Edit tour

Windows Analysis Report
https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv

Overview

General Information

Sample URL:	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv
Analysis ID:	1544993
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Downloads suspicious files via Chrome

Drops password protected ZIP file

Found suspicious ZIP file

Allocates memory with a write watch (potentially for evading sandboxes)

Creates a process in suspended mode (likely to inject code)

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=1984,i,9041773597454674287,8571613679135902817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

unarchiver.exe (PID: 6468 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 6328 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 5748 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 5776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49956 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCNy9zQEIj8rNAQi5ys0BCKLRzQEIitPNAQik1s0BCPTWzQEIp9jNAQj5wNQVGPXJzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download HTTP/1.1Host: drive.usercontent.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCNy9zQEIj8rNAQi5ys0BCKLRzQEIitPNAQik1s0BCPTWzQEIp9jNAQj5wNQVGPXJzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download&confirm=t&uuid=38477393-18a8-48c9-b133-1949a072e6eb HTTP/1.1Host: drive.usercontent.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ViMp12b93WDlA8CWEVyDNjphsdUWOu7Fp53WpwglfmAVlVYbX025Wg5_p1SfcYelwOelfXKHaMPasN2ASzyGVntTY6kM0367Q3dCmdxNgK0ZkiyXDN7DhtLpGc-4mMp3GdkkCuV7MFqTaVmtcN7O3u5m_1ybfnpA7k15RI8yuMq9DOtK0zM
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49956 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip (copy)

Jump to dropped file

Drops password protected ZIP file

Source: FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip.crdownload.0.dr	Zip Entry: encrypted
Source: chromecache_49.2.dr	Zip Entry: encrypted

Found suspicious ZIP file

Source: FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip.crdownload.0.dr	Zip Entry: FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat
Source: chromecache_49.2.dr	Zip Entry: FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat

Source: classification engine

Classification label: mal56.win@22/6@6/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\d5813fd6-f270-4d48-b068-85215f7cdf31.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5748:120:WilError_03

Source: C:\Windows\SysWOW64\unarchiver.exe

File created: C:\Users\user\AppData\Local\Temp\unarchiver.log

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=1984,i,9041773597454674287,8571613679135902817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=1984,i,9041773597454674287,8571613679135902817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://drive.usercontent.google.com/download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download

LLM: Page contains button: 'Download anyway' Source: '0.0.pages.csv'

Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: AD0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 2960000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: E20000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe TID: 6212	Thread sleep count: 86 > 30			Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe TID: 6212	Thread sleep time: -43000s >= -30000s			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\unarchiver.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\unarchiver.exe

Code function: 13_2_0083B286 GetSystemInfo,

13_2_0083B286

Source: C:\Windows\SysWOW64\unarchiver.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	11 Process Injection	1 Masquerading	OS Credential Dumping	2 Virtualization/Sandbox Evasion	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	2 Virtualization/Sandbox Evasion	LSASS Memory	3 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Disable or Modify Tools	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
docs.google.com	142.250.184.238	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
drive.usercontent.google.com	142.250.185.193	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.193	drive.usercontent.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.238	docs.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544993
Start date and time:	2024-10-30 00:06:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@22/6@6/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 51 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.181.238, 64.233.167.84, 34.104.35.123, 142.250.186.131, 142.250.186.35, 4.175.87.197, 199.232.214.172, 40.69.42.241, 20.242.39.171, 93.184.221.240, 142.250.184.227
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv

Simulations

Behavior and APIs

Time	Type	Description
20:19:48	API Interceptor	34x Sleep call for process: unarchiver.exe modified

Process:	C:\Windows\SysWOW64\unarchiver.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2600
Entropy (8bit):	5.265316809868836
Encrypted:	false
SSDEEP:	48:RFDIgxME0NlJTG8TGb8TG8TGpmTGPTG8TGplIgxME0NTGbSTGsIgxME0NTGcNTGl:DZMEMMEliMErLx
MD5:	5D757589CE09C0225D55CFA4FC002247
SHA1:	E5C473677A3062EC8B1A46C257DC7AE572167180
SHA-256:	021162F1BB9E01FA2D242BA32403434E67ED6F1F7C286C916BF09AC7339A3DEB
SHA-512:	410264B77F99C7A05658B0CE555081747C057E1D10AB65BF6B6DF2F44CD121DB5B1CF8E373271EC3199FD99317DDE05545F957948DC59561DD56503F3AE2AD70
Malicious:	false
Reputation:	low
Preview:	10/29/2024 8:19 PM: Unpack: C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip..10/29/2024 8:19 PM: Tmp dir: C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz..10/29/2024 8:19 PM: Received from standard out: ..10/29/2024 8:19 PM: Received from standard out: 7-Zip 18.05 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-04-30..10/29/2024 8:19 PM: Received from standard out: ..10/29/2024 8:19 PM: Received from standard out: Scanning the drive for archives:..10/29/2024 8:19 PM: Received from standard out: 1 file, 6957 bytes (7 KiB)..10/29/2024 8:19 PM: Received from standard out: ..10/29/2024 8:19 PM: Received from standard out: Extracting archive: C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip..10/29/2024 8:19 PM: Received from standard out: --..10/29/2024 8:19 PM: Received from standard out: Path = C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip..10/29/2024 8:19 PM: Received fro

C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6957
Entropy (8bit):	7.963293163823115
Encrypted:	false
SSDEEP:	96:fM+vhg2DH0jiicIkxfez6ALqm99d7wE8kR04NWkJXz6A48GfJ2EoKCNmgM2:fT0yZez6AL1EE800qnJj6z8ytoKCNmgf
MD5:	0847C3254C0D15B9673D96C89CE26F00
SHA1:	F5E4C2E45A35CA8B3553AE045D94FF33368DF857
SHA-256:	71D48C1B5CDB72463E26A128E26BFE414E65CDC7E95551783E779C33F62207F2
SHA-512:	2E2B2B37A73E706E8EBA462A0BFA0D9AE96ECDFABC0FACF95C2717FB99BCE296BE8F1D482BE9CF0013BB7CD58A8ABAB5BDA748F0A9E001EBA132B8C7B86E827F
Malicious:	true
Reputation:	low
Preview:	PK.........\\Y:#f.'....I..8...FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat.)......G..`J..+ZB.x...dc7...sW7.U.....~L.1tq..}>Dc zp..+...5$v..K..W4.{..i^.......E.....[\|.#c.j.{Q..s.33..r...][....gz%.I..n..!...0..xV.m..Ynv...wf.).8KW..a.`._.06. .f(r..D.d......v....Kl.st..?....%.p`..../."kc...y.$s...>..m.(..,r1....A.r. .z. ..e@..WYV.'Jc.......A0......6`d....Rx.Hy....P..^H...-.k..1v3..@.....w}.L.....QX ./...xq{..H..1..s...F\|c..Y..$.Zx2._.(e.^87.G.....\|.._E....C?.?...3....@.......c..p..#U..p..2.h...)...? K../...B..D..uy.P.a...............Cp.G.>......"\.G.....LG..Ab.rQ.....S...(.%.3....$.A`"..Y+...B.........X0mm..}.L..v......I.O..j`...&B...._5V..~......z...k...}../4E.w........r6.;.nFB...F.[.WN...../U.r.........R...E8......L...zM^.n..=ql.....i?...M....pd..Oy..>w1...Iwb.u.Nq..89.(..9.&.x..a../...>_.'..,#..O..MZ.g..e?.2..g.....G9...'.~%+x.....M:.!P.C.e%......6..6C....(}..5H.....8.&.69..-E7muH......N...>...a<....V~....1......\;.....*.$.>d

C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6957
Entropy (8bit):	7.963293163823115
Encrypted:	false
SSDEEP:	96:fM+vhg2DH0jiicIkxfez6ALqm99d7wE8kR04NWkJXz6A48GfJ2EoKCNmgM2:fT0yZez6AL1EE800qnJj6z8ytoKCNmgf
MD5:	0847C3254C0D15B9673D96C89CE26F00
SHA1:	F5E4C2E45A35CA8B3553AE045D94FF33368DF857
SHA-256:	71D48C1B5CDB72463E26A128E26BFE414E65CDC7E95551783E779C33F62207F2
SHA-512:	2E2B2B37A73E706E8EBA462A0BFA0D9AE96ECDFABC0FACF95C2717FB99BCE296BE8F1D482BE9CF0013BB7CD58A8ABAB5BDA748F0A9E001EBA132B8C7B86E827F
Malicious:	false
Reputation:	low
Preview:	PK.........\\Y:#f.'....I..8...FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat.)......G..`J..+ZB.x...dc7...sW7.U.....~L.1tq..}>Dc zp..+...5$v..K..W4.{..i^.......E.....[\|.#c.j.{Q..s.33..r...][....gz%.I..n..!...0..xV.m..Ynv...wf.).8KW..a.`._.06. .f(r..D.d......v....Kl.st..?....%.p`..../."kc...y.$s...>..m.(..,r1....A.r. .z. ..e@..WYV.'Jc.......A0......6`d....Rx.Hy....P..^H...-.k..1v3..@.....w}.L.....QX ./...xq{..H..1..s...F\|c..Y..$.Zx2._.(e.^87.G.....\|.._E....C?.?...3....@.......c..p..#U..p..2.h...)...? K../...B..D..uy.P.a...............Cp.G.>......"\.G.....LG..Ab.rQ.....S...(.%.3....$.A`"..Y+...B.........X0mm..}.L..v......I.O..j`...&B...._5V..~......z...k...}../4E.w........r6.;.nFB...F.[.WN...../U.r.........R...E8......L...zM^.n..=ql.....i?...M....pd..Oy..>w1...Iwb.u.Nq..89.(..9.&.x..a../...>_.'..,#..O..MZ.g..e?.2..g.....G9...'.~%+x.....M:.!P.C.e%......6..6C....(}..5H.....8.&.69..-E7muH......N...>...a<....V~....1......\;.....*.$.>d

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	6957
Entropy (8bit):	7.963293163823115
Encrypted:	false
SSDEEP:	96:fM+vhg2DH0jiicIkxfez6ALqm99d7wE8kR04NWkJXz6A48GfJ2EoKCNmgM2:fT0yZez6AL1EE800qnJj6z8ytoKCNmgf
MD5:	0847C3254C0D15B9673D96C89CE26F00
SHA1:	F5E4C2E45A35CA8B3553AE045D94FF33368DF857
SHA-256:	71D48C1B5CDB72463E26A128E26BFE414E65CDC7E95551783E779C33F62207F2
SHA-512:	2E2B2B37A73E706E8EBA462A0BFA0D9AE96ECDFABC0FACF95C2717FB99BCE296BE8F1D482BE9CF0013BB7CD58A8ABAB5BDA748F0A9E001EBA132B8C7B86E827F
Malicious:	false
Reputation:	low
URL:	https://drive.usercontent.google.com/download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download&confirm=t&uuid=38477393-18a8-48c9-b133-1949a072e6eb
Preview:	PK.........\\Y:#f.'....I..8...FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat.)......G..`J..+ZB.x...dc7...sW7.U.....~L.1tq..}>Dc zp..+...5$v..K..W4.{..i^.......E.....[\|.#c.j.{Q..s.33..r...][....gz%.I..n..!...0..xV.m..Ynv...wf.).8KW..a.`._.06. .f(r..D.d......v....Kl.st..?....%.p`..../."kc...y.$s...>..m.(..,r1....A.r. .z. ..e@..WYV.'Jc.......A0......6`d....Rx.Hy....P..^H...-.k..1v3..@.....w}.L.....QX ./...xq{..H..1..s...F\|c..Y..$.Zx2._.(e.^87.G.....\|.._E....C?.?...3....@.......c..p..#U..p..2.h...)...? K../...B..D..uy.P.a...............Cp.G.>......"\.G.....LG..Ab.rQ.....S...(.%.3....$.A`"..Y+...B.........X0mm..}.L..v......I.O..j`...&B...._5V..~......z...k...}../4E.w........r6.;.nFB...F.[.WN...../U.r.........R...E8......L...zM^.n..=ql.....i?...M....pd..Oy..>w1...Iwb.u.Nq..89.(..9.&.x..a../...>_.'..,#..O..MZ.g..e?.2..g.....G9...'.~%+x.....M:.!P.C.e%......6..6C....(}..5H.....8.&.69..-E7muH......N...>...a<....V~....1......\;.....*.$.>d

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1594
Entropy (8bit):	7.862952554761723
Encrypted:	false
SSDEEP:	24:M5DhErRsW6OTfolVFt/qRyFQCB0RxgawoIqH4B36zPiX9/YhtdHft7:M5dIWGbofFBq+GR2eITI6sf9
MD5:	C66F20F2E39EB2F6A0A4CDBE0D955E5F
SHA1:	575EF086CE461E0EF83662E3ACB3C1A789EBB0A8
SHA-256:	2AB9CD0FFDDDF7BF060620AE328FE626BFA2C004739ADEDB74EC894FAF9BEE31
SHA-512:	B9C44A2113FB078D83E968DC0AF2E78995BB6DD4CA25ABFF31E9AB180849C5DE3036B69931CCA295AC64155D5B168B634E35B7699F3FE65D4A30E9058A2639BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX.WkLSg.....65..A-f....lOk..."2..f[T...9.3q.q.....CnaKX.4.A/\D.l....m1qY....~ik+..F.i..;.A..,.<.NN......~..B..1.f..V....7....?.R..<.r3./...d.....A..h....S.......W^...`...0.......?_M...L.....`M.V.muG.$.e.J+.~Y........B.g?aF.+..M1..[.1. .?2O ...n.y.......XuQ.H. ...A.....+.....b..D..D.y......E.....M o4....R.w..b;`...R..#.\.t.%..]..[....%X<.L.Eo5Umm?..F.Oa1...W`uU:..L<..k..C....7a..1../QD3..U.D.l.T.5H......4...v......=t.."D?b.Pr.~....d#.Q.R.......)9'F/B. ....U.k'...p.!..J...O4.J.)G./"9.6.)@....4.h.(B2I.fB...AD.........7eK.%.O$gP.v.... y.t"9.E...h[...z{.C..[....7.......4......-....X......tJ...a.y....o<P..."..H\MI(Y....Y..A.,.D.$6B..`.Y..B......y..q.m..ci..,F.w......^h&.t...Y.]/......H...d<..cl.c...6N4..8FI....h%.[&u....cd.L.\|...M......."n...&.....d.'t:...c5..{~/7E.(`.`...>V7.RXS.k%..9...l....eRm...%..i...~.@.B..?.".../.v.0.@.c{.(.^w.=....:t=.>........V..}P..`...}.!u..k...p.ye...6.'..,.....Y..........

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 00:07:23.409595013 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:23.721684933 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:23.944643021 CET	443	49698	104.98.116.138	192.168.2.7
Oct 30, 2024 00:07:23.944869995 CET	49698	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:24.331058979 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:24.643620014 CET	49675	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:24.643713951 CET	49674	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:24.784440994 CET	49672	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:25.534176111 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:27.940443993 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:32.017559052 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:32.565346003 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:32.752867937 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:33.362256050 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:33.954828024 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.954870939 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:33.954952955 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.955261946 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.955292940 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:33.955358982 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.955529928 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.955543041 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:33.955734968 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:33.955749035 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.350141048 CET	49674	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:34.350143909 CET	49675	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:34.391275883 CET	49672	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:34.827569962 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.827841997 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.827856064 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.828210115 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.828270912 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.828917980 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.828979969 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.829860926 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.829921007 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.829998016 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.830009937 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.847395897 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.847757101 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.847770929 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.848165989 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.848321915 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.848889112 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.849023104 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.849203110 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.849261999 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.863466024 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:34.878906012 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.894972086 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:34.894989014 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:34.947441101 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:35.207290888 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:35.255258083 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:35.255270958 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:35.299371004 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:35.333425045 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:35.333481073 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:35.333636045 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:35.614897966 CET	49705	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:07:35.614926100 CET	443	49705	142.250.184.238	192.168.2.7
Oct 30, 2024 00:07:35.684736013 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:35.684766054 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:35.684850931 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:35.685638905 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:35.685657978 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.207351923 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:36.207384109 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:36.207675934 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:36.208188057 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:36.208204985 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:36.563177109 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.563524008 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:36.563558102 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.564698935 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.564765930 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:36.866451025 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:36.866717100 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:36.866725922 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.866914034 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.909549952 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:36.909569025 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:36.957515001 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:37.023433924 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:37.023472071 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:37.023571968 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:37.037838936 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:37.037873030 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:37.077817917 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:37.112512112 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:37.112545967 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:37.113744020 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:37.113811970 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:37.125479937 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:37.125648975 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:37.174978971 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:37.175017118 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:37.221223116 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:37.681615114 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:37.681688070 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:37.681746960 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:37.681782007 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:37.681832075 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:37.685056925 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:37.685117006 CET	443	49708	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:37.685214043 CET	49708	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:37.846206903 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:37.928392887 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:37.928472042 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:37.960596085 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:37.960638046 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:37.961052895 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.002239943 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.281327009 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.323333979 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.525747061 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.525825024 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.525908947 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.526021957 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.526046038 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.526062012 CET	49710	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.526070118 CET	443	49710	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.570355892 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.570403099 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:38.570480108 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.570812941 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:38.570827007 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.407753944 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.407846928 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.422553062 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.422566891 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.422915936 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.431444883 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.475342035 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.490171909 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:39.490211964 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:39.490477085 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:39.490977049 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:39.490998030 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:39.681715965 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.681880951 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.681946993 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.683691025 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.683710098 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:39.683720112 CET	49712	443	192.168.2.7	184.28.90.27
Oct 30, 2024 00:07:39.683727026 CET	443	49712	184.28.90.27	192.168.2.7
Oct 30, 2024 00:07:40.235585928 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.235662937 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.238631964 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.238647938 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.239042997 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.247387886 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.291328907 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.491863012 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.491924047 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.491970062 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.492012024 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.492026091 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.492079020 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.497678041 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.497728109 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.497765064 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.497773886 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.497817039 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.497826099 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.609441996 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.609469891 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.609540939 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.609550953 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.609585047 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.609603882 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.613713026 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.613734961 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.613792896 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.613799095 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.613838911 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.617249966 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.617266893 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.617315054 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.617321968 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.617422104 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.652230024 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.652247906 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.652316093 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.652323961 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.652368069 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.727510929 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.727533102 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.727595091 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.727622986 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.727669001 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.730540037 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.730556011 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.730628014 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.730634928 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.730683088 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.733481884 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.733499050 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.733557940 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.733565092 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.733603954 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.735994101 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.736017942 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.736066103 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.736073017 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.736103058 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.736120939 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.738389969 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.738405943 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.738456964 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.738462925 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.738507032 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.768934011 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.768953085 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.769013882 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.769027948 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.769083023 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.842912912 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.842963934 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843007088 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843019962 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843055010 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843070030 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843641043 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843710899 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843715906 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843764067 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843816996 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843820095 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843827963 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843866110 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.843914986 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.843924999 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.891562939 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.891591072 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.891736984 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.892690897 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.892739058 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.892802000 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894545078 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894592047 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.894730091 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894742966 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.894759893 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894821882 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894829988 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.894881010 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.894896984 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.896275043 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.896286964 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.896344900 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.896563053 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.896574974 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.897407055 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.897417068 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:40.897515059 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.897651911 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:40.897663116 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.615210056 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.615711927 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.615741968 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.616240978 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.616246939 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.616338968 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.616666079 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.616671085 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.617074013 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.617078066 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.626564026 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.626921892 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.626950979 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.627295017 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.627300978 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.636188030 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.636512995 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.636534929 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.636879921 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.636884928 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.652781963 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.653140068 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.653155088 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.653539896 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.653543949 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.742609978 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.742636919 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.742690086 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.742698908 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.742736101 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.742959023 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.742974997 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.742984056 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.742990971 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.745836020 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.745876074 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.745948076 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746126890 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746140957 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.746515989 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.746537924 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.746587038 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.746598005 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746630907 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746795893 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746800900 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.746809006 CET	49716	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.746812105 CET	443	49716	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.748814106 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.748850107 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.749003887 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.749162912 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.749176979 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.760839939 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.762058973 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.762116909 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.762188911 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.762206078 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.762224913 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.762231112 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.764046907 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.764059067 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.764120102 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.764278889 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.764290094 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.770189047 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.770292044 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.770379066 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.770447969 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.770463943 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.770477057 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.770490885 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.772411108 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.772440910 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.772501945 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.772656918 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.772666931 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.804868937 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.804892063 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.804938078 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.804949045 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.804986954 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.805160999 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.805169106 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.805179119 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.805185080 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.807252884 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.807277918 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:41.807353973 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.807511091 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:41.807523012 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.363377094 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 00:07:42.473092079 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.473726034 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.473751068 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.474525928 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.474535942 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.479206085 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.479787111 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.479826927 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.480214119 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.480221987 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.497509956 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.498141050 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.498173952 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.499109983 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.499125957 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.527890921 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.528310061 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.528590918 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.528611898 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.528994083 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.529000998 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.529074907 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.529089928 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.529391050 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.529396057 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.600594997 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.600765944 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.600847006 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.600985050 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.601005077 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.601015091 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.601021051 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.603746891 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.603777885 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.603898048 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.604131937 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.604144096 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.609436989 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.609503984 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.609658003 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.609729052 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.609751940 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.609764099 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.609770060 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.612257004 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.612291098 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.612371922 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.612488985 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.612503052 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.633435011 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.633589983 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.633769035 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.633769035 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.633809090 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.633826971 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.636665106 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.636687040 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.636755943 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.636953115 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.636966944 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.658533096 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.658688068 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.658761024 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.658792019 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.658808947 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.658822060 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.658828020 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.661283016 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.661298990 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.661386013 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.661508083 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.661518097 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.679333925 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.679416895 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.679524899 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.679563046 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.679563999 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.679582119 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.679589987 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.681574106 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.681602955 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:42.681767941 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.681917906 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:42.681931973 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.353214025 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.353790998 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.353807926 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.354233980 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.354240894 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.361532927 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.362055063 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.362065077 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.362545967 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.362550974 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.367980957 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.368455887 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.368468046 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.369178057 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.369183064 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.397203922 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.397852898 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.397861958 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.398264885 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.398269892 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.431534052 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.432080984 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.432096004 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.432992935 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.433001041 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.487355947 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.487875938 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.488015890 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.488956928 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.488956928 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.488976002 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.488986015 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.494345903 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.494888067 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.494900942 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.494915962 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.494965076 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.495016098 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.495095015 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.495095015 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.495109081 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.495122910 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.496341944 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.496351957 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.499500990 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.499521017 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.499948978 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.500228882 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.500242949 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.528068066 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.528198957 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.528276920 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.528513908 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.528522968 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.528611898 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.528618097 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.533958912 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.533988953 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.534106016 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.534940004 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.534954071 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.565632105 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.565677881 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.566014051 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.629523993 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.629544020 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.629574060 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.629580021 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.634293079 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.634397030 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.634481907 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.634655952 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.634691000 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.701390982 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.701457977 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.701669931 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.741131067 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.741131067 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.741153955 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.741166115 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.746912003 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.746944904 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.747068882 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.747247934 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:43.747262955 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:43.799875021 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:44.250700951 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.251329899 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.251827955 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.251844883 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.252665997 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.252671003 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.253993034 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.254017115 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.254654884 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.254662991 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.301983118 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.304163933 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.304197073 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.305335999 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.305341005 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.383877039 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.384010077 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.384150982 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.384213924 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.384458065 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.384521008 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.384666920 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.384691954 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.384700060 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.385354996 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.385360956 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.385624886 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.385643005 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.388109922 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.388128996 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.388143063 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.388149023 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.393306971 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.393342018 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.393404961 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.393712997 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.393728018 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.395744085 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.395771027 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.395823002 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.396681070 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.396691084 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.435246944 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.435302019 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.435364008 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.435568094 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.435581923 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.435597897 CET	49732	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.435602903 CET	443	49732	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.438647985 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.438702106 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.438781977 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.438927889 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.438942909 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.475025892 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.475416899 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.475433111 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.475833893 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.475837946 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.539180994 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.540926933 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.540990114 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.541037083 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.541064978 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.541081905 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.541091919 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.544373035 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.544395924 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.544461012 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.544608116 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.544617891 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.604017019 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.604262114 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.604332924 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.604367018 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.604367018 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.604382038 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.604391098 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.607911110 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.607969999 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:44.608263969 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.608491898 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:44.608508110 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.124299049 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.149538994 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.167071104 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.167489052 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.167583942 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.168644905 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.168658972 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.171224117 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.171247005 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.171744108 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.171749115 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.172033072 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.172112942 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.173367023 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.173382044 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.297261953 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.297317028 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.297379971 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.298505068 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.299232006 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.299307108 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.301321983 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.301525116 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.301594019 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.301780939 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.313055038 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.313086987 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.313102961 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.313108921 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.317065954 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.317094088 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.320296049 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.320308924 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.320323944 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.320329905 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.322997093 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.323007107 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.324042082 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.324045897 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.341648102 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.349364042 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.349411964 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.349615097 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.354650021 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.354687929 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.354923010 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.355468988 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.355530024 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.356142998 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.356156111 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.367233038 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.367244959 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.405635118 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.405673027 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.409280062 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.409300089 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.409357071 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.409698009 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.409712076 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.426534891 CET	49698	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:45.430468082 CET	49744	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:45.430500031 CET	443	49744	104.98.116.138	192.168.2.7
Oct 30, 2024 00:07:45.430735111 CET	49744	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:45.432023048 CET	443	49698	104.98.116.138	192.168.2.7
Oct 30, 2024 00:07:45.445164919 CET	49744	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:07:45.445177078 CET	443	49744	104.98.116.138	192.168.2.7
Oct 30, 2024 00:07:45.452564955 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.452728987 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.452788115 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.453252077 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.453260899 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.453269958 CET	49738	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.453274012 CET	443	49738	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.456142902 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.456151009 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.456212044 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.456672907 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.456681967 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.484088898 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.484164000 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.484229088 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.484401941 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.484442949 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.484468937 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.484483957 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.488734007 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.488799095 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:45.488884926 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.489130020 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:45.489160061 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.130178928 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.130717039 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.130744934 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.131213903 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.131221056 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.182771921 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.183218956 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.183273077 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.183677912 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.183689117 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.207403898 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.207863092 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.207886934 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.208301067 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.208307028 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.242347002 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.242727041 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.242764950 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.243289948 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.243297100 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.260443926 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.260660887 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.260741949 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.260795116 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.260813951 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.260826111 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.260831118 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.263402939 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.263438940 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.263519049 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.263648987 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.263664007 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.316992044 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.317164898 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.317231894 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.341912985 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.342324018 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.342437029 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.355739117 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.355776072 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.361145973 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.361159086 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.361171007 CET	49745	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.361176968 CET	443	49745	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.370507002 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.370556116 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.370667934 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.371403933 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.371457100 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.371670008 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.371922016 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.371941090 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.372087955 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.372108936 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.375792980 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.375938892 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.375989914 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.376249075 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.376269102 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.376280069 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.376285076 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.378475904 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.378503084 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.378650904 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.379076004 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.379091024 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.450844049 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.451416016 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.451455116 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.452389002 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.452394009 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.582751036 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.582911015 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.582977057 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.583916903 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.583935976 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.583971977 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.583977938 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.591795921 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.591829062 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.592109919 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.592698097 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.592710018 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.981825113 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.982567072 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.982587099 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:46.983750105 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:46.983758926 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.071702003 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:47.071768045 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:47.071846008 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:47.109401941 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.109549999 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.109791994 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.109908104 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.109929085 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.115401030 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.115443945 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.115556955 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.115982056 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.115994930 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.119101048 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.119571924 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.119601011 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.120237112 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.120246887 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.121237993 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.122014046 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.122033119 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.122598886 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.122605085 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.131489038 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.131982088 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.132005930 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.132695913 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.132707119 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.253104925 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.253176928 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.253238916 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.253699064 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.253717899 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.253729105 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.253735065 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.257543087 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.257570982 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.257652044 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.257865906 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.257880926 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.261816978 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.262137890 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.262217999 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.262331963 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.262345076 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.262384892 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.262388945 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.264661074 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.265000105 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.265037060 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.265818119 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.265892982 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.265917063 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.265917063 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.266195059 CET	49751	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.266202927 CET	443	49751	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.267385006 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.267395020 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.269032001 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.269049883 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.269157887 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.269583941 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.269594908 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.342732906 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.343527079 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.343538046 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.344408989 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.344413042 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.477458954 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.477535009 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.477747917 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.477806091 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.477806091 CET	49752	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.477823973 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.477833986 CET	443	49752	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.480530977 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.480566025 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.480654955 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.480880976 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.480890989 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.838529110 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.839075089 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.839091063 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.841212034 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.841217995 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.969253063 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.969454050 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.969537973 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.969636917 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.969636917 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.969657898 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.969666004 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.973953009 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.974001884 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.974073887 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.974364042 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.974378109 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.990616083 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.992027998 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.992082119 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.995698929 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:47.995714903 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:47.999687910 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.001413107 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.001420021 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.001441956 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.002546072 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.002554893 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.030693054 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.030724049 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.031290054 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.031301975 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.123950958 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.124092102 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.124156952 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.124557018 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.124608040 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.124638081 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.124660969 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.130213022 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.130276918 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.130336046 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.130796909 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.130816936 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.130831003 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.130836010 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.131491899 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.131532907 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.131617069 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.131757021 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.131767035 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.133994102 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.134093046 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.134171009 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.134321928 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.134356976 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.157808065 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.157883883 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.157943964 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.158138037 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.158162117 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.158186913 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.158200026 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.162422895 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.162451029 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.162519932 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.162694931 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.162705898 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.229171991 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.229685068 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.229702950 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.230168104 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.230175018 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.255891085 CET	49709	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:07:48.255940914 CET	443	49709	172.217.18.4	192.168.2.7
Oct 30, 2024 00:07:48.362425089 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.362489939 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.362554073 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.362853050 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.362873077 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.362884045 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.362890005 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.371269941 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.371318102 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.371407032 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.371696949 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.371710062 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.717463970 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.718426943 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.718460083 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.718966961 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.718971968 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.850305080 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.850706100 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.851208925 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.851208925 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.851208925 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.856240034 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.856288910 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.857805014 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.857805014 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.857841969 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.876642942 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.877485037 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.877505064 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.878045082 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.878050089 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.882216930 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.883145094 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.883145094 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.883168936 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.883184910 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.913324118 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.915287971 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.915309906 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:48.918217897 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:48.918225050 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.010710955 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.010782003 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.011076927 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.011076927 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.011672974 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.011692047 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.014065027 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.014107943 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.014373064 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.014373064 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.014403105 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.016602993 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.016680956 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.016896963 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.016927958 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.016927958 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.016943932 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.016954899 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.019376040 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.019412994 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.019530058 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.019748926 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.019761086 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.053864956 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.054056883 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.054147959 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.054147959 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.054898977 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.054904938 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.056638002 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.056682110 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.056907892 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.056907892 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.056937933 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.124752998 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.125890017 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.125890017 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.125926018 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.125941038 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.160077095 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.160115957 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.258287907 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.258547068 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.258718967 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.258718967 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.258759975 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.258776903 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.262028933 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.262062073 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.262255907 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.262301922 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.262307882 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.595923901 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.596649885 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.596685886 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.597191095 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.597198963 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.727960110 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.728032112 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.728198051 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.728382111 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.728408098 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.728424072 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.728430033 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.731949091 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.731983900 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.732116938 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.732325077 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.732333899 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.741704941 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.742333889 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.742372036 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.742801905 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.742811918 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.766731024 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.767786980 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.767816067 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.768452883 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.768465042 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.814477921 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.815140009 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.815152884 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.815757990 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.815763950 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.871089935 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.871454000 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.871546984 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.871598005 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.871618032 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.871656895 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.871663094 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.875196934 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.875243902 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.875332117 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.875511885 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.875531912 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.902942896 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.903031111 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.903103113 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.903332949 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.903352022 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.903358936 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.903364897 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.906976938 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.907028913 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.907267094 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.907445908 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.907459021 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.943964005 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.944107056 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.944180965 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.944365025 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.944385052 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.944396973 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.944402933 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.947789907 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.947823048 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.947901011 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.948092937 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.948106050 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.994333029 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.994967937 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.994988918 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:49.995501995 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:49.995515108 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.125175953 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.125245094 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.125318050 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.125525951 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.125554085 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.125570059 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.125577927 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.129393101 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.129456043 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.129523993 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.129714012 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.129730940 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.482527971 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.483242035 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.483266115 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.483992100 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.484009981 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.608781099 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.609445095 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.609462976 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.610052109 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.610055923 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.615983009 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.616045952 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.616286039 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.616322041 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.616322041 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.616342068 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.616350889 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.619499922 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.619540930 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.619616032 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.619775057 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.619786024 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.640038967 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.640666962 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.640705109 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.641164064 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.641170025 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.684043884 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.684664965 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.684695005 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.685266018 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.685287952 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.738589048 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.738703012 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.738780975 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.739048958 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.739070892 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.739083052 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.739090919 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.742729902 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.742750883 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.742815018 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.743005037 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.743020058 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.770571947 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.770786047 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.771162987 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.771272898 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.771294117 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.771306038 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.771317959 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.774395943 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.774430990 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:50.774499893 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.774943113 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:50.774955034 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.074242115 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.074292898 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.074366093 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.074687004 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.074700117 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.074714899 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.074719906 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.077034950 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.077486038 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.077514887 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.077951908 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.077965021 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.078197002 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.078227043 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.078330994 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.078512907 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.078524113 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.208492041 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.208595037 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.208661079 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.208821058 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.208849907 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.208863020 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.208870888 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.211853981 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.211905956 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.212014914 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.212304115 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.212321997 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.368870974 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.369554996 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.369580984 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.370028019 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.370033026 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.474158049 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.474931002 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.474956036 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.475491047 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.475501060 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.498928070 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.499015093 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.499301910 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.499464989 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.499484062 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.505043030 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.505088091 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.505166054 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.505593061 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.505609989 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.604317904 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.604510069 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.604655981 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.604856014 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.604856014 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.604877949 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.604890108 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.608354092 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.608400106 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.608493090 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.608736992 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.608751059 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.810488939 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.811161041 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.811187029 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.811674118 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.811681032 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.833009958 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.836705923 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.836721897 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.837377071 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.837383032 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.940732002 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.940936089 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.941018105 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.941054106 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.941077948 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.941097021 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.941121101 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.944292068 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.944335938 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.944545031 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.944885969 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.944899082 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.967704058 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.967772961 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.967959881 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.968133926 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.968133926 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.968148947 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.968158960 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.969407082 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.970011950 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.970027924 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.970623970 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.970632076 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.971208096 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.971265078 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:51.971401930 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.971584082 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:51.971604109 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.106544971 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.106616020 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.106738091 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.106904984 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.106928110 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.106945992 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.106951952 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.109966993 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.110022068 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.110153913 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.110425949 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.110435963 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.258198023 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.258795977 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.258827925 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.259459972 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.259464979 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.360110998 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.360591888 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.360625029 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.361040115 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.361046076 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.394347906 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.394423962 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.394721985 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.394788027 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.394804001 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.394819021 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.394824982 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.397697926 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.397759914 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.397841930 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.398097038 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.398113966 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.494086027 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.494534969 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.494612932 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.494667053 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.494693995 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.494709015 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.494714975 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.497596025 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.497639894 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.497977018 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.498202085 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.498214960 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.713430882 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.713968992 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.713994026 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.714401007 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.714405060 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.723051071 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.723400116 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.723423958 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.723782063 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.723786116 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.842988014 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.843480110 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.843511105 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.843907118 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.843914032 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.849175930 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.849431992 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.849502087 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.849549055 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.849571943 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.849586964 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.849592924 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.851886988 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.851995945 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.852163076 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.852288961 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.852323055 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.858767986 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.858973980 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.859064102 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.859162092 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.859162092 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.859210968 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.859246969 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.861879110 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.861922026 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.861985922 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.862144947 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.862157106 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.973273993 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.973383904 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.973449945 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.973675013 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.973691940 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.973704100 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.973710060 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.976507902 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.976568937 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:52.976867914 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.977051020 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:52.977071047 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:53.202331066 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:53.202958107 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:53.203021049 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:53.204324007 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:53.204346895 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.259378910 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.262087107 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.262105942 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.263200998 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.263206959 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.502818108 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.502898932 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.502985001 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.504678965 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.504759073 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.504790068 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.504807949 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.507860899 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.507921934 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.508099079 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.508306026 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.508322954 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.629128933 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.629900932 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.629955053 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.631215096 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.631222010 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.635781050 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.635849953 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.635967016 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.636241913 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.636260986 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.636281967 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.636290073 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.638195992 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.639137983 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.639168024 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.639909983 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.639919043 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.640583992 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.641145945 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.641177893 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.642266035 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.642271996 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.644675970 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.644722939 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.645415068 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.645729065 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.645744085 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.763428926 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.763726950 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.763887882 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.763887882 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.766220093 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.766249895 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.767090082 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.767136097 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.767740011 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.767740011 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.767771959 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.770762920 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.771002054 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.771059036 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.771159887 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.771176100 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.771188021 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.771193981 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.772914886 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.773394108 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.773647070 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.774332047 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.774332047 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.774348974 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.774358034 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.776354074 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.776390076 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.776671886 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.777018070 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.777031898 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.798902035 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.798949957 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:54.799170971 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.799484015 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:54.799495935 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.230520964 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.230573893 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:55.230650902 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.231111050 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.231162071 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:55.231296062 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.232757092 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.232770920 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:55.233088970 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:55.233103991 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:55.249660015 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.250207901 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.250252008 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.250673056 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.250679016 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.380376101 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.380436897 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.380650997 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.380757093 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.380757093 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.380786896 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.380798101 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.383980036 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.384026051 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.384098053 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.384287119 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.384305954 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.388092041 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.388541937 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.388576031 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.388984919 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.388992071 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.499470949 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.500083923 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.500121117 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.500576019 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.500581026 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.500895977 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.501319885 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.501405954 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.501647949 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.501661062 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522102118 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522330046 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522530079 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522624016 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.522670984 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.522697926 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522710085 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.522716045 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.522836924 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.522856951 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.523252010 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.523256063 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.526159048 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.526207924 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.526386976 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.526645899 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.526660919 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.631901979 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632138968 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632184029 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632216930 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.632276058 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.632297039 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632311106 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.632317066 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632639885 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.632865906 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.634141922 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.634171963 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.634187937 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.634196997 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.643930912 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.643965960 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.643994093 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.643996000 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.644073009 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.644088030 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.644246101 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.644253969 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.644391060 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.644407034 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.651130915 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.651206970 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.651262999 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.651361942 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.651361942 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.651376963 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.651386976 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.653878927 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.653908014 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.653999090 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.654093981 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:55.654108047 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:55.706067085 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 00:07:56.094615936 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.095067024 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.095097065 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.095443010 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.095820904 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.095881939 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.096183062 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.105925083 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.106210947 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.106236935 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.107506990 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.107579947 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.107928038 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.107996941 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.120856047 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.121469975 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.121509075 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.121990919 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.121997118 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.139341116 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.158596039 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.158624887 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:56.204539061 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:56.254025936 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.254049063 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.254136086 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.254198074 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.254254103 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.255002975 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.255031109 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.255038023 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.255043983 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.258460999 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.259005070 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.259041071 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.259470940 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.259484053 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.259490967 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.259505987 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.259607077 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.259722948 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.259737968 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.381311893 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.381942987 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.381953955 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.382601023 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.382606030 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.393258095 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.393558025 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.393691063 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.393728971 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.393748999 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.393762112 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.393767118 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.397880077 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.398186922 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.398220062 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.398348093 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.398566008 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.398582935 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.398703098 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.398714066 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.399210930 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.399230003 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.404535055 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.404944897 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.404974937 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.405432940 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.405438900 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.512662888 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.512728930 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.512865067 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.513087988 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.513087988 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.513102055 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.513109922 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.516351938 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.516395092 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.516463995 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.516616106 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.516628981 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.529839039 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.529891014 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.530010939 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.530023098 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.530158997 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.530286074 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.530308008 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.530323029 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.530328989 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.533389091 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.533427000 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.533492088 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.533648968 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.533664942 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.541533947 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.541553974 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.541611910 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.541618109 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.541799068 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.541841030 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.541862965 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.541873932 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.541881084 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.544632912 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.544672012 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:56.544907093 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.545054913 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:56.545067072 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.011640072 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.012309074 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.012334108 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.012862921 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.012868881 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.128684998 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.129478931 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.129503965 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.129837990 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.129842997 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.147072077 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.147094965 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.147142887 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.147216082 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.147216082 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.147699118 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.147699118 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.147716045 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.147728920 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.153223038 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.153275967 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.153497934 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.153815985 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.153827906 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.262574911 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.262654066 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.262728930 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.267569065 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.287349939 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.297363997 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.315583944 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.334717989 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.347599983 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.691365004 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.691397905 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.691442966 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.691450119 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.697438955 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.697473049 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.698514938 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.698522091 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.699683905 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.699762106 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.701656103 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.701669931 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.702677965 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.702688932 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.703107119 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.703110933 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.706382036 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.706410885 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.706494093 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.706897020 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.706912994 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.827363968 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.827450037 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.827850103 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.828020096 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.828038931 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.828049898 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.828054905 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.829581976 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.829957008 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.830082893 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.830089092 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.830255032 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.830441952 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.832448959 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.832453966 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.832487106 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.832490921 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.835529089 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.835591078 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.835623980 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.835640907 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.840193987 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.840226889 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.840332031 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.841939926 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.841969967 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.842061996 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.844172001 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.844194889 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.844260931 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.844533920 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.844547987 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.844847918 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.844861984 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.845226049 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.845237017 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.911559105 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.912643909 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.912736893 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:57.913768053 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:57.913784027 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.046883106 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.047143936 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.047203064 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.047336102 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.047358990 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.047390938 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.047398090 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.055481911 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.055505991 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.055574894 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.055701971 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.055710077 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.455617905 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.455652952 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:58.455739975 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:58.457768917 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.457799911 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.458931923 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.458936930 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.463632107 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:58.463704109 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:58.472558022 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:58.472616911 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:58.476569891 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:58.476610899 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:58.476769924 CET	443	49795	142.250.185.193	192.168.2.7
Oct 30, 2024 00:07:58.476823092 CET	49795	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:07:58.572546005 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.583602905 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.589302063 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.589361906 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.589504004 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.608881950 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.608903885 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.609559059 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.609565020 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.609873056 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.609891891 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.610239029 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.610243082 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.610503912 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.610522985 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.610528946 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.610536098 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.627847910 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.627888918 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.628021002 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.628485918 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.628496885 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.639151096 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.639699936 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.639719009 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.640409946 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.640414000 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.734338999 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.734419107 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.734498978 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.734802008 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.734802008 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.734827042 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.734837055 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.736768007 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.736820936 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.736901045 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.737195015 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.737207890 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.737668037 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.737765074 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.737871885 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.738102913 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.738135099 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.739852905 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.739867926 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.740130901 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.740241051 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.740252972 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.773200989 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.773271084 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.773343086 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.773654938 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.773654938 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.773674011 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.773684978 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.776994944 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.777102947 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.777271986 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.777471066 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.777507067 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.821877956 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.822470903 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.822547913 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.822977066 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.822992086 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.957161903 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.957268000 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.957339048 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.957561016 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.957586050 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.957592010 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.957600117 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.961836100 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.961880922 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:58.961992979 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.964023113 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:58.964037895 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.484879971 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.488595963 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.488620043 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.489801884 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.489808083 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.500463009 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.501190901 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.501214027 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.501946926 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.501951933 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.516511917 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.522109985 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.522206068 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.522950888 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.522965908 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.622895002 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.623030901 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.623080969 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.623090982 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.623225927 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.634038925 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.634104967 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.634160995 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.634176016 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.634218931 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.634269953 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.648576021 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.648643017 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.648889065 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.658046007 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.658066988 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.658081055 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.658087969 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.659769058 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.659774065 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.681760073 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.681783915 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.681797028 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.681802034 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.694989920 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.739022970 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:07:59.872277021 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:07:59.926599979 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.243858099 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.243889093 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.244843006 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.244849920 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.253444910 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.253524065 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.254817009 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.254831076 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.369486094 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.369569063 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.369673014 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.380634069 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.380716085 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.382381916 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.431958914 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.432058096 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.432152033 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.432269096 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.432269096 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.432298899 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.432310104 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.433125973 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.433125973 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.433204889 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.433237076 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.448383093 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.448407888 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.449170113 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.449203968 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.449213982 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.449265957 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.449394941 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.449434042 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.450870991 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.450916052 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.450982094 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.451098919 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.451117039 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.498143911 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.498166084 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.500720978 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.500741959 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.500803947 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.500879049 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.500896931 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:00.500976086 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:00.500984907 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.203867912 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.209080935 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.219887018 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.219960928 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.225313902 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.231363058 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.243417025 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.251867056 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.251900911 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.252341986 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.252382040 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.253734112 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.253741026 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.255337954 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.262476921 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.262491941 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.263453960 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.263465881 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.267076969 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.267090082 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.268212080 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.268217087 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.272607088 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.272634029 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.273528099 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.273535013 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.381850958 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.381906986 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.381966114 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.382977009 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.383304119 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.383351088 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.383358002 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.383404970 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.385907888 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.385927916 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.385940075 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.385945082 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.388566017 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.388566017 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.388622999 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.388647079 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.393902063 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.393944979 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.394082069 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.396374941 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.396390915 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.397092104 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.397171974 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.397236109 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.397989988 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.398025036 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.398101091 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.398438931 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.398444891 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.398456097 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.398458958 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.398710012 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.398722887 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.399195910 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.399251938 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.399297953 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.401851892 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.401869059 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.401896000 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.401901960 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.406044960 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.406073093 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.406138897 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.408452988 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.408466101 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.408581018 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.409010887 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.409024954 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.409663916 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.409672022 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.438941956 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.439001083 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.439063072 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.439279079 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.439279079 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.439297915 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.439311028 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.443172932 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.443207979 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:01.443299055 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.443511963 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:01.443516970 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.146384954 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.146599054 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.147157907 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.147180080 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.147797108 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.147802114 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.148277044 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.148310900 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.149581909 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.149590015 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.170327902 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.170341969 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.170922041 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.170944929 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.172084093 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.172090054 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.172545910 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.172564030 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.173535109 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.173540115 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.188946009 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.189754009 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.189766884 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.190514088 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.190517902 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.279398918 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.279468060 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.279644966 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.279845953 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.280050039 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.280092955 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.280107021 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.280132055 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.306070089 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.306109905 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.306149960 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.306166887 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.306207895 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.306358099 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.306411028 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.306454897 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.327156067 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.327212095 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.327267885 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.680764914 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.680794001 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.680805922 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.680813074 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.715714931 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.715737104 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.723898888 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.723948002 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.723973989 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.723984003 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.727737904 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.727770090 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.727782965 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.727790117 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.730453014 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.730479002 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.730494022 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.730500937 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.821221113 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.821270943 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.821335077 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.822339058 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.822362900 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.835275888 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.835305929 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.835364103 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.835499048 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.835509062 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.873795986 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.873843908 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.873900890 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.874752998 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.874777079 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.874835014 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.876537085 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.876625061 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.876715899 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.889978886 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.890002012 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.890022039 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.890033960 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:02.890386105 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:02.890425920 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.016724110 CET	443	49744	104.98.116.138	192.168.2.7
Oct 30, 2024 00:08:03.016782999 CET	49744	443	192.168.2.7	104.98.116.138
Oct 30, 2024 00:08:03.568263054 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.568667889 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.568713903 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.568759918 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.569082975 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.569109917 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.569354057 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.569370031 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.569627047 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.569633007 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.639132023 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.639672041 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.639749050 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.640219927 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.640234947 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.645239115 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.645601988 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.645625114 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.645997047 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.646002054 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.648916006 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.649234056 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.649260998 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.649667025 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.649672985 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.699726105 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.699815035 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.699868917 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.699976921 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.699992895 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.700006962 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.700012922 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.701158047 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.701217890 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.701427937 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.701515913 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.701539040 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.701550961 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.701556921 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.702591896 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.702624083 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.702688932 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.702833891 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.702847958 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.703679085 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.703742981 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.703943968 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.704070091 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.704103947 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.773351908 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.773408890 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.773521900 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.773680925 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.773719072 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.773745060 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.773762941 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.776540995 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.776571035 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.776637077 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.776822090 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.776834011 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.778932095 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.778980017 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.779112101 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.779131889 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.779143095 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.779150963 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.779155970 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.781774044 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.781817913 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.781913042 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.782047987 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.782064915 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.783694029 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.783798933 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.783904076 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.783935070 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.783955097 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.783987999 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.783999920 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.784013033 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.784018040 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.787858963 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.787894011 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:03.788017988 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.788064957 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:03.788077116 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.453041077 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.453665972 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.453696966 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.454231024 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.454236031 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.465117931 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.465667963 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.465722084 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.466069937 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.466078043 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.520879984 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.523392916 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.523902893 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.523941040 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.526324987 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.526335001 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.527242899 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.527275085 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.528073072 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.534884930 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.534894943 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.535099983 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.535125971 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.536106110 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.536113024 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.586994886 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.587023020 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.587066889 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.587095976 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.587187052 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.587537050 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.587554932 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.587565899 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.587572098 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.592245102 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.592289925 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.592417955 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.592627048 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.592644930 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.599109888 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.599244118 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.599354982 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.599834919 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.599881887 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.599910975 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.599926949 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.603285074 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.603328943 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.603637934 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.603878021 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.603897095 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.652568102 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.652627945 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.653008938 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.653008938 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.653008938 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.656404972 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.656425953 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.656518936 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.656706095 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.656717062 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.660092115 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.660170078 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.660284996 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.660353899 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.660815954 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.660837889 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.660852909 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.660860062 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.663603067 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.663649082 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.663762093 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.663980961 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.663985014 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.664021969 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.664067030 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.664205074 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.664308071 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.664320946 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.664330959 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.664335012 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.667197943 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.667212963 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.667280912 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.667584896 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.667596102 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:04.956136942 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:04.956173897 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.320924997 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.321466923 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.321501017 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.322102070 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.322107077 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.367384911 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.367925882 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.367965937 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.368412018 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.368417978 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.399512053 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.399950981 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.399974108 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.400391102 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.400396109 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.415236950 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.415846109 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.415868044 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.416284084 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.416287899 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.435822010 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.436197996 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.436275959 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.436682940 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.436697006 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.449940920 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.450004101 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.450203896 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.450241089 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.450259924 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.450288057 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.450294971 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.453444004 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.453511953 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.453596115 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.453752041 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.453800917 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.496682882 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.496752024 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.496800900 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.496901035 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.496922970 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.496932030 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.496937990 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.499449968 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.499474049 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.499537945 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.499665022 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.499682903 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.532522917 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.532588959 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.532793999 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.533169985 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.533188105 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.533198118 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.533204079 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.537888050 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.537934065 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.538161039 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.538333893 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.538346052 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.544709921 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.544802904 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.545658112 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.546190023 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.546205044 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.546217918 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.546222925 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.549187899 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.549218893 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.549480915 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.549611092 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.549626112 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.569921017 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.569964886 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.570014954 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.570081949 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.570172071 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.570172071 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.570214033 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.570240974 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.572536945 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.572560072 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:05.572628021 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.572745085 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:05.572757959 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.201296091 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.201973915 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.202059031 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.202521086 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.202541113 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.263170004 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.263709068 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.263741016 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.264210939 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.264216900 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.273586988 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.273994923 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.274015903 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.274435997 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.274441004 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.296143055 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.296556950 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.296582937 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.297008991 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.297013998 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.306104898 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.306500912 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.306514978 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.306921005 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.306925058 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.333775043 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.333924055 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.333985090 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.333990097 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.334052086 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.334235907 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.334281921 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.334312916 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.334330082 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.337630033 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.337677002 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.337779045 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.337948084 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.337960005 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.397094011 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.397160053 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.397412062 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.397500992 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.397527933 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.397542000 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.397547007 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.400769949 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.400810003 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.400914907 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.401141882 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.401159048 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.423789978 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.423970938 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.424037933 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.424088955 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.424098969 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.424108982 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.424113989 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.428185940 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.428220987 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.428339005 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.428493023 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.428504944 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.442230940 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.442348003 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.442394018 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.442410946 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.442455053 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.442636013 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.442651987 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.442662001 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.442667961 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.443418026 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.443602085 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.443648100 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.443651915 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.443711042 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.443938971 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.443943977 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.443958044 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.443960905 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.446825027 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.446850061 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.446973085 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.447206020 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.447240114 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.447304964 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.447333097 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.447345972 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:06.447417021 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:06.447428942 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.091710091 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.092297077 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.092319012 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.092823982 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.092834949 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.132342100 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.132786036 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.132807970 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.133222103 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.133234978 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.177613974 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.178041935 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.178076982 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.178484917 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.178489923 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.180054903 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.180416107 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.180424929 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.180782080 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.180785894 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.226727962 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.226798058 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.226851940 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.227096081 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.227111101 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.227121115 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.227127075 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.230386972 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.230479002 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.230566025 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.230822086 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.230858088 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.263942957 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.263971090 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.264051914 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.264058113 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.264123917 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.264405012 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.264405012 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.264420033 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.264426947 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.268135071 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.268184900 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.268368959 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.268661022 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.268672943 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.306372881 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.306504965 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.306605101 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.306659937 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.307029009 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.307039976 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.307054043 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.307059050 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.307198048 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.307214022 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.307889938 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.307903051 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.311983109 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.312134981 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.312186003 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.312381029 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.312418938 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.312495947 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.312851906 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.312859058 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.312868118 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.312871933 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.314022064 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.314049959 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.315548897 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.315586090 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.315653086 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.318412066 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.318438053 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.434602976 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.434756041 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.434988022 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.435308933 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.435322046 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.444988966 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.445019007 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.445092916 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.446136951 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.446145058 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.961231947 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.961771011 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.961849928 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:07.962323904 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:07.962342024 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.015716076 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.016298056 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.016334057 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.016769886 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.016777039 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.062792063 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.063291073 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.063355923 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.063739061 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.063750982 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.066385984 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.066850901 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.066880941 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.067387104 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.067399025 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.092406988 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.092434883 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.092480898 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.092502117 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.092554092 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.092760086 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.092799902 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.092830896 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.092847109 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.095647097 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.095691919 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.095766068 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.095894098 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.095923901 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.155672073 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.155764103 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.155832052 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.156065941 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.156085968 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.156100035 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.156105995 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.158683062 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.158706903 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.158782959 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.158961058 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.158974886 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.184582949 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.185061932 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.185102940 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.185501099 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.185504913 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.194782019 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.194844007 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.194906950 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.195112944 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.195112944 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.195142031 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.195163012 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.197644949 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.197688103 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.197952986 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.198093891 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.198111057 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203007936 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203073978 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203140974 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.203165054 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203246117 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.203246117 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.203254938 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203305006 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.203309059 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.203353882 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.205252886 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.205279112 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.205337048 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.205452919 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.205465078 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.313944101 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.314115047 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.314176083 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.314357042 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.314377069 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.314388037 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.314393997 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.318500042 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.318536997 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.318767071 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.318933010 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.318948030 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.846873045 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.847501040 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.847553968 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.848325968 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.848342896 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.890471935 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.891011000 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.891042948 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.891473055 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.891479015 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.940021992 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.940531015 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.940553904 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.940990925 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.941003084 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.962088108 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.966150999 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.966170073 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.966633081 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.966639042 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.982498884 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.982615948 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.982676983 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.982770920 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.982805014 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.982814074 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.982821941 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.985743999 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.985769033 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:08.985842943 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.985996962 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:08.986006021 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.026951075 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.026978970 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.027028084 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.027040958 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.027081013 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.027302980 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.027319908 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.027334929 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.027338982 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.030427933 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.030478954 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.030560017 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.030769110 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.030786037 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.092259884 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.092921972 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.092950106 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.093372107 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.093384027 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.096220970 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.096322060 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.096395969 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.096405983 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.096456051 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.096545935 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.096545935 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.096601963 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.096611023 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.100131035 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.100195885 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.100295067 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.100435019 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.100455046 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.151669979 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.151834965 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.151906967 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.151995897 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.151995897 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.152015924 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.152019978 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.154525042 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.154572964 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.154658079 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.154856920 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.154875040 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.234224081 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.234370947 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.234452009 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.234618902 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.234632969 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.234641075 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.234647036 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.237545967 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.237596989 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.237723112 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.237881899 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.237896919 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.707261086 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.707856894 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.707871914 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.708549976 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.708554029 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.763674021 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.764097929 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.764133930 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.764525890 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.764530897 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.834722042 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.834945917 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.834995985 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.839123964 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.839139938 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.839148998 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.839154005 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.852737904 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.873101950 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.873146057 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.873598099 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.873606920 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.893032074 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.893119097 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.893431902 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.898542881 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.904006958 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.904036999 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.904047966 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.904055119 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.909104109 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.909202099 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.909281969 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.909512043 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.909548998 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.914357901 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.914383888 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.914872885 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.914877892 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.916893005 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.916927099 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.916985989 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.917644024 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.917655945 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.976802111 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.977416039 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.977444887 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:09.978104115 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:09.978108883 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.004764080 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.005228043 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.005306005 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.040656090 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.040838957 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.040946960 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.107157946 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.107217073 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.107491016 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.109091043 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.109114885 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.110923052 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.110960960 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.142352104 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.142371893 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.142409086 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.142416000 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.247081041 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.247219086 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.248163939 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.254416943 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.254441023 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.254518986 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.282149076 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.282196999 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.282262087 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.282617092 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.282668114 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.283029079 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.283041954 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.283606052 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.283617973 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.647638083 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.648093939 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.648116112 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.649267912 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.649272919 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.674215078 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.674612045 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.674695015 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.675065994 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.675081015 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.781481028 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.782294035 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.782330990 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.782347918 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.782391071 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.782422066 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.782433987 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.782444000 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.782449007 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.786920071 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.786958933 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.787019014 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.787163973 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.787173033 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.824098110 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.824193954 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.824282885 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.824400902 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.824430943 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.824469090 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.824485064 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.826654911 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.826690912 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:10.826798916 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.826921940 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:10.826930046 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.022058010 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.024149895 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.024173975 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.024576902 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.028073072 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.028083086 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.028723955 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.028759956 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.029252052 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.029263973 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.077692032 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.078393936 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.078423977 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.079077005 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.079082012 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.154725075 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.154833078 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.154967070 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.155136108 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.155136108 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.155153990 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.155162096 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.156049013 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.156189919 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.156250954 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.156301975 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.156301975 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.156336069 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.156364918 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.158951998 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.158976078 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.158984900 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.159006119 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.159040928 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.159064054 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.159837008 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.159847975 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.160140991 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.160160065 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.213301897 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.218868971 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.218955994 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.219013929 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.219028950 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.219042063 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.219047070 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.221445084 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.221496105 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.221613884 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.222440004 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.222474098 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.543665886 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.544146061 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.544178963 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.544625998 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.544631004 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.568594933 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.568932056 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.568964958 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.569375038 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.569380045 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.700084925 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.700109959 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.700154066 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.700232983 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.701984882 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.702003002 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.704670906 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.704685926 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.704745054 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.704776049 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.704974890 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.705020905 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.705094099 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.705111980 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.708496094 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.708529949 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.708681107 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.709069014 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.709079027 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.710083961 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.710175991 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:11.710256100 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.710408926 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:11.710444927 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.056763887 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.057415962 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.057468891 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.057656050 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.058024883 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.058038950 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.058767080 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.058790922 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.059716940 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.059725046 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.183640003 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.183813095 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.183885098 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.184042931 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.184061050 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.184071064 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.184077024 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.184638023 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.185390949 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.185422897 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.185862064 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.185868025 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.187614918 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.187653065 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.188009977 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.188208103 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.188218117 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.190603971 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.190732956 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.190798044 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.190861940 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.190959930 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.190983057 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.191008091 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.191016912 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.191044092 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.193911076 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.193998098 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.194099903 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.194294930 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.194333076 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313255072 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313319921 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313388109 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.313404083 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313467979 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313529968 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.313612938 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.313625097 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.313657045 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.313662052 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.316278934 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.316299915 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.316378117 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.316608906 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.316622972 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.452250957 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.452811956 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.452831984 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.453644991 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.453649998 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.463417053 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.463913918 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.463957071 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.464868069 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.464874983 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.585036993 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.585115910 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.585263968 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.597831011 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.597851992 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.597918987 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.597934961 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.598010063 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.612298012 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.612318993 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.612330914 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.612335920 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.727931976 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.727931976 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.728013039 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.728041887 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.775500059 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.775538921 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.775604010 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.775980949 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.775991917 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.776490927 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.776539087 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.776757002 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.776828051 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.776839972 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.945281982 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.945890903 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.945920944 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.946403980 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.946408033 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.952706099 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.953095913 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.953140020 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:12.953514099 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:12.953526020 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.059811115 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.060261011 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.060296059 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.060754061 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.060760021 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.079221010 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.079246998 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.079293013 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.079303026 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.079366922 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.079523087 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.079533100 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.079544067 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.079549074 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.083003998 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.083039999 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.083156109 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.083323002 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.083334923 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.085977077 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.086049080 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.086107016 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.086122990 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.086152077 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.086303949 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.086416960 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.086430073 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.086461067 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.086467981 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.091530085 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.091559887 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.091712952 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.091960907 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.091970921 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.188349009 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.188714981 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.188790083 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.188838959 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.188853025 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.188863039 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.188868046 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.192562103 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.192601919 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.192697048 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.192856073 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.192871094 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.499392033 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.499982119 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.499999046 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.500508070 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.500511885 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.536293030 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.536771059 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.536822081 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.537200928 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.537214041 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.628679991 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.629101038 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.629215956 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.629266024 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.629281998 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.629298925 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.629304886 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.633898973 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.633928061 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.634228945 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.634437084 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.634452105 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.700985909 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.701044083 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.701126099 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.701534986 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.701561928 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.701608896 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.701625109 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.708301067 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.708333969 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.712496042 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.712789059 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.712805033 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.836047888 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.837882042 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.837882042 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.837908030 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.837918997 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.851054907 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.851876020 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.851897955 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.856312037 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.856327057 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.913026094 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.913873911 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.913906097 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.915196896 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.915211916 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970340014 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970369101 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970417976 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970448971 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.970678091 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.970700026 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970733881 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.970741987 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.970789909 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.970796108 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.974421024 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.974462986 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:13.974654913 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.974729061 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:13.974735975 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.012375116 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.012459040 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.012778044 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.012778044 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.012778044 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.015635014 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.015676975 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.015860081 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.015953064 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.015969992 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.042573929 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.042603016 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.042653084 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.042819977 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.042819977 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.042967081 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.042984009 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.045311928 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.045353889 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.045649052 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.045737028 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.045751095 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.317612886 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.317639112 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.388282061 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.388885021 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.388932943 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.389540911 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.389553070 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.438888073 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.439553976 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.439588070 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.440146923 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.440154076 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.528784037 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.528867006 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.528990030 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.529243946 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.529243946 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.529279947 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.529298067 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.533556938 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.533622980 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.533817053 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.533972025 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.533991098 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.569035053 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.569077015 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.569122076 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.569364071 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.569364071 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.569436073 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.569453001 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.572452068 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.572494030 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.572659969 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.572829962 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.572840929 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.731200933 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.731755972 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.731795073 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.732350111 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.732357025 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.746112108 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.746588945 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.746622086 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.747180939 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.747188091 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.769543886 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.769980907 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.770014048 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.771348953 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.771354914 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.864130974 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.864202023 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.864273071 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.865242958 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.865269899 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.865284920 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.865292072 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.868472099 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.868550062 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.868643045 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.868881941 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.868927956 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.946577072 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.946753979 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.947104931 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.947256088 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.947280884 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.947287083 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.947294950 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.950632095 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.950684071 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:14.950809002 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.951150894 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:14.951170921 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.248568058 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.248651028 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.248742104 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.264852047 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.264873028 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.264882088 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.264887094 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.280005932 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.306679010 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.329777956 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.356650114 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.370790958 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.370834112 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.371301889 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.371335983 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.371603966 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.371620893 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.372008085 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.372014046 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.374947071 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.375036955 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.375210047 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.375349998 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.375371933 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.499560118 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.499979019 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.500000954 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.500068903 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.500073910 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.500122070 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.505181074 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.505181074 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.505220890 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.505264044 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.505417109 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.505446911 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.505461931 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.505472898 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.509083033 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509083986 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509130955 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.509143114 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.509227991 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509232998 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509407043 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509438038 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.509596109 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.509613991 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.627360106 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.627981901 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.628052950 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.628817081 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.628834009 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.697820902 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.698414087 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.698462963 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.699058056 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.699064970 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.761416912 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.761487961 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.761550903 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.761589050 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.761616945 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.761663914 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.761982918 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.762001991 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.762025118 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.762039900 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.766977072 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.767014027 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.767076969 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.767338991 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.767352104 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.827904940 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.828068972 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.828138113 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.828927040 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.828927040 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.828952074 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.828964949 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.839293957 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.839339972 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:15.839430094 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.839894056 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:15.839907885 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.113873005 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.115076065 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.115166903 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.115720034 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.115741014 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.243427038 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.243997097 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.244071007 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.244612932 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.244626045 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.246532917 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.246603966 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.246669054 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.246690989 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.246728897 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.246784925 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.246985912 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.246985912 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.247021914 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.247044086 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.250668049 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.250706911 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.250783920 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.250973940 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.250983000 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.253556967 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.254101038 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.254127026 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.254728079 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.254734993 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.374484062 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.374560118 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.374613047 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.374918938 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.374943972 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.374958992 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.374964952 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.379621029 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.379669905 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.379947901 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.380033016 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.380042076 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.385868073 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.386162043 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.386214018 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.386229992 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.386275053 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.386358976 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.386378050 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.386394024 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.386400938 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.389763117 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.389801979 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.389902115 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.390098095 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.390110970 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.516632080 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.517302990 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.517335892 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.517970085 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.517975092 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.598165989 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.599792957 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.599813938 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.600389004 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.600403070 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.649113894 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.649194002 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.649302006 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.649652004 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.649671078 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.649683952 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.649688959 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.653243065 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.653295040 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.653498888 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.653737068 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.653752089 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.730736971 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.730776072 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.730834961 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.730921984 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.730921984 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.731256008 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.731256008 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.731277943 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.731295109 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.734636068 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.734734058 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:16.734860897 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.735075951 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:16.735116959 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.128190994 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.130861044 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.131135941 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.131164074 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.131979942 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.131989002 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.132671118 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.132750988 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.133523941 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.133539915 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.138752937 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.139966965 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.139993906 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.141736984 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.141741991 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.257356882 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.257384062 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.257452011 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.257528067 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.257528067 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.258075953 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.258075953 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.258097887 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.258109093 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.261825085 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.261846066 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.261902094 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.261914015 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.261971951 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.262677908 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.262712955 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.262798071 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.262814045 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.267666101 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.267715931 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.267829895 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.268687963 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.268723011 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.268888950 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.272841930 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.272872925 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.273124933 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.273544073 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.273561001 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.280699015 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.280716896 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.280770063 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.281358957 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.281374931 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.281867027 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.281883955 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.282259941 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.282274961 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.397227049 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.398022890 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.398052931 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.398988962 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.398993969 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.530586004 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.530683041 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.530754089 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.530766010 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.530822992 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.530874968 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.539545059 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.539556026 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.539567947 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.539572954 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.543483973 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.543529034 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.543605089 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.543886900 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.543906927 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.735306978 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.775240898 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.775293112 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.776103020 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.776108980 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.904489040 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.904563904 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.904634953 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.944581985 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.944653988 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.968353987 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.968384981 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:17.968445063 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.968828917 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:17.968841076 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.010430098 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.010925055 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.010950089 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.011395931 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.011401892 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.015732050 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.016109943 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.016134024 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.016520023 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.016525030 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.023397923 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.023901939 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.023931980 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.024590969 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.024597883 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.140115023 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.140197039 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.140237093 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.140249014 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.140290976 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.140402079 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.140413046 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.140424967 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.140429974 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.143268108 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.143316984 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.143711090 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.144953966 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.144984961 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.149570942 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.149602890 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.149651051 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.149657011 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.149696112 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.149842024 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.149854898 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.149864912 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.149868965 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.152302980 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.152338028 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.152404070 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.152582884 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.152590036 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.153573036 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.153642893 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.153695107 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.153808117 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.153831005 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.153846025 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.153852940 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.155894995 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.155926943 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.156022072 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.156148911 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.156158924 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.295623064 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.296257973 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.296286106 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.297245026 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.297256947 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.427453041 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.427927017 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.428067923 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.428103924 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.428128958 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.428142071 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.428150892 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.431055069 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.431113005 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.431183100 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.431327105 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.431339025 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.720293999 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.720779896 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.720809937 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.721246004 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.721250057 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.853697062 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.853763103 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.853817940 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.853868961 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.854037046 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.854053974 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.854079962 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.854084969 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.857193947 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.857266903 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.857472897 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.857640028 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.857656002 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.881722927 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.882200003 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.882236958 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.882654905 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.882661104 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.901614904 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.902107954 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.902143955 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.902573109 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.902582884 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.903189898 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.903506041 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.903525114 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:18.903855085 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:18.903862953 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.019337893 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.019531965 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.019588947 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.019623041 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.019665956 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.019929886 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.019949913 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.023425102 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.023466110 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.023535967 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.023715973 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.023725033 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.037934065 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.037990093 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.038137913 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.038209915 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.038238049 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.038253069 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.038259029 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.041172981 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.041217089 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.041289091 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.041445971 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.041465044 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.138081074 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.138135910 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.138216019 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.138458014 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.138478994 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.138510942 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.138516903 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.141458035 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.141494989 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.141558886 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.141714096 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.141725063 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.194123030 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.194668055 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.194706917 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.195132971 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.195141077 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.331392050 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.331461906 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.331512928 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.331813097 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.331841946 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.331855059 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.331861973 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.339939117 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.340001106 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.340061903 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.340554953 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.340572119 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.585454941 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.585942030 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.585988045 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.586396933 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.586405993 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.716429949 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.716463089 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.716516018 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.716536999 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.716574907 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.716877937 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.716898918 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.716912985 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.716919899 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.720518112 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.720558882 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.720911980 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.721169949 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.721182108 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.742199898 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.742880106 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.742902040 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.743392944 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.743396997 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.768595934 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.771450043 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.771488905 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.771914959 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.771923065 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.875669956 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.875880957 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.875941992 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.876148939 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.876162052 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.876178980 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.876183987 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.878812075 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.878874063 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.878948927 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.879127026 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.879146099 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.895906925 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:08:19.895931959 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:08:19.896648884 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.897075891 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.897092104 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.897545099 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.897550106 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.898384094 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.898519039 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.898675919 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.898716927 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.898740053 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.898752928 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.898760080 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.901164055 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.901201010 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:19.901354074 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.901596069 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:19.901611090 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.031109095 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.031349897 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.031400919 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.031400919 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.031451941 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.031651974 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.031666994 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.031716108 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.031722069 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.034585953 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.034632921 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.034688950 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.035504103 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.035521030 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.084413052 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.085536957 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.085580111 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.086302996 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.086311102 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.215852022 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.215934992 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.216053009 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.216250896 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.216286898 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.216303110 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.216311932 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.219772100 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.219820023 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.219958067 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.220211983 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.220226049 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.470700979 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.482517004 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.482544899 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.483894110 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.483900070 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.602005959 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.603420973 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.603471041 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.604518890 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.604528904 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.614198923 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.614226103 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.614274979 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.614305019 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.614343882 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.614666939 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.614681005 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.620702982 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.620744944 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.620832920 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.621320963 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.621337891 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.642637968 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.643074036 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.643089056 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.643733025 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.643738985 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.732291937 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.732369900 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.732446909 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.732846022 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.732875109 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.744297981 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.744347095 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.744405985 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.744666100 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.744679928 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.768701077 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.771068096 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.771091938 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.772219896 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.772226095 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.776535988 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.776592016 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.776741982 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.777467966 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.777483940 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.777517080 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.777523041 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.783190966 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.783240080 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.783477068 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.783835888 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.783852100 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.909147024 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.909179926 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.909226894 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.909276962 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.909831047 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.909857035 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.909869909 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.909877062 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.913378000 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.913422108 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.913532972 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.913716078 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.913728952 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.956981897 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.957668066 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.957703114 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:20.958300114 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:20.958309889 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.085932016 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.086100101 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.086169004 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.086277962 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.086297035 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.086317062 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.086322069 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.089338064 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.089401960 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.089546919 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.089785099 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.089798927 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.351711988 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.352272987 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.352297068 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.352751017 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.352761984 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.462805986 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.463336945 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.463370085 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.463901043 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.463912010 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.482527971 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.482887983 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.482963085 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.482997894 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.482997894 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.483021021 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.483031034 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.485797882 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.485857010 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.486006021 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.486187935 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.486206055 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.514302015 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.514759064 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.514787912 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.515197039 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.515204906 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.590591908 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.590615988 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.590658903 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.590662003 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.590718985 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.590981960 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.590981960 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.590997934 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.591008902 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.593888044 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.593986988 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.594127893 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.594296932 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.594331026 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.645378113 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.645454884 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.645566940 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.645921946 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.645941973 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.645951033 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.645956993 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.648857117 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.648893118 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.648976088 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.649152994 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.649164915 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.826200962 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.826690912 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.826720953 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.827136040 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.827142954 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.956123114 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.956295013 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.956532001 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.956650019 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.956669092 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.956676960 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.956682920 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.960042000 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.960124016 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:21.960251093 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.960457087 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:21.960491896 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.218153954 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.218803883 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.218852997 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.219479084 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.219489098 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.240176916 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.240933895 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.240964890 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.241595030 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.241601944 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.343339920 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.343825102 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.343873978 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.344275951 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.344284058 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.349330902 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.349453926 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.349524021 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.349623919 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.349647999 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.349663019 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.349669933 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.352322102 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.352372885 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.352442026 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.352602005 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.352618933 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.370769978 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.372745037 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.372783899 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.372814894 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.372889042 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.372935057 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.372947931 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.372962952 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.372968912 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.377453089 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.377490044 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.377558947 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.377703905 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.377721071 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.388520002 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.389097929 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.389117002 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.389545918 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.389552116 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.474622965 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.474695921 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.474776983 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.474998951 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.474998951 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.475038052 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.475064039 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.477900982 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.477950096 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.478101015 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.478287935 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.478305101 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.520243883 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.520281076 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.520328045 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.520385981 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.520641088 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.520661116 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.523245096 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.523310900 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.523406029 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.523607016 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.523632050 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.705941916 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.750698090 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.807148933 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.807210922 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.807852030 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.807867050 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.936937094 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.937020063 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.937097073 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.940606117 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.940635920 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.965291977 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.965348005 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:22.965626955 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.966156960 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:22.966181993 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.097533941 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.098932981 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.098963976 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.099529028 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.099534035 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.128297091 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.129362106 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.129406929 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.129920959 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.129928112 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.230325937 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.230962038 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.231004000 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.231012106 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.231067896 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.231134892 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.231148958 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.231158972 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.231163979 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.233536005 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.234088898 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.234116077 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.234199047 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.234220982 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.234285116 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.234467030 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.234479904 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.234605074 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.234611988 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.263475895 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.264956951 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.265027046 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.265110016 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.265110016 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.265131950 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.265141964 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.267613888 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.267667055 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.267736912 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.267867088 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.267882109 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.279519081 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.279973984 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.280004025 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.280419111 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.280426025 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.368781090 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.368815899 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.368880033 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.368885040 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.368922949 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.369157076 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.369174004 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.369184971 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.369190931 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.371961117 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.372004986 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.372292042 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.372478008 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.372489929 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.415615082 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.415693045 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.415796995 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.415951014 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.415951014 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.415977001 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.415990114 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.418556929 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.418612003 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.418687105 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.418842077 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.418855906 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.699651957 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.700167894 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.700196028 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.700678110 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.700684071 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.830944061 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.831001043 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.831115961 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.831396103 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.831415892 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.831424952 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.831430912 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.834503889 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.834539890 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.834841013 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.835024118 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.835031986 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.962963104 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.963361025 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.963386059 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:23.963885069 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:23.963890076 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.011539936 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.011981010 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.012073040 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.012847900 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.012865067 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.092621088 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.092710972 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.092758894 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.103847027 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.108872890 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.108886003 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.110922098 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.110929966 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.111540079 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.111543894 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.115545034 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.115608931 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.115726948 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.116059065 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.116074085 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.138674021 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.139308929 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.139341116 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.139830112 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.139834881 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.144498110 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.144632101 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.144663095 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.144671917 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.144727945 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.145869970 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.145890951 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.145903111 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.145910025 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.152200937 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.152234077 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.152287960 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.152510881 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.152518988 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.238357067 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.238464117 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.238585949 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.241149902 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.241173029 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.248281956 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.248346090 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.248420954 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.249207973 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.249224901 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.271406889 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.271518946 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.271590948 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.271846056 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.271866083 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.271877050 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.271883965 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.278311968 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.278352022 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.278486013 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.279700994 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.279711008 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.587872028 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.588388920 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.588418961 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.588957071 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.588963032 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.725518942 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.725692034 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.725754023 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.726305962 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.726326942 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.726337910 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.726342916 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.730536938 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.730576038 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.730662107 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.730871916 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.730885983 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.861920118 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.862423897 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.862468958 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.863188028 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.863195896 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.878071070 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.878669024 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.878700972 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.879229069 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.879235983 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.995244026 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.995305061 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.995364904 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.995578051 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.995605946 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.995637894 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.995650053 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.998469114 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.998513937 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:24.998708963 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.998912096 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:24.998928070 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.004992962 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.005108118 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.005172968 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.005301952 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.005319118 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.005331039 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.005336046 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.013025045 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.013073921 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.013138056 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.013351917 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.013365030 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.030488968 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.031517982 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.031542063 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.032078981 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.032083988 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.163569927 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.163959980 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.164037943 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.164128065 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.164144993 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.164155960 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.164160967 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.167121887 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.167161942 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.167247057 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.167447090 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.167462111 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.316854000 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.327554941 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.327616930 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.330934048 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.330945969 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.454643965 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.454745054 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.454823971 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.455014944 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.455043077 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.455070972 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.455080986 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.457669973 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.457722902 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.457864046 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.457995892 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.458014011 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.485717058 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.490416050 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.490453005 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.491183996 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.491199017 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.631472111 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.631505013 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.631551027 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.631613016 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.631859064 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.631859064 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.631891012 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.631901026 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.634713888 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.634762049 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.634861946 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.635021925 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.635034084 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.730247974 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.730741978 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.730772972 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.731194973 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.731206894 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.762092113 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.762599945 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.762641907 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.763045073 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.763051033 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.861490965 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.861576080 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.861757040 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.861804962 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.861804962 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.861818075 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.861826897 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.865744114 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.865784883 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.865879059 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.866055965 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.866064072 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.900162935 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.900203943 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.900263071 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.900315046 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.900537968 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.900562048 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.900576115 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.900582075 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.901878119 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.902270079 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.902297974 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.902760029 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.902765036 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.903508902 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.903561115 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:25.903626919 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.903770924 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:25.903786898 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.031380892 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.031452894 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.031497955 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.031737089 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.031758070 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.031769991 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.031774998 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.035610914 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.035646915 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.035715103 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.035938025 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.035944939 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.206501007 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.207683086 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.207726002 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.208697081 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.208703995 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.338707924 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.338752985 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.338818073 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.338820934 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.338908911 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.339010000 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.339036942 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.339051962 CET	49954	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.339059114 CET	443	49954	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.344018936 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.344073057 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.344186068 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.344367027 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.344387054 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.365386963 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.365792036 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.365818977 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.366264105 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.366271973 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.496742010 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.496835947 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.496973991 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.497101068 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.497123003 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.500406027 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.500459909 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.500531912 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.500756979 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.500766993 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.608556032 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.609029055 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.609060049 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.609502077 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.609507084 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.636131048 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.636651993 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.636732101 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.637121916 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.637139082 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.741101980 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.741204977 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.741267920 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.741457939 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.741475105 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.741497040 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.741502047 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.744678020 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.744734049 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.744807005 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.744972944 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.744996071 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.964256048 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.964334965 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.964411974 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.964634895 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.964689970 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.964739084 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.964756966 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.966850996 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.967222929 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.967255116 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.967828989 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.967837095 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.967852116 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.967890978 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:26.967962980 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.968178988 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:26.968188047 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.103060961 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.103585958 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.103627920 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.104055882 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.104067087 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.112703085 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.112735033 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.112778902 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.112787008 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.112837076 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.112976074 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.112977028 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.112994909 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.113004923 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.116926908 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.116974115 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.117059946 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.117250919 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.117268085 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.238353968 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.238456964 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.238522053 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.238867044 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.238895893 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.238912106 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.238920927 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.242609978 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.242645025 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.243072033 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.243072987 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.243097067 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.249258041 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.249671936 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.249697924 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.250232935 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.250240088 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.382275105 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.382463932 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.382580996 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.382580996 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.382688999 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.382729053 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.385612011 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.385658026 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.385783911 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.385967016 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.385981083 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.696897030 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.708693027 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.739672899 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.760160923 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.796556950 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.796612024 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.802648067 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.802664995 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.861917973 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.861944914 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.873337030 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.873358011 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.875159025 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.876889944 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.876910925 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.877300024 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.877306938 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.928608894 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.928702116 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.928759098 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.932810068 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.932842970 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.937278986 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.937315941 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:27.937407017 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.937625885 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:27.937640905 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.000473022 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.001156092 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.001189947 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.002121925 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.002132893 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.002890110 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.002909899 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.002973080 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.003000021 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.003119946 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.003145933 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.003180027 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.003186941 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.003186941 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.003197908 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.003201962 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.008596897 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.008637905 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.008703947 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.009095907 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.009109020 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.010526896 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.010550022 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.010600090 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.010607958 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.010663033 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.010783911 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.010801077 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.010813951 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.010821104 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.013078928 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.013109922 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.013283014 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.013400078 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.013420105 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.133323908 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.133379936 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.133508921 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.133522987 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.133589029 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.133709908 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.133738041 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.133749008 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.133754969 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.136657000 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.136697054 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.136909962 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.136909962 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.136940002 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.146440983 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.146876097 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.146899939 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.147324085 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.147332907 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.280881882 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.280905008 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.280971050 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.280997992 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.281013966 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.281109095 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.281285048 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.281316042 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.281330109 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.281336069 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.284106970 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.284156084 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.284221888 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.284400940 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.284420967 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.692770958 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.693273067 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.693310976 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.693749905 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.693756104 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.725348949 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.725936890 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.725958109 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.726490974 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.726505041 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.764976978 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.765479088 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.765513897 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.766016006 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.766022921 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.837778091 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.837802887 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.837848902 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.837874889 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.837944984 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.838044882 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.838155985 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.838172913 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.838184118 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.838188887 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.841017008 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.841053009 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.841115952 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.841279984 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.841295004 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.853960991 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.854082108 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.854182005 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.854182005 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.854182959 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.856790066 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.856832027 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.856913090 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.857091904 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.857100964 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.899182081 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.899548054 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.899600029 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.899638891 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.899638891 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.899660110 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.899672031 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.902321100 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.902364016 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.902453899 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.902590036 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.902604103 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.907308102 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.907742023 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.907752037 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:28.908216000 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:28.908220053 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.007908106 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.008395910 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.008424044 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.008852959 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.008860111 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.037729979 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.037816048 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.037859917 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.039536953 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.039554119 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.039565086 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.039570093 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.042862892 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.042901039 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.042949915 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.043135881 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.043155909 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.138088942 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.138155937 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.138217926 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.138845921 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.138874054 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.138886929 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.138894081 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.142051935 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.142083883 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.142148018 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.142275095 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.142285109 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.161287069 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.161309004 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.575020075 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.575545073 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.575567961 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.575987101 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.575994015 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.589042902 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.589529037 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.589560986 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.590172052 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.590193033 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.659589052 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.660131931 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.660167933 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.660756111 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.660773993 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.705698013 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.705724001 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.705786943 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.705821991 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.705869913 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.706207037 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.706239939 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.719177961 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.719214916 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.719384909 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.719575882 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.719588041 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.723071098 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.723110914 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.723169088 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.723189116 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.723225117 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.723576069 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.723592043 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.723670959 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.723675966 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.726227045 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.726265907 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.726448059 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.726562977 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.726573944 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.772636890 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.773181915 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.773200989 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.773802042 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.773807049 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.860857010 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.861376047 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.861416101 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.861968994 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.861984015 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.902333975 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.902367115 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.902455091 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.902477980 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.902673960 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.902779102 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.902779102 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.902801037 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.902811050 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.905992031 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.906040907 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.906229973 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.906394958 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.906408072 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.915687084 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.915730953 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.915749073 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.915788889 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.915819883 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.915838957 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.915863991 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.916501999 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.916577101 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.916584015 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.916646004 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.916676044 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.916692972 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.916703939 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:29.916709900 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:29.919450045 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.919491053 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:29.919553041 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.919719934 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:29.919734955 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.099087954 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.099121094 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.099138021 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.099193096 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.099221945 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.099263906 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.107206106 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.107265949 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.107286930 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.107287884 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.107347965 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.107564926 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.107579947 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.107608080 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 00:08:30.107611895 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 00:08:30.111251116 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.111289978 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.111824036 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.113145113 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.113152981 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.451771021 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.452286959 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.452331066 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.452886105 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.452891111 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.481497049 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.482141018 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.482172966 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.482626915 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.482631922 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.589179993 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.589214087 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.589281082 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.589277983 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.589320898 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.589575052 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.589601040 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.589612007 CET	49976	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.589617014 CET	443	49976	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.592969894 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.593067884 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.593148947 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.593343019 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.593389034 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.616650105 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.616677046 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.616736889 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.616741896 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.616779089 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.617065907 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.617082119 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.617089987 CET	49977	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.617095947 CET	443	49977	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.620040894 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.620081902 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.620177031 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.620307922 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.620317936 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.655725002 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.656150103 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.656184912 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.656733990 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.656739950 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.662170887 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.663460016 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.663489103 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.664048910 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.664057970 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.788094044 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.788197994 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.788275003 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.788405895 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.788429976 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.788444996 CET	49978	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.788450003 CET	443	49978	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.791325092 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.791368008 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.791430950 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.791588068 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.791600943 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.794207096 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.794358969 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.794425011 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.794466019 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.794478893 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.794492006 CET	49979	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.794496059 CET	443	49979	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.796890020 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.796912909 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.797054052 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.797194958 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.797204971 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.843185902 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.843719006 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.843745947 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.844333887 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.844337940 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.973249912 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.973325968 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.973382950 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.973624945 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.973639965 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.973654032 CET	49980	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.973661900 CET	443	49980	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.977446079 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.977468967 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:30.977524042 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.977699041 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:30.977706909 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.348086119 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.348577976 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.348620892 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.349030018 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.349035978 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.375543118 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.376399994 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.376430035 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.377763033 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.377768993 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.483536005 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.483624935 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.483800888 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.483843088 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.483863115 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.483874083 CET	49981	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.483880043 CET	443	49981	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.486602068 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.486628056 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.486690044 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.486870050 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.486881971 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.508796930 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.508929968 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.508985996 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.509041071 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.509095907 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.509114027 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.509130001 CET	49982	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.509134054 CET	443	49982	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.533130884 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.533695936 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.533724070 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.534153938 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.534159899 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.548382998 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.548858881 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.548877001 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.549309015 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.549313068 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.666090965 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.666183949 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.666239023 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.666440010 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.666460037 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.666471958 CET	49984	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.666477919 CET	443	49984	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.690061092 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.690160036 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.690236092 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.690428972 CET	49983	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.690444946 CET	443	49983	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.718898058 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.719332933 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.719362974 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.719960928 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.719965935 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.850430012 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.850563049 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.850698948 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.850729942 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.850747108 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:31.850758076 CET	49985	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:31.850763083 CET	443	49985	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.237668037 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.245646000 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:32.245677948 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.246218920 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:32.246227026 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.381953001 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.382040024 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.382261038 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:32.455501080 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:32.455538034 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:32.455554962 CET	49986	443	192.168.2.7	13.107.246.60
Oct 30, 2024 00:08:32.455562115 CET	443	49986	13.107.246.60	192.168.2.7
Oct 30, 2024 00:08:36.247864008 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:08:36.248081923 CET	443	49704	142.250.184.238	192.168.2.7
Oct 30, 2024 00:08:36.248183012 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:36.248219967 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:36.248244047 CET	49704	443	192.168.2.7	142.250.184.238
Oct 30, 2024 00:08:36.248290062 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:36.248543978 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:36.248557091 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:37.109651089 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:37.109901905 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:37.109925985 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:37.110373020 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:37.111215115 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:37.111308098 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:37.159584999 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:41.166234970 CET	49796	443	192.168.2.7	142.250.185.193
Oct 30, 2024 00:08:41.166256905 CET	443	49796	142.250.185.193	192.168.2.7
Oct 30, 2024 00:08:47.101187944 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:47.101368904 CET	443	49988	172.217.18.4	192.168.2.7
Oct 30, 2024 00:08:47.101453066 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:48.258591890 CET	49988	443	192.168.2.7	172.217.18.4
Oct 30, 2024 00:08:48.258631945 CET	443	49988	172.217.18.4	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 00:07:32.098046064 CET	53	57312	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:32.111531019 CET	53	53306	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:33.526459932 CET	53	60778	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:33.939186096 CET	49792	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:33.941842079 CET	50205	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:33.946293116 CET	53	49792	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:33.950104952 CET	53	50205	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:35.668697119 CET	63581	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:35.669173956 CET	61647	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:35.677498102 CET	53	63581	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:35.678710938 CET	53	61647	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:36.196161985 CET	53009	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:36.196448088 CET	49553	53	192.168.2.7	1.1.1.1
Oct 30, 2024 00:07:36.204713106 CET	53	53009	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:36.205250978 CET	53	49553	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:36.727399111 CET	123	123	192.168.2.7	20.101.57.9
Oct 30, 2024 00:07:37.456995010 CET	123	123	20.101.57.9	192.168.2.7
Oct 30, 2024 00:07:37.888513088 CET	53	50450	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:38.253241062 CET	123	123	192.168.2.7	20.101.57.9
Oct 30, 2024 00:07:38.500180960 CET	123	123	20.101.57.9	192.168.2.7
Oct 30, 2024 00:07:39.514786959 CET	53	52427	1.1.1.1	192.168.2.7
Oct 30, 2024 00:07:50.481730938 CET	53	63984	1.1.1.1	192.168.2.7
Oct 30, 2024 00:08:09.528245926 CET	53	53738	1.1.1.1	192.168.2.7
Oct 30, 2024 00:08:31.741113901 CET	53	62715	1.1.1.1	192.168.2.7
Oct 30, 2024 00:08:32.447746992 CET	53	64009	1.1.1.1	192.168.2.7
Oct 30, 2024 00:08:32.510586023 CET	138	138	192.168.2.7	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 00:07:33.939186096 CET	192.168.2.7	1.1.1.1	0xfe7a	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:33.941842079 CET	192.168.2.7	1.1.1.1	0x428e	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 30, 2024 00:07:35.668697119 CET	192.168.2.7	1.1.1.1	0x57f7	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:35.669173956 CET	192.168.2.7	1.1.1.1	0xab9c	Standard query (0)	drive.usercontent.google.com	65	IN (0x0001)	false
Oct 30, 2024 00:07:36.196161985 CET	192.168.2.7	1.1.1.1	0xe914	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:36.196448088 CET	192.168.2.7	1.1.1.1	0xf75e	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 00:07:33.946293116 CET	1.1.1.1	192.168.2.7	0xfe7a	No error (0)	docs.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:35.677498102 CET	1.1.1.1	192.168.2.7	0x57f7	No error (0)	drive.usercontent.google.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:36.204713106 CET	1.1.1.1	192.168.2.7	0xe914	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:36.205250978 CET	1.1.1.1	192.168.2.7	0xf75e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 00:07:39.486577034 CET	1.1.1.1	192.168.2.7	0x50af	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:07:39.486577034 CET	1.1.1.1	192.168.2.7	0x50af	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:46.035005093 CET	1.1.1.1	192.168.2.7	0x42ba	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:46.035005093 CET	1.1.1.1	192.168.2.7	0x42ba	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:00.307764053 CET	1.1.1.1	192.168.2.7	0xe58b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:00.307764053 CET	1.1.1.1	192.168.2.7	0xe58b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:29.718483925 CET	1.1.1.1	192.168.2.7	0xec33	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:08:29.718483925 CET	1.1.1.1	192.168.2.7	0xec33	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:45.168659925 CET	1.1.1.1	192.168.2.7	0x8a3e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:08:45.168659925 CET	1.1.1.1	192.168.2.7	0x8a3e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	142.250.184.238	443	3040	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:34 UTC	846	OUT	GET /uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCNy9zQEIj8rNAQi5ys0BCKLRzQEIitPNAQik1s0BCPTWzQEIp9jNAQj5wNQVGPXJzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 23:07:35 UTC	1626	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Oct 2024 23:07:35 GMT Location: https://drive.usercontent.google.com/download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Bg9NbAfhR1qLR1RJEFpSOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49708	142.250.185.193	443	3040	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:36 UTC	865	OUT	GET /download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download HTTP/1.1 Host: drive.usercontent.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCNy9zQEIj8rNAQi5ys0BCKLRzQEIitPNAQik1s0BCPTWzQEIp9jNAQj5wNQVGPXJzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 23:07:37 UTC	2270	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: sandbox allow-scripts allow-forms allow-downloads Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-GO-rq44KcUFzwHTVbgnjRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Oct 2024 23:07:37 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site reporting-endpoints: default="/_/DriveUntrustedContentHttp/web-reports?context=eJzjMtDikmLw0ZBicEqfwRoCxKt_nmNdD8S7rM6zHgDiPZuANBD_kbnEyiB7iVWIh2Pn1dadbAIv5j18yqikmpRfGJ9SlFmWmlFSUpBYkFmcWlSWWhRvZGBkYmhgaK5nYBRfYAAAAwonDw" Content-Length: 2462 X-GUploader-UploadID: AHmUCY01wySKAHKpfiU153xnMA18vIU8gt_zi0ymMsE-0nVBt_8UUvcQjX8SD-hHgpk4_MpAA2FDl337jQ Server: UploadServer Set-Cookie: NID=518=ViMp12b93WDlA8CWEVyDNjphsdUWOu7Fp53WpwglfmAVlVYbX025Wg5_p1SfcYelwOelfXKHaMPasN2ASzyGVntTY6kM0367Q3dCmdxNgK0ZkiyXDN7DhtLpGc-4mMp3GdkkCuV7MFqTaVmtcN7O3u5m_1ybfnpA7k15RI8yuMq9DOtK0zM; expires=Wed, 30-Apr-2025 23:07:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 23:07:37 UTC	2270	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 44 72 69 76 65 20 2d 20 56 69 72 75 73 20 73 63 61 6e 20 77 61 72 6e 69 6e 67 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 32 6a 59 71 65 32 77 34 33 2d 30 50 64 32 48 38 79 56 57 59 51 22 3e 2e 67 6f 6f 67 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 23 31 35 63 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 Data Ascii: <!DOCTYPE html><html><head><title>Google Drive - Virus scan warning</title><meta http-equiv="content-type" content="text/html; charset=utf-8"/><style nonce="G2jYqe2w43-0Pd2H8yVWYQ">.goog-link-button{position:relative;color:#15c;text-decoration:underline;c
2024-10-29 23:07:37 UTC	192	IN	Data Raw: 65 3d 22 63 6f 6e 66 69 72 6d 22 20 76 61 6c 75 65 3d 22 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 75 69 64 22 20 76 61 6c 75 65 3d 22 33 38 34 37 37 33 39 33 2d 31 38 61 38 2d 34 38 63 39 2d 62 31 33 33 2d 31 39 34 39 61 30 37 32 65 36 65 62 22 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 63 2d 66 6f 6f 74 65 72 22 3e 3c 68 72 20 63 6c 61 73 73 3d 22 75 63 2d 66 6f 6f 74 65 72 2d 64 69 76 69 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: e="confirm" value="t"><input type="hidden" name="uuid" value="38477393-18a8-48c9-b133-1949a072e6eb"></form></div></div><div class="uc-footer"><hr class="uc-footer-divider"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49710	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 23:07:38 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=49630 Date: Tue, 29 Oct 2024 23:07:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 23:07:39 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=49683 Date: Tue, 29 Oct 2024 23:07:39 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 23:07:39 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:40 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:40 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:40 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230740Z-16849878b78bjkl8dpep89pbgg00000005xg000000009reu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:40 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-29 23:07:40 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:41 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:41 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230741Z-15b8d89586fwzdd8urmg0p1ebs0000000hw0000000006ek7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:41 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:41 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:41 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:41 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230741Z-16849878b78wv88bk51myq5vxc00000007h0000000005uhq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:41 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:41 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:41 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230741Z-15b8d89586fwzdd8urmg0p1ebs0000000htg00000000d57y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:41 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:41 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:41 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c3a6d21e-601e-00ab-1dc6-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230741Z-r197bdfb6b4c8q4qvwwy2byzsw00000007d000000000nse4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:41 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:41 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:41 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:41 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230741Z-16849878b78smng4k6nq15r6s400000008p000000000nyvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:41 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:42 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230742Z-17c5cb586f6fqqst87nqkbsx1c00000005kg00000000e2mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:42 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230742Z-15b8d89586fwzdd8urmg0p1ebs0000000hxg000000003dch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:42 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230742Z-16849878b78g2m84h2v9sta29000000005zg00000000ywb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:42 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:42 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230742Z-16849878b787wpl5wqkt5731b400000007w000000000s9pd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:42 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:42 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:42 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230742Z-16849878b78qg9mlz11wgn0wcc00000006vg000000003323 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:42 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:43 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230743Z-16849878b78wv88bk51myq5vxc00000007g000000000aq11 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:43 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230743Z-r197bdfb6b4gx6v9pg74w9f47s0000000990000000009wvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:43 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230743Z-16849878b7898p5f6vryaqvp58000000082g000000006bfb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:43 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230743Z-16849878b78smng4k6nq15r6s400000008mg00000000wtbm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:43 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230743Z-17c5cb586f65j4snvy39m6qus400000002d000000000ka3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:44 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:44 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bed14624-901e-0029-5c4f-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230744Z-15b8d89586fmhjx6a8nf3qm53c000000010g00000000cn7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:44 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:44 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7d21e20b-801e-0015-30df-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230744Z-17c5cb586f6hn8cl90dxzu28kw00000007d0000000000k6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:44 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230744Z-r197bdfb6b466qclztvgs64z1000000008xg00000000836c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:44 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:44 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230744Z-15b8d89586flzzksdx5d6q7g1000000002bg000000007tq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:44 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:44 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230744Z-15b8d89586f4zwgbgswvrvz4vs00000008p00000000016qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:44 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:45 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230745Z-16849878b78km6fmmkbenhx76n00000006k000000000b5sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:45 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8d7929b6-101e-0017-6edc-2647c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230745Z-17c5cb586f6sqz6f73fsew1zd800000000y00000000087hz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:45 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:45 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230745Z-16849878b78tg5n42kspfr0x48000000077g00000000aee0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:45 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:45 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230745Z-16849878b786jv8w2kpaf5zkqs000000061g00000000hnsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:45 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:45 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230745Z-16849878b78sx229w7g7at4nkg00000005a000000000zk6u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:45 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230746Z-16849878b78p49s6zkwt11bbkn00000006u000000000nb6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230746Z-16849878b78wc6ln1zsrz6q9w800000006z0000000001ddb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230746Z-16849878b78wc6ln1zsrz6q9w800000006rg00000000z5a3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a89f9527-e01e-0033-5af4-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230746Z-15b8d89586fmhkw429ba5n22m800000008tg000000000ee4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 789f6287-101e-0065-355f-284088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230746Z-15b8d89586f42m673h1quuee4s0000000b6000000000hyyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:46 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-15b8d89586f989rkwt13xern5400000002cg00000000hhn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-15b8d89586fmc8ck21zz2rtg1w00000004eg000000006yka x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-17c5cb586f672xmrz843mf85fn000000061000000000af45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-r197bdfb6b4bs5qf58wn14wgm000000006ag000000006hvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-16849878b78p49s6zkwt11bbkn00000006y00000000034y2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230747Z-16849878b7867ttgfbpnfxt44s000000074g000000003s0g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7dd8eec7-801e-00ac-442c-27fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-r197bdfb6b4qbfppwgs4nqza8000000005rg00000000fhc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-16849878b78z2wx67pvzz63kdg00000005v0000000008nb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: b906435d-801e-008c-78a0-297130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-17c5cb586f6hn8cl90dxzu28kw00000007b0000000004nq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:48 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-16849878b7828dsgct3vrzta7000000005mg00000000dun5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 395ac5b3-901e-0083-7e6a-27bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-17c5cb586f6fqqst87nqkbsx1c00000005n00000000099bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-16849878b78wc6ln1zsrz6q9w800000006tg00000000sgzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-16849878b78qwx7pmw9x5fub1c00000005ag00000000envd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:48 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:48 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230748Z-16849878b78bjkl8dpep89pbgg00000005x000000000cssz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5feeb856-001e-008d-0ae8-28d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230749Z-15b8d89586fcvr6p5956n5d0rc0000000dcg000000000ryd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 1eef1b3e-901e-002a-4bcc-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230749Z-r197bdfb6b4d9xksru4x6qbqr0000000079000000000ckk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230749Z-16849878b78wv88bk51myq5vxc00000007b000000000zrpg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d4272afd-e01e-0033-057f-294695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230749Z-17c5cb586f6g6g2sa7kg5c0gg000000002d000000000h167 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: efaca471-901e-002a-6713-287a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230749Z-r197bdfb6b4grkz4xgvkar0zcs00000006s000000000q2pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:49 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230750Z-16849878b78km6fmmkbenhx76n00000006h000000000eb15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230750Z-16849878b78p49s6zkwt11bbkn00000006v000000000f4wb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230750Z-15b8d89586fzhrwgk23ex2bvhw0000000a4000000000ab81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:50 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230750Z-16849878b78x6gn56mgecg60qc00000008z000000000kext x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230750Z-16849878b78smng4k6nq15r6s400000008pg00000000mb7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230751Z-16849878b785dznd7xpawq9gcn00000008gg00000000r4y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:51 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230751Z-16849878b785dznd7xpawq9gcn00000008k000000000g4gg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:51 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230751Z-16849878b78q9m8bqvwuva4svc00000005tg0000000041z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:51 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: a3f41134-c01e-00ad-7d0b-29a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230751Z-15b8d89586f4zwgbgswvrvz4vs00000008ng000000002wgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230751Z-16849878b78q9m8bqvwuva4svc00000005tg0000000041zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-16849878b78fhxrnedubv5byks00000005g000000000hxxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:52 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-16849878b78smng4k6nq15r6s400000008tg000000002kpg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:52 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-r197bdfb6b4hsj5bywyqk9r2xw00000008p000000000aqq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:52 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-16849878b78smng4k6nq15r6s400000008u0000000000q0v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:52 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 16c434fb-a01e-0032-1c41-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-17c5cb586f6g6g2sa7kg5c0gg000000002gg000000007gzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:52 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 90a6b530-901e-007b-6be7-28ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230752Z-r197bdfb6b4b4pw6nr8czsrctg00000007wg00000000hcut x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:53 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230754Z-17c5cb586f67hfgj2durhqcxk8000000060g00000000eqrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:54 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:54 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230754Z-15b8d89586f42m673h1quuee4s0000000b8000000000d01u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:54 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:54 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:54 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cce6b4d6-601e-000d-171c-292618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230754Z-r197bdfb6b4d9xksru4x6qbqr000000007d0000000001bmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:54 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:54 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230754Z-r197bdfb6b48v72xb403uy6hns00000007ug00000000d0bq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:54 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230754Z-r197bdfb6b48v72xb403uy6hns00000007u000000000fw2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 22a2f8fa-b01e-001e-31af-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230755Z-17c5cb586f672xmrz843mf85fn000000061000000000afdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:55 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230755Z-16849878b78qf2gleqhwczd21s000000079g00000000u6dv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49792	13.107.246.45	443	3040	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:55 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:55 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230755Z-16849878b785dznd7xpawq9gcn00000008g000000000tdbx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:55 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:55 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230755Z-16849878b78hh85qc40uyr8sc800000007c000000000w239 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:55 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:55 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f17b3a4e-c01e-002b-72e7-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230755Z-r197bdfb6b4qbfppwgs4nqza8000000005q000000000ncrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:55 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49795	142.250.185.193	443	3040	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	1365	OUT	GET /download?id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv&export=download&confirm=t&uuid=38477393-18a8-48c9-b133-1949a072e6eb HTTP/1.1 Host: drive.usercontent.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ViMp12b93WDlA8CWEVyDNjphsdUWOu7Fp53WpwglfmAVlVYbX025Wg5_p1SfcYelwOelfXKHaMPasN2ASzyGVntTY6kM0367Q3dCmdxNgK0ZkiyXDN7DhtLpGc-4mMp3GdkkCuV7MFqTaVmtcN7O3u5m_1ybfnpA7k15RI8yuMq9DOtK0zM
2024-10-29 23:07:58 UTC	4955	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Security-Policy: sandbox Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' X-Content-Security-Policy: sandbox Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: same-site X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Pctx, X-Client-Version, x-debug-settings-metadata, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogA [TRUNCATED] Access-Control-Allow-Methods: GET,HEAD,OPTIONS Accept-Ranges: bytes Content-Length: 6957 Last-Modified: Mon, 28 Oct 2024 17:34:16 GMT X-GUploader-UploadID: AHmUCY06hkuQiYE8ya7URlv-6DCslrpxgM2RT0UHXOs38Hef5Ii3mVvoOTU-qj1ngOJRgyuiUadaAi8K5Q Date: Tue, 29 Oct 2024 23:07:58 GMT Expires: Tue, 29 Oct 2024 23:07:58 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=JBPPtQ== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 23:07:58 UTC	4955	IN	Data Raw: 50 4b 03 04 14 00 09 00 08 00 1b 5c 5c 59 3a 23 66 fe 27 1a 00 00 f0 49 03 00 38 00 00 00 46 41 4c 4c 4f 20 53 45 47 55 4e 44 41 20 49 4e 53 54 41 4e 43 49 41 20 54 55 54 45 4c 41 20 52 41 44 20 31 39 2d 32 30 32 34 2d 31 30 31 33 34 2d 30 31 2e 2e 62 61 74 b9 29 f6 b8 a5 80 2a 1a 15 47 06 ec 60 4a 04 a6 2b 5a 42 e2 b7 78 01 d0 d0 64 63 37 02 cb e2 73 57 37 dd 55 02 c1 7f 81 f3 7e 4c e1 31 74 71 92 0f 7d 3e 44 63 20 7a 70 ba 9f 2b 16 e8 0d 35 24 76 df 1d 4b e7 ec a4 57 34 de 7b 9a eb 69 5e 95 b1 d4 d5 e6 f3 e3 45 ba 0c dd a6 ed cc 5b 7c 08 23 63 0a 6a 16 7b 51 15 8b 73 00 33 33 b5 d1 72 88 b7 b4 5d 5b cb 05 17 1a 67 7a 25 da 49 f3 db 6e fb f6 21 9d b2 fd 30 1f a3 78 56 cb 6d ac e5 59 6e 76 1a 92 c0 77 66 1d 29 0c 38 4b 57 f1 08 61 06 60 eb 5f 89 30 36 a4 Data Ascii: PK\\Y:#f'I8FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01..bat)*G`J+ZBxdc7sW7U~L1tq}>Dc zp+5$vKW4{i^E[\|#cj{Qs33r][gz%In!0xVmYnvwf)8KWa`_06
2024-10-29 23:07:58 UTC	2002	IN	Data Raw: 91 5a f2 fe da 32 b1 62 cb 4f 71 47 69 e5 a1 fd 0c 35 6d 5c 00 2a b0 f6 c5 2e 8b ed 7a 41 d1 ee 15 39 e1 f8 d9 7b 19 47 f5 af 4e 84 83 b9 83 ec c9 21 4c 83 66 c5 13 1d 5a 02 66 23 26 80 2e 96 9c 3c b8 06 0d 72 5c 82 82 1f 5f 66 3e e1 d3 19 35 48 56 56 82 7a 65 5e 59 92 10 48 ec 31 12 28 41 2f 24 f1 6f f7 bc da 6c 0c 93 a9 34 b3 4d c8 c2 2e b8 35 17 0e 7e 08 6d a4 b8 29 3b 5b 02 a3 74 73 85 72 88 c9 48 2c aa b2 94 2b 48 8f f6 c2 f9 2c 1d 2f cd 4e 86 5b 10 5f d8 ed 8f 55 7e b2 50 5b f4 1a d3 4c 08 ff 47 5b 67 16 c4 a3 d9 db 02 9d 6d be 79 38 1e 4a cd a7 5c e0 2f a5 2e cb a5 77 7a 88 1e 3e a6 c3 04 56 51 92 83 5e 09 53 0d c5 d3 b3 39 09 d2 02 57 74 ee 4d 36 20 9a 54 4a fb d1 13 41 cd eb c4 61 d5 31 32 99 59 e6 aa d4 f0 38 68 bb 15 7c 25 9d d5 03 17 57 f0 07 Data Ascii: Z2bOqGi5m\*.zA9{GN!LfZf#&.<r\_f>5HVVze^YH1(A/$ol4M.5~m);[tsrH,+H,/N[_U~P[LG[gmy8J\/.wz>VQ^S9WtM6 TJAa12Y8h\|%W

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230756Z-16849878b78p8hrf1se7fucxk8000000084g000000003g2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:56 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230756Z-16849878b78wc6ln1zsrz6q9w800000006s000000000zqax x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:56 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:56 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230756Z-16849878b78wv88bk51myq5vxc00000007eg00000000gubn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:56 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:56 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230756Z-16849878b782d4lwcu6h6gmxnw00000006rg000000011t7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:56 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:56 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:56 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230756Z-16849878b78km6fmmkbenhx76n00000006eg00000000te3q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:56 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-16849878b78sx229w7g7at4nkg00000005b000000000w4nn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:57 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 2953fb54-101e-0028-3f94-298f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-17c5cb586f6gkqkwd0x1ge8t0400000007n000000000ftdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 5925f4c0-501e-00a3-7895-29c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-17c5cb586f6g6g2sa7kg5c0gg000000002k000000000478b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b981dc60-601e-0097-7636-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-15b8d89586f8nxpt6ys645x5v000000008gg000000004dcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 45d05379-301e-006e-0c9a-29f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-r197bdfb6b4c8q4qvwwy2byzsw00000007f000000000fa57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:57 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230757Z-16849878b78bcpfn2qf7sm6hsn00000008sg00000000kt6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:58 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230758Z-16849878b78wv88bk51myq5vxc00000007h0000000005vbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:58 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:58 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 8f4dae4f-901e-008f-19cb-2767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230758Z-17c5cb586f6fqqst87nqkbsx1c00000005p0000000007hdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:58 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:58 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230758Z-16849878b782d4lwcu6h6gmxnw00000006z0000000000xwy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:58 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230758Z-15b8d89586f8l5961kfst8fpb00000000k20000000000y40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:58 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:58 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230758Z-16849878b78p8hrf1se7fucxk8000000080g00000000nr9k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:58 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:59 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230759Z-16849878b786fl7gm2qg4r5y7000000007c000000000uvzd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:59 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:59 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230759Z-16849878b78fkwcjkpn19c5dsn000000068g000000007383 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:59 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:59 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230759Z-16849878b78g2m84h2v9sta2900000000650000000007290 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:59 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:00 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230800Z-r197bdfb6b4jlq9hppzrdwabps000000028g00000000mv1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:00 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: d9e5b04b-c01e-0066-80fb-27a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230800Z-r197bdfb6b4d9xksru4x6qbqr0000000076g00000000kt4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:01 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230801Z-16849878b78bcpfn2qf7sm6hsn00000008r000000000sxt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:01 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230801Z-16849878b785jrf8dn0d2rczaw00000008dg000000004ry6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:01 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230801Z-17c5cb586f6r59nt869u8w8xt8000000065000000000capb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:01 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bc157e3b-201e-000c-6094-2979c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230801Z-17c5cb586f6vcw6vtg5eymp4u800000005b0000000006mk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:01 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 66721f0b-e01e-00aa-4086-29ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230801Z-17c5cb586f6fqqst87nqkbsx1c00000005q00000000055pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:01 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:02 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:02 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c0e66d29-801e-00a0-12d5-272196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230802Z-r197bdfb6b42rt68rzg9338g1g00000008c000000000n9pd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:02 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:02 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:02 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:02 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230802Z-16849878b78xblwksrnkakc08w00000006fg00000000853g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:02 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:02 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:02 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:02 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230802Z-16849878b78qfbkc5yywmsbg0c00000006z00000000014y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:02 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:02 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:02 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230802Z-16849878b786lft2mu9uftf3y400000008a0000000012kan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:02 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:02 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:02 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230802Z-17c5cb586f6vcw6vtg5eymp4u800000005ag000000007tmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:02 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:03 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:03 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230803Z-16849878b785dznd7xpawq9gcn00000008k000000000g5k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:03 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:03 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230803Z-16849878b78p49s6zkwt11bbkn00000006w000000000b4a9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:03 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 5fdb5a9a-801e-00a0-5f9d-292196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230803Z-17c5cb586f672xmrz843mf85fn000000064g0000000017ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:03 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230803Z-17c5cb586f6w4mfs5xcmnrny6n000000091g0000000074pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:03 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230803Z-16849878b78fssff8btnns3b1400000007c000000000w07k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:04 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:04 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230804Z-16849878b785dznd7xpawq9gcn00000008eg00000000z9ge x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:04 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:04 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230804Z-16849878b78j7llf5vkyvvcehs000000085g00000000w8sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:04 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 6c5e14af-601e-0002-6c01-27a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230804Z-17c5cb586f672xmrz843mf85fn00000005y000000000m8ru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:04 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230804Z-15b8d89586fmhkw429ba5n22m800000008pg00000000972f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:04 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230804Z-15b8d89586fzhrwgk23ex2bvhw0000000a7g000000001ubq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:04 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:05 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230805Z-15b8d89586flzzksdx5d6q7g10000000028000000000f2dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:05 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:05 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230805Z-15b8d89586f4zwgbgswvrvz4vs00000008hg00000000a3fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:05 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:05 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:05 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230805Z-16849878b785dznd7xpawq9gcn00000008eg00000000z9k4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:05 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:05 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:05 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:05 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230805Z-16849878b78zqkvcwgr6h55x9n00000006mg00000000h2ym x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:05 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:05 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:05 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:05 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230805Z-16849878b78p8hrf1se7fucxk800000007yg00000000x86m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:05 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:06 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:06 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230806Z-15b8d89586flzzksdx5d6q7g10000000028000000000f2e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:06 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:06 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:06 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230806Z-16849878b78fssff8btnns3b1400000007hg000000003yne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:06 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:06 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:06 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230806Z-16849878b78fssff8btnns3b1400000007d000000000qbmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:06 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230806Z-16849878b78q9m8bqvwuva4svc00000005mg00000000xgcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:06 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:06 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:06 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:06 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230806Z-16849878b7898p5f6vryaqvp58000000081g00000000b6kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:06 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:07 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230807Z-r197bdfb6b4grkz4xgvkar0zcs00000006vg00000000at04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:07 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:07 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:07 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230807Z-16849878b78sx229w7g7at4nkg00000005cg00000000mp5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:07 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 6a505d8a-f01e-003f-30cf-25d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230807Z-17c5cb586f6fqqst87nqkbsx1c00000005mg00000000ap9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 28a40559-201e-0096-60e1-29ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230807Z-r197bdfb6b4hsj5bywyqk9r2xw00000008rg000000004gfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:07 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230807Z-r197bdfb6b48pcqqxhenwd2uz8000000085g000000001gm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:07 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:07 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-16849878b7828dsgct3vrzta7000000005r000000000071b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a08c3447-701e-0098-6ef3-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-r197bdfb6b4hsj5bywyqk9r2xw00000008pg000000009u2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: ef1abc9b-501e-0029-5887-28d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-15b8d89586fpccrmgpemqdqe5800000002600000000009xw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4ad7cd9-001e-0079-1b67-2712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-17c5cb586f65j4snvy39m6qus400000002hg0000000062vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 1ebd5308-d01e-007a-71cb-27f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-17c5cb586f6g6g2sa7kg5c0gg000000002cg00000000mfty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: eab3762f-c01e-0014-292f-28a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-r197bdfb6b4d9xksru4x6qbqr0000000078000000000fceq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:08 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-16849878b786jv8w2kpaf5zkqs00000005yg00000000ypz0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:08 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230808Z-16849878b78j5kdg3dndgqw0vg00000008yg000000007rmq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:08 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:09 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 7890355e-a01e-006f-799c-2713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230809Z-15b8d89586fnsf5zkvx8tfb0zc00000002a000000000bd01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:09 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:09 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230809Z-16849878b78g2m84h2v9sta29000000005z0000000010qx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:09 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:09 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: ff90b716-801e-0067-48e5-27fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230809Z-17c5cb586f6b6kj91vqtm6kxaw00000005u000000000hrrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:09 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:09 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 016b029c-f01e-00aa-3a9e-278521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230809Z-17c5cb586f6mhqqby1dwph2kzs00000002kg000000002e4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:09 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:08:09 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:08:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:08:09 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 429705c8-d01e-0049-61ae-29e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230809Z-17c5cb586f66g7mvgrudxte954000000022g00000000hug9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:08:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Target ID:	0
Start time:	19:07:27
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:07:30
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=1984,i,9041773597454674287,8571613679135902817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	19:07:33
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:19:15
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"
Imagebase:	0x140000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	20:19:15
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\cbr0q0l4.clz" "C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip"
Imagebase:	0x720000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	20:19:15
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	20.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	5%
Total number of Nodes:	80
Total number of Limit Nodes:	5

Executed Functions

Function 0083B286 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0083B2B8

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: a40a62dd249e08e9c93125524d1b79e7f181e634c886c95cfc0fb934e8200fe3
Instruction ID: de8b8e383f04a0664845c970585fd5c477f9efd069028409df7edf0d5cdfe208
Opcode Fuzzy Hash: a40a62dd249e08e9c93125524d1b79e7f181e634c886c95cfc0fb934e8200fe3
Instruction Fuzzy Hash: 3001D1B09043448FEB10CF16D88576AFBE4EF45324F08C5AADE498F252D379A448CBA2

Function 00C50C99 Relevance: 2.6, Strings: 2, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

[M@, xrefs: 00C50D43, 00C50D48
Pj, xrefs: 00C50CC8

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID: Pj$[M@
API String ID: 0-1525308381
Opcode ID: 0ced28825d42adbc3d025904829453b4a871421a5fe2959179bb518b4065c353
Instruction ID: 7c850922000feb08e1083e3e934d565d06e16d630d84cacd50cb237a1f372772
Opcode Fuzzy Hash: 0ced28825d42adbc3d025904829453b4a871421a5fe2959179bb518b4065c353
Instruction Fuzzy Hash: A3212830B083448FC705EB3984503AFBAE6AFC6308B16486DD485DB782DF76AD0687A5

Function 00C50CA8 Relevance: 2.6, Strings: 2, Instructions: 82
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

[M@, xrefs: 00C50D43, 00C50D48
Pj, xrefs: 00C50CC8

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID: Pj$[M@
API String ID: 0-1525308381
Opcode ID: 06563d6dde8c0f01d86ba2b5973d8f9466f86471eaf1b215961f2e06591add1e
Instruction ID: a4aaf8d2535fa58e0e08673d9cc4352e1a9080a79360f3bf1f411f33a408a9de
Opcode Fuzzy Hash: 06563d6dde8c0f01d86ba2b5973d8f9466f86471eaf1b215961f2e06591add1e
Instruction Fuzzy Hash: 21210530B086448FC714EB3A84512AFB7E6AFC5708B55883CD486DB781DF79ED068795

Function 0083A676 Relevance: 1.6, APIs: 1, Instructions: 101
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0083A72D

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a42f79c4c1f2c2963e9fd3d2650386ba0d9e70dfba63127e03215b1946c58e04
Instruction ID: 9bd12b836c27d9f3124d1d6141d141cfb4084dec894a78d59f9b93d6fff33b21
Opcode Fuzzy Hash: a42f79c4c1f2c2963e9fd3d2650386ba0d9e70dfba63127e03215b1946c58e04
Instruction Fuzzy Hash: 0831AF715093806FE722CF25DC85B62BFF8EF06314F08849AE9C5CB252D365A909DB72

Function 0083B2F6 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0083B3A3

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 45e27db3a0aa1c2ef5750ff775d5926bca6445857cc92056b04a677655c9e420
Instruction ID: d7a187cd72d7de1c6294ae4e7243d28132e224338f2dbd883085102626425f11
Opcode Fuzzy Hash: 45e27db3a0aa1c2ef5750ff775d5926bca6445857cc92056b04a677655c9e420
Instruction Fuzzy Hash: A431B4B1508344AFE7228B61CC45F67BFFCEF46214F04849AE985CB152D325A909DBB1

Function 0083ADB4 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0083AE57

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: a48211db1457ff10f41e3c454d61a533c01a6e1d0155704f558724f796975ea4
Instruction ID: e20c9e8114690105807cbdfdf121a553e26ad21db961ab7ffce7bc6637e1d2c3
Opcode Fuzzy Hash: a48211db1457ff10f41e3c454d61a533c01a6e1d0155704f558724f796975ea4
Instruction Fuzzy Hash: 9331B171504344AFEB228B61CC45F67BFECEF46224F0488AAF985DB152D324A909DBB1

Function 0083AC26 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0083ACE6

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 4f18944ba44a3c47d1c6498884ca93572e38251cb26c38316b9813fa51b4aa87
Instruction ID: ea76895439f39f16ccd7bcbc369f0ef48473c307a649660435a51857dccf67b1
Opcode Fuzzy Hash: 4f18944ba44a3c47d1c6498884ca93572e38251cb26c38316b9813fa51b4aa87
Instruction Fuzzy Hash: BD31AF7250E3C06FD3038B318C65A52BFB4AF47610F1A84DBD8C4DF1A3D2296909C762

Function 0083A120 Relevance: 1.6, APIs: 1, Instructions: 82
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0083A1C2

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: b42d2011bf8aacaf8b0653eaea24336bea56033e07e5aeb34aa749c5c13dc85b
Instruction ID: 1b150a765cd7d60792dfbec6fdca2297b73017579b96721a4ab5a5413263e4ac
Opcode Fuzzy Hash: b42d2011bf8aacaf8b0653eaea24336bea56033e07e5aeb34aa749c5c13dc85b
Instruction Fuzzy Hash: 9321E27150D3C06FD3128B258C51B66BFB4EF47610F1980DBD8849F293D225A909C7A2

Function 0083B687 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0083B72E

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 62c464faf42983790ec66c677b7a94a236da06f02c7f22569af4358c86249ae2
Instruction ID: 8e4e5ac2d6d6e89a62e60c21f0f4bb6d7b4bcc976c9e737e1c208c9dd2a5c0d5
Opcode Fuzzy Hash: 62c464faf42983790ec66c677b7a94a236da06f02c7f22569af4358c86249ae2
Instruction Fuzzy Hash: E921F77550D3C06FD3138B259C52B62BFB4EF87610F0A81DBE8849B593D2256919C7B2

Function 0083B326 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0083B3A3

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 8f1b4a851e6a971a8a41c9ab012b7864f6639a45a725d3c7a16c1bc0b0637330
Instruction ID: 8ac5d57d26ecf91cac7e4dead70c370f6eba987ac57a00f39fc9113d2a8eb6ce
Opcode Fuzzy Hash: 8f1b4a851e6a971a8a41c9ab012b7864f6639a45a725d3c7a16c1bc0b0637330
Instruction Fuzzy Hash: EB21B0B2504304AFEB21CF61CC45F6BBBECEF44314F04886AEA45DA251E775A5089BA1

Function 0083ADDA Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0083AE57

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 098d97935bf926d485628e5cbf7f76e2c4142c4f1f574b473e83eb8bbcb4c3f8
Instruction ID: 920727d004405c6090034cff52f0c14235bf71d2a1808312686b0bbdbb7a886e
Opcode Fuzzy Hash: 098d97935bf926d485628e5cbf7f76e2c4142c4f1f574b473e83eb8bbcb4c3f8
Instruction Fuzzy Hash: 9A21B071504204AFEB219F61DC45F6BBBECEF44314F04886AE945DA251E735E5089BA2

Function 0083A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A40C

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: f563500d7a8ae9ea732ae4f04c533199605a6c23e7b3a3304dc079905fc9dcf3
Instruction ID: e1613b248d31c74c9d7aa27fea4c25d4022089247676b5246953576918304a23
Opcode Fuzzy Hash: f563500d7a8ae9ea732ae4f04c533199605a6c23e7b3a3304dc079905fc9dcf3
Instruction Fuzzy Hash: BD216D76508744AFD721CF11CC85F66FBF8EF45710F08849AE985DB292D364E948CBA2

Function 0083A900 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A98E

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: f6e3773fffd8e232584efa607a1a1607c197be29521811af976164e95002ce34
Instruction ID: 71fed8a86d4843cb9cd8ef46d489de900ff9fbe7d653822de1b56c96dc0d56b9
Opcode Fuzzy Hash: f6e3773fffd8e232584efa607a1a1607c197be29521811af976164e95002ce34
Instruction Fuzzy Hash: C821D3715083806FEB228B20DC45F66BFB8EF46714F0984DAED84DF153D264A909C7B2

Function 0083A9E3 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083AA71

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 8e9e76d369e2e90008d1353d6532602135f6165a75405910eb3e592a6e7d60dd
Instruction ID: 7f41e11843f2d8a64a2a3dc1483f44f16baecab1146c8c3899999c398154751e
Opcode Fuzzy Hash: 8e9e76d369e2e90008d1353d6532602135f6165a75405910eb3e592a6e7d60dd
Instruction Fuzzy Hash: D1218E71509380AFDB228F61DC45F96FFB8EF46314F08849AE9859B152D365A508CBB2

Function 0083A6AE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0083A72D

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 977847a948b63d200caaa7f7a5da897db64c3863006b82dfc8cc4259b1eb2d3a
Instruction ID: 6bdecc2f5c6ff9fff66b96ff7f242f5ac1c817e3adb0271bbdf9f71c3617dca2
Opcode Fuzzy Hash: 977847a948b63d200caaa7f7a5da897db64c3863006b82dfc8cc4259b1eb2d3a
Instruction Fuzzy Hash: 20217F71504204AFE720DF65CD85B66FBE8FF48314F088569E985DB251D375E908CBA2

Function 0083A83F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A8C5

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: b75d4d7e0b33b3b8ce50c1d1046df5cea5b342dec1eafaec693009764d526de7
Instruction ID: 2ec5d43a396eb5f8df1ea5db425f697dbd7ab5ae736e85afd53ab2a8f116e85c
Opcode Fuzzy Hash: b75d4d7e0b33b3b8ce50c1d1046df5cea5b342dec1eafaec693009764d526de7
Instruction Fuzzy Hash: 2021D8B550C3806FE7128B21DC41BA6BFB8EF47314F0880D6E9849B153D268A909D7B2

Function 0083AABB Relevance: 1.6, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0083AB3B

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: b297bb0b3b38db5a32b0ed64aba3e2383cecda1dcdaf66b8b29a646749dfbc57
Instruction ID: 8ecc724578876c71ce2b531799121e5eb144034e84fdd7e0354fdad137ed91e5
Opcode Fuzzy Hash: b297bb0b3b38db5a32b0ed64aba3e2383cecda1dcdaf66b8b29a646749dfbc57
Instruction Fuzzy Hash: BF21B0756083C05FDB12CB29DC55B92BFE8EF46324F0984EAE884CB153E265D909CB62

Function 0083A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A40C

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 521a5bc49d9ec10ef1ad57b5cb574a0ae0c1b0de4349b4509a70223058333d85
Instruction ID: c258328116ac4c47828e4d9aff74e9e7a3302f78676e1d4660986b872c53fc6f
Opcode Fuzzy Hash: 521a5bc49d9ec10ef1ad57b5cb574a0ae0c1b0de4349b4509a70223058333d85
Instruction Fuzzy Hash: D421C0756042049FEB20CF21CC85F66F7ECFF44710F08845AE985CB251D764E908CAB2

Function 0083AA12 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083AA71

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 34152972e0e939754453d92c91ba21f58c90aad83cd514e5b69bd3737e4ce7b3
Instruction ID: 9fde2e30271b2babd7f32a84052e76fca6ce6a931e6218a3afc75f160e0d6191
Opcode Fuzzy Hash: 34152972e0e939754453d92c91ba21f58c90aad83cd514e5b69bd3737e4ce7b3
Instruction Fuzzy Hash: 5011C472504204AFEB21CF61DD45F6AFBE8EF44314F04C45AEE459B251D378A504DBB2

Function 0083A932 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A98E

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: aa5812ae4d3896fc9a0b4b533ef5391d2abd7fcdfe92f0aec8ebeadd25293609
Instruction ID: af63db58470dbce5d7342d8a5a7a3c0b1205b2cdc999f02fe3bf2f93f0e1253f
Opcode Fuzzy Hash: aa5812ae4d3896fc9a0b4b533ef5391d2abd7fcdfe92f0aec8ebeadd25293609
Instruction Fuzzy Hash: 5211E371504204AFEB21CF65DC85B6AFBE8EF44324F18C45AEE899B241D374A508DBB2

Function 0083A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0083A30C

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 1d588202d2a3ae25f343fdbcd74d99af1ecad6c023540542f5839a2ee0249a1c
Instruction ID: e2e8d4531a847fe75efafd834ca929927327f978621568d93a4627e26be488fc
Opcode Fuzzy Hash: 1d588202d2a3ae25f343fdbcd74d99af1ecad6c023540542f5839a2ee0249a1c
Instruction Fuzzy Hash: 8E11A3758093C09FDB228B25DC54A52BFB4EF47320F0980DBDD858F263D265A808CB72

Function 0083B03B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0083B094

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 959371fc61449be8639883dedc08dee3decdb5797649c56bb6d88a1401963764
Instruction ID: 136df68f54b3da9e0bc3b17dd9777a0c8dc13f4d56d225ccb5823f1c812a4f23
Opcode Fuzzy Hash: 959371fc61449be8639883dedc08dee3decdb5797649c56bb6d88a1401963764
Instruction Fuzzy Hash: 0611A0755097C09FDB128B25DC85B52BFF4EF46220F0984DAED858F263D374A848CB62

Function 0083A5DC Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetLongPathNameW.KERNELBASE(?,?,?), ref: 0083A636

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: LongNamePath
String ID:
API String ID: 82841172-0
Opcode ID: e379d2b11cd24b48f5c93070072b160457bfc2cf4b037c19e586f2860ca1146d
Instruction ID: 32f773be8b069a26fbbdfda751f312e00995e62a754a6956b84bdd1cdc5672f9
Opcode Fuzzy Hash: e379d2b11cd24b48f5c93070072b160457bfc2cf4b037c19e586f2860ca1146d
Instruction Fuzzy Hash: 5F1191714093849FDB21CF55DC85B56FFF4EF46320F0884AAED858B162D375A808CB62

Function 0083B264 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0083B2B8

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: edf1c697f908aece202e9b01ec545175abeffc9e7d2e75a4d97a02174336aa4d
Instruction ID: f49786cde170853eb91cc1b11e0af23ffcdbf3bee796c3ec14241e46e33a8b49
Opcode Fuzzy Hash: edf1c697f908aece202e9b01ec545175abeffc9e7d2e75a4d97a02174336aa4d
Instruction Fuzzy Hash: 691170755093809FDB12CF15DC95B56BFB4EF46220F0884EAED898F252D275A908CBA2

Function 0083A872 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,E0CF6191,00000000,00000000,00000000,00000000), ref: 0083A8C5

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 596eb0682d3fb0fe7a8ebaa5e8c642440d7e10c3f6f425a481f36f67f778bce6
Instruction ID: 6bb5bbd810a009c2199b475c15acc62ffa049ecb8f8b9622cd841bb664930388
Opcode Fuzzy Hash: 596eb0682d3fb0fe7a8ebaa5e8c642440d7e10c3f6f425a481f36f67f778bce6
Instruction Fuzzy Hash: F7012671504344AEE710CB11DC85B6AF7E8EF44324F08C066EE459B241E778A944CAF2

Function 0083AAF6 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0083AB3B

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 5f8fae849931ef5cff866c7bb66c83690082bbc4818e6104a18b7f01d493b1b4
Instruction ID: 72743381beb0ed3a202dae55414f7e136f681f439761998055a978474985d26e
Opcode Fuzzy Hash: 5f8fae849931ef5cff866c7bb66c83690082bbc4818e6104a18b7f01d493b1b4
Instruction Fuzzy Hash: DC11C471A042448FDB54CF25D885B66FBD8FF45320F08C4AADD89CB252E675E844CBA2

Function 0083AC96 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0083ACE6

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 06c881db840e3ad98edbd18df9228bc4a15a1e9b6c854795708cea74d8043e06
Instruction ID: b46569a56c50107b3dbf2d04da7a74c753197fab270c854fb606a0a42a4d6e07
Opcode Fuzzy Hash: 06c881db840e3ad98edbd18df9228bc4a15a1e9b6c854795708cea74d8043e06
Instruction Fuzzy Hash: 1401B171600200AFD310DF16CC46B26FBE8FB88A20F14C12AEC489B641E735F915CBE2

Function 0083A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0083A1C2

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 7518ec1e5f1399274de046cffb2d4f6f1989d8199cb8146c6269d5b12ef60067
Instruction ID: 1a3e295d82590eed1750bb401f14ed8528cce4cdf0cfb939f031eebae965da48
Opcode Fuzzy Hash: 7518ec1e5f1399274de046cffb2d4f6f1989d8199cb8146c6269d5b12ef60067
Instruction Fuzzy Hash: 4901B171600200AFD310DF16CC46B26FBE8EB88A20F14816AEC089B641E735F915CBE2

Function 0083B6DE Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0083B72E

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 3de1327ddc1c6586f06193eea4938e446995aa65d339d8f595ec3e3ef258ff72
Instruction ID: 708dc64d59a44d182473ebe694d294e974ad669108bda7b00f0e52dd1172dabd
Opcode Fuzzy Hash: 3de1327ddc1c6586f06193eea4938e446995aa65d339d8f595ec3e3ef258ff72
Instruction Fuzzy Hash: 1D01A271600600ABD210DF16CC46B26FBE8FB88A20F14C11AEC485B741E775F915CBE6

Function 0083A5FE Relevance: 1.5, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

GetLongPathNameW.KERNELBASE(?,?,?), ref: 0083A636

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: LongNamePath
String ID:
API String ID: 82841172-0
Opcode ID: 0495a54b821b2d8c5236d23c0dd897cf1c0416bf2b34c1197668fb6041ea3628
Instruction ID: db0b8043b8133cebaf617be6f3216e83570e6190039d2e16847e9b5f231f6e33
Opcode Fuzzy Hash: 0495a54b821b2d8c5236d23c0dd897cf1c0416bf2b34c1197668fb6041ea3628
Instruction Fuzzy Hash: CE01B1719042448FDB10CF55D886B25FBE4FF54320F0CC4AADD898B252E375E408CBA2

Function 0083B062 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0083B094

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: f3700345fb381addc6f879b7be64e0aff479f6727ea458fd6b1f5784d6e9ba42
Instruction ID: 097bb8f5c3a054bd158731367a7cbbb01c5c7b46d9452f1a382cfbdb1c747eb9
Opcode Fuzzy Hash: f3700345fb381addc6f879b7be64e0aff479f6727ea458fd6b1f5784d6e9ba42
Instruction Fuzzy Hash: 3B01F4B4A046448FDB108F25D885766FBE4EF45324F08C0AADE198F352D779E848CEA2

Function 0083A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0083A30C

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: c4d8b2b1eb77fbc6bcabf399d2415b5905ac59ef97677b32da77837b004efd42
Instruction ID: 0ce101a563c06713445fd63daaac80efd41ff8ad7152ed777a0ea6c71d0e2892
Opcode Fuzzy Hash: c4d8b2b1eb77fbc6bcabf399d2415b5905ac59ef97677b32da77837b004efd42
Instruction Fuzzy Hash: D4F0AF349042448FDB60CF16D885725FBE0EF45724F08C09ADD898B352D379A848CAA2

Function 00C50798 Relevance: 1.5, Strings: 1, Instructions: 284COMMON

Download Yara Rule

Strings

\O'k, xrefs: 00C50966

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID: \O'k
API String ID: 0-3690770254
Opcode ID: 0d54dd55b720a006e053d952ffa4823e39ce4c34a618a9ddce8863d73f3d456e
Instruction ID: b544691dd7a59f815aae12c08116b14a621c6531d21169a1d7ddd1288df413c3
Opcode Fuzzy Hash: 0d54dd55b720a006e053d952ffa4823e39ce4c34a618a9ddce8863d73f3d456e
Instruction Fuzzy Hash: 37A18D38B092049FDB04AB78D89673E77E3FB84309F248429D946DB395DB398D81CB91

Function 0083A784 Relevance: 1.3, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0083A7F8

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 6114038e97d25b92545e24ccd03bfc05ffd6fa04618bbc34e69d14a3725d259c
Instruction ID: 54047641216e0004e4d7e270e958971c8feab8c1c5e778f3e93d44f053610a79
Opcode Fuzzy Hash: 6114038e97d25b92545e24ccd03bfc05ffd6fa04618bbc34e69d14a3725d259c
Instruction Fuzzy Hash: 3F2184759097C05FDB128F25DC95752BFB8EF07320F0984EADD858F2A3D2649909CB62

Function 0083A7C6 Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0083A7F8

Memory Dump Source

Source File: 0000000D.00000002.2034338395.000000000083A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0083A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_83a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 22cc3e4bd0bcb376daff07fe8b257901b7ce4ffd89624de65e139796a597001d
Instruction ID: 106cbe8d4f35487de9333c5a58833a759960e2bce53287482fad0ec2fc3f5c01
Opcode Fuzzy Hash: 22cc3e4bd0bcb376daff07fe8b257901b7ce4ffd89624de65e139796a597001d
Instruction Fuzzy Hash: 1B01DF74A042448FDB108F25D88576AFBE4EF44320F08C4AADC89CB252D278A848CAA2

Function 00C50E41 Relevance: 1.2, Instructions: 1192COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e38727c5b7d87e4ce0c79057db2e67278bea44bdbd29dcc51e55e6e45bd625a7
Instruction ID: b8d8c369f378f278e33b82bd1eb398060dc1402bc95c065f69527cc28425a5ee
Opcode Fuzzy Hash: e38727c5b7d87e4ce0c79057db2e67278bea44bdbd29dcc51e55e6e45bd625a7
Instruction Fuzzy Hash: 1C61CB34B05214DFCB24AB74C85576EB7E2EB8930AF258529DC42DB385DB79CC85CB80

Function 00C502C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ac281a21fd228a2c0f40e3876e5c5e399de9af0cbce9260a0b71a27109ae191
Instruction ID: 8fef35b1647ed276a2b7ebebb3dd862506cfcd222a60f4cde58991c089528c26
Opcode Fuzzy Hash: 9ac281a21fd228a2c0f40e3876e5c5e399de9af0cbce9260a0b71a27109ae191
Instruction Fuzzy Hash: 4DB17B38706900DFC718EB64E898A5A7BB2FF89341B208529E946DB399DF349D41CF94

Function 00C510A5 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62abb4f90cc673a4b98bffef3bb6afd398e3d376653ab3b67ca41359be46d909
Instruction ID: b0cb71d689f917c1c6fc3562bf70f6e5a640407a05b50e29da317300a65f6117
Opcode Fuzzy Hash: 62abb4f90cc673a4b98bffef3bb6afd398e3d376653ab3b67ca41359be46d909
Instruction Fuzzy Hash: F0318938B01204CFCB24DB74C458A6EB7F2FB88306B258569D902DB394DB36DC81CB90

Function 00C50BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9fe3788f719088278f02b2546d30f9f24138617a69a65c8ed94b49437d4482c
Instruction ID: e84bdb0b0e36f4cd52562e632d7c0b023bf7fd586e033b4c32f06badea8410ed
Opcode Fuzzy Hash: c9fe3788f719088278f02b2546d30f9f24138617a69a65c8ed94b49437d4482c
Instruction Fuzzy Hash: 9911E036A24108AFCB04ABB8D85589F7BF6BF88214B114439E605EB264EB35AC058B81

Function 00E10808 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035879347.0000000000E10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_e10000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e322f947c7655de3c69122a1bdaf424f68675b72d7a938ac6c8faba9051e8d76
Instruction ID: 5822976ddb04f7ea434cf80aeb9c53eda3fa1ebb09717e4d2ba731b2503b3235
Opcode Fuzzy Hash: e322f947c7655de3c69122a1bdaf424f68675b72d7a938ac6c8faba9051e8d76
Instruction Fuzzy Hash: 940184B68096446FD7019F15AC41D5BFBECDF85524F05C87AEC488B202E236A9088BB2

Function 00E105DF Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035879347.0000000000E10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_e10000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bc0d4f12dbab964de6c36b06fb2aa1a430a47c0631cbfa9a6ec4b08f6cf2c5b
Instruction ID: 9f1c6a9584465bc6b3da9d676e31159f0ce830782fbfd5170f3612d7ffec05e7
Opcode Fuzzy Hash: 9bc0d4f12dbab964de6c36b06fb2aa1a430a47c0631cbfa9a6ec4b08f6cf2c5b
Instruction Fuzzy Hash: 6C01D6B55097806FC7118F15AC418A7BFE8DF4622070984ABEC8987252D175B909CBA2

Function 00E1082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035879347.0000000000E10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_e10000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f9f962d0d06a58eb6ce01906939c03e961cbfff4dae38c17d4828ebc2ce1608
Instruction ID: 8ad9c2ebdeda347c0530bf2254432d1125829074e36383164a7f1c3da70d582d
Opcode Fuzzy Hash: 7f9f962d0d06a58eb6ce01906939c03e961cbfff4dae38c17d4828ebc2ce1608
Instruction Fuzzy Hash: ABF082B2915604AB9240DF15ED4685AF7ECDF84521F04C53EEC488B301F276BA154AF2

Function 00C50C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d171e57bb24319d473815063b53d78b6399ddd891f446b94308f1548714130e5
Instruction ID: 988ef0d110e844923926e381dea4cb009e3029d2f442599a62debc7d629241c2
Opcode Fuzzy Hash: d171e57bb24319d473815063b53d78b6399ddd891f446b94308f1548714130e5
Instruction Fuzzy Hash: E3E0DF32F143582FCB44DBB9840129EBFF5AF86058F9544BAC508C7281EA388D028380

Function 00E10606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035879347.0000000000E10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_e10000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbab678076d3bd8ee446c2145d87a7a831e236e45dc406e41b5c01faa2d570fc
Instruction ID: d30d174c35655764b323561255faa86910a42432c4cf98cde1eefae245c97331
Opcode Fuzzy Hash: fbab678076d3bd8ee446c2145d87a7a831e236e45dc406e41b5c01faa2d570fc
Instruction Fuzzy Hash: B1E092B66006044B9650CF0AEC82466F7D8EB88630708C47FDC0D8B701E639B504CAA6

Function 00C50C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74f6c913929452d50800f458a2c9efc74b362b51dcc9e6cc6e8f46dd161454b1
Instruction ID: c77c164c76e098adee445f423cf725db0ae524952f3f305fc4fe62cf7fdb2240
Opcode Fuzzy Hash: 74f6c913929452d50800f458a2c9efc74b362b51dcc9e6cc6e8f46dd161454b1
Instruction Fuzzy Hash: FDD05B71F142183F8B54EBF9985155FBBEA9BC4154F554479910DD7340EF399C0187C0

Function 00C50E08 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cc132d41f1b0da49a111d99e53a3c37e5d708880af4183d067aca2fdf6beb06
Instruction ID: 38a9588f82ed524e3a80c8dfd04a5a3232892cae0f6033a90a5f12017db86a1f
Opcode Fuzzy Hash: 7cc132d41f1b0da49a111d99e53a3c37e5d708880af4183d067aca2fdf6beb06
Instruction Fuzzy Hash: 91E0122821D3844FC706573494566597F615B86304F9A80D6CDD4CF3A3C665DC45C750

Function 00C50DD1 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c45ef80d43c4ed5447f6bc4406297779b354d6f3dc445db0a291414a8273d782
Instruction ID: 6b267a78f152d5ca248d6b59a6f18ad6e417246fe936996459e6eea4c74baa38
Opcode Fuzzy Hash: c45ef80d43c4ed5447f6bc4406297779b354d6f3dc445db0a291414a8273d782
Instruction Fuzzy Hash: D8E0EC2420D3854FC70793348865A557F615F96214F5A82DAD4D4CF2E3D665C888D744

Function 008323F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2034279152.0000000000832000.00000040.00000800.00020000.00000000.sdmp, Offset: 00832000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_832000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceb69854ee64d2a41a6ae102e22cfde5732218c7aa3cdd1406ca7778345aeb14
Instruction ID: f1c4c3f706911ec1678833831cefc8134ff9f18b6e9ff5f2e7872700c26e753a
Opcode Fuzzy Hash: ceb69854ee64d2a41a6ae102e22cfde5732218c7aa3cdd1406ca7778345aeb14
Instruction Fuzzy Hash: 84D05E792056C14FD316DA1CC1A5B9937D4BB91714F4A48F9A800CB763C76CE981D640

Function 008323BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2034279152.0000000000832000.00000040.00000800.00020000.00000000.sdmp, Offset: 00832000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_832000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95f84b6fd08a135bc42b7b729ca2505ba3a1c1ef7a5acd5beb1f1b1ec63bd259
Instruction ID: 8d0bb92c1aa0189a6db95510873b7a0d2705a42cad40aae18b4b00993cbd69a9
Opcode Fuzzy Hash: 95f84b6fd08a135bc42b7b729ca2505ba3a1c1ef7a5acd5beb1f1b1ec63bd259
Instruction Fuzzy Hash: 86D05E352402814BC71ADA1CC2E4F5973D4BB80B14F0644E8AC10CB372C7ACD8C0CA40

Function 00C50DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7abe69ea14f438fed646d74294deb8ecda46916ac37f8a6854a0a8b9df6875db
Instruction ID: dde8353bd08c523c91a0f77065156e7bbac29918b3ffd34b5cda8ba00ee92e06
Opcode Fuzzy Hash: 7abe69ea14f438fed646d74294deb8ecda46916ac37f8a6854a0a8b9df6875db
Instruction Fuzzy Hash: 9DC012382042088BC704A778D45AE26739657C0305F55C464D8484B295DA74ECC4D684

Function 00C50E18 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2035808401.0000000000C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c50000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbf64025f3223fb0f36824592b57a8c578fcaf495c95cb6d8598312e25412ef0
Instruction ID: 49805fe75f1370f7377f8e6da61c7229fbfbccb47d9beb68af14126ef656b94c
Opcode Fuzzy Hash: fbf64025f3223fb0f36824592b57a8c578fcaf495c95cb6d8598312e25412ef0
Instruction Fuzzy Hash: 35C012382042088BC704A778D55AE29779557C4305F95C46898584B395CA74EC84C644

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\unarchiver.log

C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip (copy)

C:\Users\user\Downloads\FALLO SEGUNDA INSTANCIA TUTELA RAD 19-2024-10134-01.zip.crdownload

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: chrome.exePID: 3956, Parent PID: 4412

General

Chronological Activities

Analysis Process: chrome.exePID: 3040, Parent PID: 3956

Windows Analysis Report
https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv

Function 00C50C99 Relevance: 2.6, Strings: 2, Instructions: 86
COMMON

Function 00C50CA8 Relevance: 2.6, Strings: 2, Instructions: 82
COMMON

Function 0083A676 Relevance: 1.6, APIs: 1, Instructions: 101
fileCOMMON

Function 0083B2F6 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Function 0083ADB4 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Function 0083AC26 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Function 0083A120 Relevance: 1.6, APIs: 1, Instructions: 82
fileCOMMON

Function 0083B687 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Function 0083B326 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0083ADDA Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0083A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Function 0083A900 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Function 0083A9E3 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Function 0083A6AE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Function 0083A83F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON