 3a 22 73 74 6f 70 63 61 6c 65 6e 64 61 72 72 65 6d 69 6e 64 65 72 73 77 68 65 6e 74 6f 67 67 6c 65 64 22 2c 22 36 36 32 65 22 3a 22 6e 65 77 61 70 70 65 78 69 74 61 6c 6c 61 70 70 73 6f 6e 6e 65 77 61 70 70 6c 61 75 6e 63 68 22 2c 22 36 38 61 73 22 3a 22 6e 65 77 61 70 70 70 65 72 6d 61 74 6f 67 67 6c 65 76 69 61 63 61 6c 6c 62 61 63 6b 66 69 6c 65 32 22 2c 22 36 39 74 6a 22 3a 22 6e 65 77 61 70 70 74 6f 67 67 6c 65 63 61 6d 70 61 69 67 6e 66 33 22 2c 22 36 76 63 62 22 3a 22 6e 65 77 61 70 70 75 6e 72 65 67 69 73 74 65 72 62 61 63 6b 74 61 73 6b 73 77 68 65 6e 74 6f 67 67 6c 65 22 2c 22 36 76 77 61 22 3a 22 6e 65 77 61 70 70 75 6e 72 65 67 69 73 74 65 72 62 61 63 6b 74 61 73 6b 73 77 68 65 6e 65 Data Ascii: e_supportpop","65it":"stopcalendarreminderswhentoggled","662e":"newappexitallappsonnewapplaunch","68as":"newapppermatoggleviacallbackfile2","69tj":"newapptogglecampaignf3","6vcb":"newappunregisterbacktaskswhentoggle","6vwa":"newappunregisterbacktaskswhene
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 74 52 75 6e 46 6f 72 54 61 73 6b 62 61 72 41 63 74 69 76 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4c 64 61 70 53 65 72 76 69 63 65 46 6f 72 53 69 67 6e 65 64 43 65 72 74 69 66 69 63 61 74 65 73 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 4d 69 73 73 69 6e 67 44 61 74 46 69 6c 65 4c 6f 67 67 69 6e 67 22 3a 66 61 6c 73 65 2c 22 45 6e 63 6f 75 6e 74 65 72 65 64 54 65 61 63 68 69 6e 67 43 6f 6e 64 69 74 69 6f 6e 73 4c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 45 6e 68 61 6e 63 65 64 4c 6f 63 61 74 69 6f 6e 55 49 22 3a 74 72 75 65 2c 22 45 6e 68 61 6e 63 65 64 53 79 6e 63 48 65 61 6c 74 68 54 65 6c 65 6d 65 74 72 79 22 3a 74 72 75 65 2c 22 46 65 61 74 75 72 65 50 72 6f 6d 6f 74 69 6f 6e 73 43 6f 6e 74 72 6f 6c 46 6c 69 67 68 74 32 22 3a 74 72 Data Ascii: tRunForTaskbarActivation":false,"EnableLdapServiceForSignedCertificates":true,"EnableMissingDatFileLogging":false,"EncounteredTeachingConditionsLogging":true,"EnhancedLocationUI":true,"EnhancedSyncHealthTelemetry":true,"FeaturePromotionsControlFlight2":tr
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 4d 69 63 72 6f 73 6f 66 74 54 6f 44 6f 4c 61 75 6e 63 68 65 72 22 3a 74 72 75 65 2c 22 4d 6f 64 65 72 6e 51 75 69 63 6b 49 74 65 6d 22 3a 74 72 75 65 2c 22 4d 75 6c 74 69 54 65 72 6d 57 6f 72 64 48 69 74 48 69 67 68 6c 69 67 68 74 69 6e 67 22 3a 74 72 75 65 2c 22 4e 61 76 50 61 6e 65 41 64 73 22 3a 74 72 75 65 2c 22 4e 61 76 50 61 6e 65 44 65 6e 73 69 74 79 22 3a 74 72 75 65 2c 22 4e 61 76 50 61 6e 65 50 72 6f 6d 6f 74 69 6f 6e 54 65 78 74 32 22 3a 74 72 75 65 2c 22 4e 65 77 41 70 70 41 6c 6c 6f 77 41 75 74 6f 54 6f 67 67 6c 65 53 75 70 70 6f 72 74 50 6f 70 22 3a 74 72 75 65 2c 22 4e 65 77 41 70 70 44 69 73 61 6c 6c 6f 77 41 75 74 6f 54 6f 67 67 6c 65 56 69 61 43 61 6c 6c 62 61 63 6b 46 69 6c 65 22 3a 74 72 75 65 2c 22 4e 65 77 Data Ascii: y":true,"MicrosoftToDoLauncher":true,"ModernQuickItem":true,"MultiTermWordHitHighlighting":true,"NavPaneAds":true,"NavPaneDensity":true,"NavPanePromotionText2":true,"NewAppAllowAutoToggleSupportPop":true,"NewAppDisallowAutoToggleViaCallbackFile":true,"New
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 75 67 67 65 73 74 69 6f 6e 73 55 49 49 6d 70 72 6f 76 65 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 53 65 61 72 63 68 54 6f 70 52 65 73 75 6c 74 73 22 3a 74 72 75 65 2c 22 53 65 6e 64 45 6d 70 74 79 41 61 64 54 6f 6b 65 6e 42 72 6f 6b 65 72 53 63 6f 70 65 22 3a 74 72 75 65 2c 22 53 65 72 76 69 63 65 44 65 6c 69 76 65 72 79 4f 66 54 65 61 63 68 69 6e 67 43 6f 6e 74 65 6e 74 73 22 3a 74 72 75 65 2c 22 53 68 61 72 65 43 61 6c 65 6e 64 61 72 55 49 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 55 70 67 72 61 64 65 54 6f 52 53 33 22 3a 74 72 75 65 2c 22 53 68 6f 77 4e 61 76 50 61 6e 65 54 6f 44 6f 53 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 53 68 6f 77 4f 75 74 6c 6f 6f 6b 4d 6f 62 69 6c 65 50 72 6f 6d 6f 49 6e 41 63 63 6f 75 6e 74 73 41 6c 6c 44 6f 6e 65 22 3a 74 Data Ascii: uggestionsUIImprovements":true,"SearchTopResults":true,"SendEmptyAadTokenBrokerScope":true,"ServiceDeliveryOfTeachingContents":true,"ShareCalendarUI":true,"ShouldUpgradeToRS3":true,"ShowNavPaneToDoSwitcher":true,"ShowOutlookMobilePromoInAccountsAllDone":t
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 74 72 75 65 2c 22 55 73 65 42 6c 75 72 65 64 49 6d 61 67 65 4f 6e 46 69 72 73 74 52 75 6e 22 3a 74 72 75 65 2c 22 55 73 65 48 74 6d 6c 50 72 6f 63 65 73 73 6f 72 46 6f 72 42 6f 64 79 50 72 6f 63 65 73 73 69 6e 67 22 3a 74 72 75 65 2c 22 55 73 65 48 74 74 70 52 65 71 75 65 73 74 73 49 6e 73 74 65 61 64 4f 66 53 6f 63 6b 65 74 73 22 3a 74 72 75 65 2c 22 55 73 65 4e 65 6f 6e 22 3a 74 72 75 65 2c 22 55 73 65 53 6d 74 70 43 6c 69 65 6e 74 76 32 22 3a 74 72 75 65 2c 22 55 73 65 53 54 4c 4c 69 62 72 61 72 79 49 6e 49 6e 64 65 78 50 61 67 65 22 3a 74 72 75 65 2c 22 55 73 65 54 68 69 6e 53 65 6c 65 63 74 69 6f 6e 49 6e 64 69 63 61 74 6f 72 46 6f 72 4e 65 6f 6e 22 3a 74 72 75 65 2c 22 55 73 69 6e 67 41 70 70 4c 6f 63 61 6c 65 4e 61 6d 65 22 3a 74 72 75 65 2c 22 56 Data Ascii: true,"UseBluredImageOnFirstRun":true,"UseHtmlProcessorForBodyProcessing":true,"UseHttpRequestsInsteadOfSockets":true,"UseNeon":true,"UseSmtpClientv2":true,"UseSTLLibraryInIndexPage":true,"UseThinSelectionIndicatorForNeon":true,"UsingAppLocaleName":true,"V
2024-10-25 08:02:32 UTC	1024	IN	Data Raw: 69 6e 74 37 38 35 31 3a 32 36 31 37 38 31 3b 6f 75 73 68 61 35 37 34 31 3a 32 39 38 39 30 39 3b 6f 75 73 69 6d 34 36 37 31 3a 33 30 34 36 37 34 3b 6f 75 73 6b 69 34 33 37 31 3a 32 36 32 36 35 35 3b 6f 75 66 69 72 33 32 32 31 3a 32 36 32 36 36 32 3b 6f 75 73 65 61 38 34 39 31 3a 33 31 33 38 30 31 3b 6f 75 63 61 6c 33 32 36 31 3a 33 30 32 32 33 37 3b 6f 75 6a 75 6e 36 35 37 31 3a 32 38 32 32 33 39 3b 6f 75 63 61 6c 31 30 37 31 3a 33 39 32 39 33 32 3b 6f 75 66 69 72 33 37 37 31 3a 33 30 31 38 33 38 3b 6f 75 68 74 6d 37 34 39 31 3a 33 30 38 38 34 38 3b 6f 75 69 6d 6d 34 38 31 31 3a 33 30 30 31 36 36 34 39 3b 6f 75 63 61 6c 32 35 39 31 3a 33 38 36 34 35 37 3b 6f 75 6d 65 73 37 32 37 31 3a 32 39 38 39 36 33 3b 6f 75 75 73 65 37 37 31 31 3a 33 31 32 33 34 32 3b Data Ascii: int7851:261781;ousha5741:298909;ousim4671:304674;ouski4371:262655;oufir3221:262662;ousea8491:313801;oucal3261:302237;oujun6571:282239;oucal1071:392932;oufir3771:301838;ouhtm7491:308848;ouimm4811:30016649;oucal2591:386457;oumes7271:298963;ouuse7711:312342;

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080232Z-16849878b78smng4k6nq15r6s400000001rg00000000a1h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080232Z-15b8d89586fzhrwgk23ex2bvhw00000002zg000000005bdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9afce852-e01e-0020-6fef-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080232Z-15b8d89586fxdh48qknu9dqk2g0000000460000000006h90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cddcf92d-501e-008f-6a41-269054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080232Z-17c5cb586f6tq56f8fz96wddtg00000002bg00000000788h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:32 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080232Z-16849878b787wpl5wqkt5731b400000000z000000000ad0z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:02:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=204149 Date: Fri, 25 Oct 2024 08:02:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080233Z-r197bdfb6b4cz6xrsdncwtgzd40000000rag00000000a7sh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080233Z-17c5cb586f68ph8xe1hpx7aynw00000002cg000000006hav x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080233Z-r197bdfb6b4b4pw6nr8czsrctg00000000tg00000000bf1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080233Z-17c5cb586f6qkkscezt8hb00a000000002bg000000005u9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080233Z-15b8d89586fxdh48qknu9dqk2g0000000450000000006zrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:33 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080234Z-17c5cb586f6gkqkwd0x1ge8t0400000000fg000000002av0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080234Z-15b8d89586fcvr6p5956n5d0rc0000000620000000006a1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:35 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:35 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080235Z-16849878b78nx5sne3fztmu6xc000000018g0000000049dk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:35 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080235Z-16849878b78fmrkt2ukpvh9wh400000008t000000000emhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:35 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3892a0ce-b01e-003d-5f3a-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080235Z-17c5cb586f6qk7x5scs1ghy2m4000000026g00000000b3k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:02:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=204147 Date: Fri, 25 Oct 2024 08:02:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 08:02:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:36 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-17c5cb586f6mhqqb91r8trf2c8000000013g0000000047nr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-16849878b788tnsxzb2smucwdc0000000910000000001uh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9b05f8c0-e01e-0020-40f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-15b8d89586frzkk2umu6w8qnt80000000fk000000000813w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:36 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 389dace0-b01e-003d-533d-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-r197bdfb6b48v72xb403uy6hns00000000q0000000009nnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:36 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-15b8d89586f989rkfw99rwd68g00000001fg0000000053qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:36 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 66eaddbf-601e-0084-58ff-256b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080236Z-17c5cb586f6qt228zy1nuwhy2g00000002cg00000000301m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-15b8d89586fzhrwgk23ex2bvhw00000002w000000000ac80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-16849878b78p8hrf1se7fucxk8000000011000000000drgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-16849878b785g992cz2s9gk35c00000008x000000000b1w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-r197bdfb6b4tq6ldv3s2dcykm800000002qg00000000e4z1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-r197bdfb6b466qclztvgs64z1000000001r0000000004vbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:37 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 111e84cc-b01e-003e-6d58-268e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080237Z-17c5cb586f6w4mfs5xcmnrny6n00000001ug0000000016b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:38 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9b0fb70e-e01e-0020-42f5-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080238Z-r197bdfb6b429k2s6br3k49qn400000006e0000000001vm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:38 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080238Z-16849878b78j5kdg3dndgqw0vg0000000200000000005cdb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:38 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080238Z-15b8d89586fbt6nf34bm5uw08n000000045g000000003sqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:38 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080238Z-17c5cb586f67hhlz1ecw6yxtp000000002h0000000007fqx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080238Z-15b8d89586frzkk2umu6w8qnt80000000fm0000000006y7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:39 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080239Z-17c5cb586f6qt228zy1nuwhy2g00000002c00000000038rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:39 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080239Z-16849878b78hz7zj8u0h2zng1400000009200000000040x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:39 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080239Z-r197bdfb6b429k2s6br3k49qn4000000069g0000000095gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:39 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:40 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080240Z-r197bdfb6b4kq4j5t834fh90qn0000000cb000000000297m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:40 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:40 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f9fc18b-f01e-0096-2cf2-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080240Z-r197bdfb6b4tq6ldv3s2dcykm800000002xg00000000164p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:40 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 6764be4f-301e-0099-1efc-246683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080240Z-r197bdfb6b4cz6xrsdncwtgzd40000000ra000000000c8wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:40 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080240Z-16849878b78hh85qc40uyr8sc800000000n0000000000vuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:40 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:40 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080240Z-16849878b787sbpl0sv29sm89s00000008zg0000000099uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 71363f0e-d01e-0065-7af4-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080241Z-r197bdfb6b4tq6ldv3s2dcykm800000002y0000000000fa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:41 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:41 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080241Z-15b8d89586flzzks5bs37v2b9000000004dg000000008mkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:41 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080241Z-16849878b78dsttbr1qw36rxs800000008xg000000009z8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:41 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:41 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080241Z-17c5cb586f6qt228zy1nuwhy2g00000002c00000000038ts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:41 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080241Z-r197bdfb6b4cz6xrsdncwtgzd40000000rag00000000a7yf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:41 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:42 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 24724c44-d01e-002b-6428-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080242Z-15b8d89586fcvr6p5956n5d0rc000000063g00000000499p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:42 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080242Z-16849878b78fssff8btnns3b1400000000c0000000002xeg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:42 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080242Z-16849878b7898p5f6vryaqvp580000000120000000008w75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:42 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 07aa16c4-201e-0033-7ef4-24b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080242Z-r197bdfb6b4tq6ldv3s2dcykm800000002w0000000003m42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:42 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080242Z-15b8d89586fcvr6p5956n5d0rc000000064g000000002xy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:43 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080243Z-17c5cb586f6qk7x5scs1ghy2m40000000270000000008fth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:43 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080243Z-16849878b78s2lqfdex4tmpp7800000008z0000000006a24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:43 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080243Z-16849878b785g992cz2s9gk35c00000008v000000000gdcp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:43 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080243Z-16849878b785dznd7xpawq9gcn00000001hg00000000fw0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:43 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080243Z-17c5cb586f6tq56f8fz96wddtg00000002d0000000004x92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:44 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:44 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080244Z-16849878b786vsxz21496wc2qn0000000910000000006u23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:44 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:44 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:44 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:44 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080244Z-17c5cb586f6tzc2wdxudxz0zw800000001w0000000006u29 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 08:02:44 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:44 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:44 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080244Z-r197bdfb6b4gqmwlpwzzs5v83s00000001600000000093tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:44 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:44 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080244Z-16849878b785f8wh85a0w3ennn00000008v000000000awsf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:44 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:44 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 16b9c19d-f01e-0052-0d9e-269224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080244Z-16849878b787psctgubawhx7k800000008qg00000000bk55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:44 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:45 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 97926059-b01e-0002-293b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080245Z-17c5cb586f6gkqkwd0x1ge8t0400000000dg000000001ysz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:45 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080245Z-16849878b786lft2mu9uftf3y400000001dg00000000f6tx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:45 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1b3e59d2-d01e-0017-05f8-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080245Z-17c5cb586f6hp4zfqskwhb6z30000000026g000000007stz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:45 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7842422a-e01e-003c-05ee-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080245Z-16849878b78fssff8btnns3b1400000000f0000000003a5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:45 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:45 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cea37fdd-f01e-003f-5ff2-24d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080245Z-r197bdfb6b4hsj5bywyqk9r2xw00000001qg000000000may x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:46 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080246Z-16849878b78jfqwd1dsrhqg3aw0000000900000000009d2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:46 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080246Z-16849878b78nx5sne3fztmu6xc000000013g00000000f5p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:46 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:46 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080246Z-16849878b785dznd7xpawq9gcn00000001rg000000000thp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:46 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:46 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080246Z-16849878b78hh85qc40uyr8sc800000000cg0000000034c4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:46 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:46 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080246Z-17c5cb586f6qt228zy1nuwhy2g00000002b0000000004mgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:46 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:47 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c82c03e6-f01e-001f-0cf2-245dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080247Z-15b8d89586flzzks5bs37v2b9000000004cg00000000a1ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:47 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a90b7fa3-401e-005b-4246-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080247Z-15b8d89586flspj6y6m5fk442w0000000620000000003dp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:47 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080247Z-16849878b78k8q5pxkgux3mbgg00000008wg0000000075r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:47 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:47 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080247Z-16849878b78j7llf5vkyvvcehs00000001cg0000000045ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:47 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:47 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:47 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 23333e9c-201e-003f-1e18-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080247Z-r197bdfb6b48v72xb403uy6hns00000000r00000000085mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:47 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:48 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:48 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:48 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080248Z-16849878b78625wls3r8psr7u000000000mg000000001wcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:48 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:48 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:48 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080248Z-r197bdfb6b48pcqqxhenwd2uz800000001000000000065wg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:48 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:48 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:48 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080248Z-16849878b78c5zx4gw8tcga1b400000008qg00000000h9yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:48 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:48 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:48 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080248Z-16849878b78hh85qc40uyr8sc800000000d00000000035pf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:48 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:48 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:48 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080248Z-16849878b787sbpl0sv29sm89s00000008x000000000hc3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:48 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:49 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:49 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:49 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080249Z-16849878b785f8wh85a0w3ennn00000008ug00000000cekk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:49 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:49 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:49 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:49 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080249Z-16849878b78s2lqfdex4tmpp7800000008u000000000mn85 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:49 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:49 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:49 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:49 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: d6a45923-201e-006e-3dec-25bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080249Z-17c5cb586f68ph8xe1hpx7aynw00000002gg000000001xr2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:49 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:49 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:49 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080249Z-17c5cb586f6mhqqb91r8trf2c80000000130000000004tc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:49 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:49 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:49 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:49 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080249Z-16849878b78625wls3r8psr7u000000000e00000000030nx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:49 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:50 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:50 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 90c23955-201e-0096-7520-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080250Z-r197bdfb6b4gqmwlpwzzs5v83s000000014000000000dkdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:50 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:50 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:50 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080250Z-15b8d89586fvk4kmbg8pf84y880000000130000000007ws9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:50 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:50 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:50 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:50 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080250Z-16849878b78hz7zj8u0h2zng1400000008yg00000000c5cy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:50 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:50 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:50 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:50 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080250Z-16849878b787wpl5wqkt5731b400000000yg00000000c53t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:50 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:50 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:50 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080250Z-15b8d89586f6nn8zb8x99wuenc00000001b0000000001z8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:50 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	56974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:51 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:51 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080251Z-16849878b7898p5f6vryaqvp58000000014g000000003nsf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:51 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	56975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:51 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:51 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:51 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080251Z-r197bdfb6b4cz6xrsdncwtgzd40000000rb000000000amd0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:51 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	56976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:51 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:51 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080251Z-16849878b78k46f8kzwxznephs00000008wg00000000258w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:51 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	56977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:51 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 7f6d22c4-101e-0046-21f0-2591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080251Z-16849878b78bcpfn2qf7sm6hsn00000001y0000000001x3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	56978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:51 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080251Z-15b8d89586f8nxpt6ys645x5v000000001c00000000084va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	56980	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080252Z-16849878b787wpl5wqkt5731b400000000x000000000etyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	56981	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080252Z-16849878b785dznd7xpawq9gcn00000001kg00000000bzyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	56982	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f795d00-001e-0082-463f-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080252Z-15b8d89586f6nn8zb8x99wuenc00000001c0000000000mka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	56983	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080252Z-16849878b785dznd7xpawq9gcn00000001mg000000009df6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	56984	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 508e2446-401e-0048-3188-250409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080252Z-15b8d89586ffsjj9qb0gmb1stn00000004c0000000006qmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	56985	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:52 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-17c5cb586f68ph8xe1hpx7aynw00000002k00000000002tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:53 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	56986	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-16849878b78bcpfn2qf7sm6hsn00000001t000000000dhga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:53 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	56988	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 219fbbc4-201e-0071-49b1-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-16849878b78c5zx4gw8tcga1b400000008t000000000b8q7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	56987	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-16849878b78rjhv97f3nhawr7s00000008wg000000006nr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:53 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	56989	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-17c5cb586f6f69jxsre6kx2wmc00000002kg000000005ugs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	56990	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-17c5cb586f6qkkscezt8hb00a0000000029g000000008skm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:54 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	56991	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-16849878b78s2lqfdex4tmpp7800000008wg00000000bzra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:54 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	56992	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080253Z-16849878b78p8hrf1se7fucxk8000000013g000000009gwk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	56993	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:53 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080254Z-16849878b78nx5sne3fztmu6xc000000014g00000000d4fw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	56994	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:54 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 6651509d-f01e-00aa-4661-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080254Z-17c5cb586f6q4vmqk5qfzgptrg00000002gg000000006hqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	56995	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:54 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-16849878b786vsxz21496wc2qn00000008y000000000du2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	56997	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:54 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-17c5cb586f6qkkscezt8hb00a000000002fg000000000pff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	56996	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:54 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-17c5cb586f62blg5ss55p9d6fn00000000t00000000042ky x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	56998	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 02da5d6a-901e-0064-7bf4-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-r197bdfb6b49q4951yb663v3ds00000001900000000066zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	56999	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-16849878b786vsxz21496wc2qn000000091g000000005a2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	57001	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 4b9b81ad-501e-007b-4028-265ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-15b8d89586fvpb597drk06r8fc00000001ag00000000324z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	57002	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2dbb46b4-901e-0067-695f-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-16849878b78j5kdg3dndgqw0vg00000001ug00000000ma4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	57000	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080255Z-17c5cb586f6qs7hge7b080kmr00000000240000000009yvt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	57003	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:55 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: af8bbd6e-001e-00a2-3df5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080256Z-15b8d89586ff5l62aha9080wv000000001fg000000005czd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	57004	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ffafe551-c01e-007a-413b-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080256Z-17c5cb586f6zrq5bnguxgu7frc00000001000000000056qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:56 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	57005	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:56 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: d1923f92-801e-0067-5fe5-25fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080256Z-15b8d89586flspj6y6m5fk442w00000005y00000000092un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:56 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	57006	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:56 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:56 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080256Z-15b8d89586fst84k5f3z220tec0000000fug000000003q65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:56 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	57007	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:56 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:56 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fda05279-201e-0085-3258-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080256Z-17c5cb586f6hhlf5mrwgq3erx8000000016000000000av07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	57009	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:57 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080257Z-r197bdfb6b4b4pw6nr8czsrctg00000000u000000000ae08 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	57008	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:57 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080257Z-16849878b786lft2mu9uftf3y400000001g00000000086ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	57010	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:57 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: f68ade12-f01e-0099-2856-269171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080257Z-17c5cb586f67hhlz1ecw6yxtp000000002fg000000009rpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	57011	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:57 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:57 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 92c6748a-601e-0001-5ca3-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080257Z-16849878b78c5zx4gw8tcga1b400000008x00000000017cb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	57012	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:57 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-17c5cb586f6tq56f8fz96wddtg000000029g00000000a77n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:58 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	57014	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-r197bdfb6b42rt68rzg9338g1g00000001bg000000006uw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	57013	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-15b8d89586fmhkw429ba5n22m800000001kg000000006btp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	57015	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-16849878b785g992cz2s9gk35c0000000910000000001h0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:02:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	57016	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 63177759-c01e-0046-8028-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-17c5cb586f65j4snyp1hqk5z2s00000001mg000000003geu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:58 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	57018	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-16849878b78wv88bk51myq5vxc00000000e0000000003276 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:59 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	57019	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:58 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080258Z-16849878b785f8wh85a0w3ennn00000008z0000000001t8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:59 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	57017	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:02:58 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:02:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:02:59 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080259Z-16849878b78k46f8kzwxznephs00000008ug000000006t7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:02:59 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	57021	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:00 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080300Z-r197bdfb6b42rt68rzg9338g1g000000019g00000000bph4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	57020	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:00 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a74cd39-001e-0066-3b2c-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080300Z-r197bdfb6b466qclztvgs64z1000000001q000000000646a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	57022	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:00 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:00 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080300Z-16849878b78hz7zj8u0h2zng140000000900000000008798 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:00 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	57023	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:00 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:00 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080300Z-16849878b78625wls3r8psr7u000000000kg00000000341a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:00 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	57024	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:00 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:00 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 6be9265b-201e-003c-6328-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080300Z-r197bdfb6b4gx6v9pg74w9f47s0000000220000000003s35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:00 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	57025	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:01 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:01 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: f9b59f27-e01e-0099-2c28-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080301Z-16849878b78gvgmlcfru6nuc5400000008yg000000002u0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	57026	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:01 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:01 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c9277d07-501e-0047-62ae-24ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080301Z-15b8d89586f4zwgbgswvrvz4vs00000001ag00000000bc47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:01 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	57027	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:01 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:01 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7f9b0e41-501e-0047-71a3-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080301Z-16849878b78lhh9t0fb3392enw00000008xg0000000007g7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:01 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	57029	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:01 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 9f655796-901e-0015-35ae-24b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080301Z-15b8d89586f6nn8zb8x99wuenc0000000150000000009tdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	57028	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:03:01 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 08:03:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:03:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T080301Z-16849878b78dsttbr1qw36rxs80000000900000000003utt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 08:03:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Target ID:	0
Start time:	04:02:20
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:02:25
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2212,i,7468168222127439658,6562450614758436169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	04:02:27
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM="
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	04:02:29
Start date:	25/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Imagebase:	0x7ff6623d0000
File size:	2'486'784 bytes
MD5 hash:	6F8EAC2C377C8F16D91CB5AC8B8DBF5F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	04:02:38
Start date:	25/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Imagebase:	0x7ff62e760000
File size:	274'432 bytes
MD5 hash:	6FEB00C9A2C3FF66230658B3012BAB6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\8AC87BC8-836B-4E08-9134-65C22638A056

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG1

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6908, Parent PID: 4064

General

Chronological Activities

Analysis Process: chrome.exePID: 4216, Parent PID: 6908

General

Chronological Activities

Analysis Process: chrome.exePID: 6632, Parent PID: 4064

General

Windows Analysis Report
https://go2.sentinelone.com/MzI3LU1OTS0wODcAAAGWWlk8gehw7IUIqQDL8tOSz0xG9P-ii3hgeZAfIMQ92Uknm-B9iJ6GGb7JiTUECF2t1f9gaUM=