Edit tour

Windows Analysis Report
Complete_with_DocuSign_49584.pdf

Overview

General Information

Sample name:	Complete_with_DocuSign_49584.pdf
Analysis ID:	1553426
MD5:	3b363fd7dc351d448b473aad3ebfec95
SHA1:	c873a0c9ba91722cd7b23a6a59f4621f3be54a07
SHA256:	89ef2a11438a1ba2032fe7cc6e1c151514fdd9635c2b8ca51f8bbbe655c5ce58
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found potential malicious PDF (bad image similarity)

Multi AV Scanner detection for domain / URL

Yara detected BlockedWebSite

AI detected landing page (webpage, office document or email)

Detected use of open redirect vulnerability

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Drops PE files

Drops PE files to the windows directory (C:\Windows)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 2316 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Complete_with_DocuSign_49584.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 3180 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7364 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1732,i,3706654091440507380,12489716021560546543,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.druglibrary.net/external.html?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2080,i,12731502939009632189,14396455718482454569,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_212	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

HTML

Source	Rule	Description	Author	Strings
2.1.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-11T07:02:28.590051+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.4	49740	TCP
2024-11-11T07:02:55.753481+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.4	52598	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: igreen.green

Virustotal: Detection: 8%

Perma Link

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_212, type: DROPPED

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Proxy from: druglibrary.net/cgi-bin/cgiwrap/druglibrary/external.pl?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com to https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com

Source: https://k7l8y.ltasetalty.com/akuFd/#kvenkatesh@gemseducation.com

HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\LICENSE.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:52598 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52602 version: TLS 1.2

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.9.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.9.dr

Source: global traffic	TCP traffic: 192.168.2.4:53568 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:52594 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: druglibrary.net to https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com

Source: Joe Sandbox View	IP Address: 23.47.168.24 23.47.168.24
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View	ASN Name: AS-PRIORITYCOLOCA AS-PRIORITYCOLOCA
Source: Joe Sandbox View	ASN Name: UNIFIEDLAYER-AS-1US UNIFIEDLAYER-AS-1US

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.4:49740
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.4:52598

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.168.24
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.24
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Ubm4Xc44Z1yWy52&MD=5rOSoczs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /external.html?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1Host: www.druglibrary.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-bin/cgiwrap/druglibrary/external.pl?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1Host: druglibrary.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1Host: igreen.greenConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: igreen.greenConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /akuFd/ HTTP/1.1Host: k7l8y.ltasetalty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://igreen.green/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: k7l8y.ltasetalty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://k7l8y.ltasetalty.com/akuFd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: k7l8y.ltasetalty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://k7l8y.ltasetalty.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: k7l8y.ltasetalty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://k7l8y.ltasetalty.com/akuFd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: k7l8y.ltasetalty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Ubm4Xc44Z1yWy52&MD=5rOSoczs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: www.druglibrary.net
Source: global traffic	DNS traffic detected: DNS query: druglibrary.net
Source: global traffic	DNS traffic detected: DNS query: igreen.green
Source: global traffic	DNS traffic detected: DNS query: k7l8y.ltasetalty.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 417Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Nov 2024 06:02:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e0c1340290f0c82-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Nov 2024 06:02:47 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0CF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29aFLyRfPdr44YZJ5fejbFPLUhDC9YcITK%2B%2F%2Birmpd9iBjcuJJJ4MNuADcsYQRZ8qO8G9CcXygzd6KjDpHM6%2Fw0SMtmLF7ZZ1NU3HD8M%2FxFCztuLZpTp9Ko2FQrTAON%2FNAPt173GtA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e0c134dc9b84244-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1109&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1180&delivery_rate=2516072&cwnd=246&unsent_bytes=0&cid=7540fec18f58dc53&ts=189&x=0"

Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Google.Widevine.CDM.dll.9.dr, widevinecdm.dll.9.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: sets.json.9.dr	String found in binary or memory: https://07c225f3.online
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://123milhas.com/v2/busca/confirmacao-pedido/.
Source: sets.json.9.dr	String found in binary or memory: https://24.hu
Source: sets.json.9.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.9.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.9.dr	String found in binary or memory: https://alice.tw
Source: sets.json.9.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.9.dr	String found in binary or memory: https://autobild.de
Source: sets.json.9.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.9.dr	String found in binary or memory: https://bild.de
Source: sets.json.9.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.9.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.9.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.9.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.9.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.9.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.9.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.9.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.9.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.9.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.9.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.9.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.9.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.9.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.9.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.9.dr	String found in binary or memory: https://chatbot.com
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://checkout-new.dafiti.com.br/success/index.html.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://checkout.casasbahia.com.br/compra-finalizada
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://checkout.extra.com.br/compra-finalizada
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://checkout.pontofrio.com.br/compra-finalizada
Source: sets.json.9.dr	String found in binary or memory: https://chennien.com
Source: sets.json.9.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.9.dr	String found in binary or memory: https://clarosports.com
Source: manifest.json1.9.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: sets.json.9.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.9.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.9.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.9.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.9.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.9.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.9.dr	String found in binary or memory: https://commentcamarche.net
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://comprasegura.olx.com.br/
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://comprasegura.olx.com.br/pedidos/.
Source: sets.json.9.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.9.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.9.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.9.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.9.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.9.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.9.dr	String found in binary or memory: https://css-load.com
Source: sets.json.9.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.9.dr	String found in binary or memory: https://deere.com
Source: sets.json.9.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.9.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.9.dr	String found in binary or memory: https://drimer.io
Source: sets.json.9.dr	String found in binary or memory: https://drimer.travel
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://dump-truck.appspot.com/.
Source: LICENSE.txt.9.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.9.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.9.dr	String found in binary or memory: https://een.be
Source: sets.json.9.dr	String found in binary or memory: https://efront.com
Source: sets.json.9.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.9.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.9.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.9.dr	String found in binary or memory: https://ella.sv
Source: sets.json.9.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://elpais.uy
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://emv-qr.googleplex.com/.
Source: sets.json.9.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.9.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.9.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.9.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.9.dr	String found in binary or memory: https://finn.no
Source: sets.json.9.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.9.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.9.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.9.dr	String found in binary or memory: https://github.com/easylist)
Source: sets.json.9.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.9.dr	String found in binary or memory: https://gnttv.com
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://google-wallet-ccr-salvador.pagmob.com.br/pay
Source: sets.json.9.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.9.dr	String found in binary or memory: https://grid.id
Source: sets.json.9.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.9.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.9.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.9.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.9.dr	String found in binary or memory: https://hapara.com
Source: sets.json.9.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.9.dr	String found in binary or memory: https://hc1.com
Source: sets.json.9.dr	String found in binary or memory: https://hc1.global
Source: sets.json.9.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.9.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.9.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.9.dr	String found in binary or memory: https://hearty.app
Source: sets.json.9.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.9.dr	String found in binary or memory: https://hearty.me
Source: sets.json.9.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.9.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.9.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.9.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.9.dr	String found in binary or memory: https://hj.rs
Source: sets.json.9.dr	String found in binary or memory: https://hjck.com
Source: sets.json.9.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.9.dr	String found in binary or memory: https://html-load.com
Source: sets.json.9.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.9.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.9.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.9.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.9.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.9.dr	String found in binary or memory: https://img-load.com
Source: sets.json.9.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.9.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.9.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.9.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.9.dr	String found in binary or memory: https://interia.pl
Source: sets.json.9.dr	String found in binary or memory: https://intoday.in
Source: sets.json.9.dr	String found in binary or memory: https://iolam.it
Source: sets.json.9.dr	String found in binary or memory: https://ishares.com
Source: sets.json.9.dr	String found in binary or memory: https://jagran.com
Source: sets.json.9.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.9.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.9.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.9.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.9.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.9.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.9.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.9.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.9.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.9.dr	String found in binary or memory: https://kompas.com
Source: sets.json.9.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.9.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.9.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.9.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.9.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.9.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.9.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.9.dr	String found in binary or memory: https://libero.it
Source: sets.json.9.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.9.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.9.dr	String found in binary or memory: https://livechat.com
Source: sets.json.9.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.9.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.9.dr	String found in binary or memory: https://livemint.com
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://m.aliexpress.com/p/second-payment/pay-result.html?.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://m.americanas.com.br/compra/pix.
Source: sets.json.9.dr	String found in binary or memory: https://max.auto
Source: sets.json.9.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.9.dr	String found in binary or memory: https://meo.pt
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.9.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.9.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.9.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.9.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.9.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.9.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.9.dr	String found in binary or memory: https://money.pl
Source: sets.json.9.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.9.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.9.dr	String found in binary or memory: https://nacion.com
Source: sets.json.9.dr	String found in binary or memory: https://naukri.com
Source: sets.json.9.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.9.dr	String found in binary or memory: https://nien.co
Source: sets.json.9.dr	String found in binary or memory: https://nien.com
Source: sets.json.9.dr	String found in binary or memory: https://nien.org
Source: sets.json.9.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.9.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.9.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.9.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.9.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.9.dr	String found in binary or memory: https://o2.pl
Source: sets.json.9.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.9.dr	String found in binary or memory: https://onet.pl
Source: sets.json.9.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.9.dr	String found in binary or memory: https://p106.net
Source: sets.json.9.dr	String found in binary or memory: https://p24.hu
Source: sets.json.9.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.9.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.9.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.9.dr	String found in binary or memory: https://player.pl
Source: sets.json.9.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.9.dr	String found in binary or memory: https://poalim.site
Source: sets.json.9.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.9.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.9.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.9.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.9.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.9.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.9.dr	String found in binary or memory: https://radio1.be
Source: sets.json.9.dr	String found in binary or memory: https://radio2.be
Source: sets.json.9.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.9.dr	String found in binary or memory: https://repid.org
Source: sets.json.9.dr	String found in binary or memory: https://reshim.org
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://rsolomakhin.github.io/pix/.
Source: sets.json.9.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.9.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.9.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.9.dr	String found in binary or memory: https://sackrace.ai
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://sacolamobile.magazineluiza.com.br/#/comprovante
Source: sets.json.9.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.9.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.9.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.9.dr	String found in binary or memory: https://samayam.com
Source: sets.json.9.dr	String found in binary or memory: https://sapo.io
Source: sets.json.9.dr	String found in binary or memory: https://sapo.pt
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://secure.epocacosmeticos.com.br/checkout/#/payment.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://secure.vivara.com.br/checkout?orderFormId=.
Source: sets.json.9.dr	String found in binary or memory: https://shock.co
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://shopee.com.br/payment/.
Source: sets.json.9.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.9.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.9.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.9.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.9.dr	String found in binary or memory: https://songshare.com
Source: sets.json.9.dr	String found in binary or memory: https://songstats.com
Source: sets.json.9.dr	String found in binary or memory: https://sporza.be
Source: sets.json.9.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.9.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.9.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.9.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.9.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.9.dr	String found in binary or memory: https://stripe.com
Source: sets.json.9.dr	String found in binary or memory: https://stripe.network
Source: sets.json.9.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.9.dr	String found in binary or memory: https://supereva.it
Source: sets.json.9.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.9.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.9.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.9.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.9.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.9.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.9.dr	String found in binary or memory: https://text.com
Source: sets.json.9.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.9.dr	String found in binary or memory: https://the42.ie
Source: sets.json.9.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.9.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.9.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.9.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.9.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.9.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.9.dr	String found in binary or memory: https://top.pl
Source: sets.json.9.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.9.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.9.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.9.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.9.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.9.dr	String found in binary or memory: https://tvid.in
Source: sets.json.9.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.9.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.9.dr	String found in binary or memory: https://unotv.com
Source: sets.json.9.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.9.dr	String found in binary or memory: https://vrt.be
Source: sets.json.9.dr	String found in binary or memory: https://vwo.com
Source: sets.json.9.dr	String found in binary or memory: https://welt.de
Source: sets.json.9.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.9.dr	String found in binary or memory: https://wildix.com
Source: sets.json.9.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.9.dr	String found in binary or memory: https://wingify.com
Source: sets.json.9.dr	String found in binary or memory: https://wordle.at
Source: sets.json.9.dr	String found in binary or memory: https://wp.pl
Source: sets.json.9.dr	String found in binary or memory: https://wpext.pl
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.anacapri.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.arezzo.com.br/checkout/order-confirmation/.
Source: sets.json.9.dr	String found in binary or memory: https://www.asadcdn.com
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.centauro.com.br/checkouts/confirmacao/.
Source: chromecache_212.10.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_212.10.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.cobasi.com.br/checkout/review.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.elo7.com.br/buyer/order/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.hering.com.br/checkout/#/payment
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.hurb.com/br/pay/checkout/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.ifood.com.br/pedidos/aguardando-pagamento/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.motorola.com.br/checkout/#/payment
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.natura.com.br/pedido-concluido/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.netshoes.com.br/checkout/confirmation/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.paodeacucar.com/checkout.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.petz.com.br/checkout/confirmation/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.riachuelo.com.br/successpage
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.schutz.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.sephora.com.br/checkout/success/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.ultrafarma.com.br/checkout/confirmacao/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.zattini.com.br/checkout/confirmation/.
Source: optimization-hints.pb.9.dr	String found in binary or memory: https://www.zzmall.com.br/checkout/order-confirmation/.
Source: sets.json.9.dr	String found in binary or memory: https://ya.ru
Source: sets.json.9.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.9.dr	String found in binary or memory: https://zalo.me
Source: sets.json.9.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.9.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 52609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 52851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52806
Source: unknown	Network traffic detected: HTTP traffic on port 52679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52805
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52808
Source: unknown	Network traffic detected: HTTP traffic on port 53581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52809
Source: unknown	Network traffic detected: HTTP traffic on port 52839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52811
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52812
Source: unknown	Network traffic detected: HTTP traffic on port 52815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52817
Source: unknown	Network traffic detected: HTTP traffic on port 52840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52816
Source: unknown	Network traffic detected: HTTP traffic on port 52645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52810
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52819
Source: unknown	Network traffic detected: HTTP traffic on port 52702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52829
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52827
Source: unknown	Network traffic detected: HTTP traffic on port 52608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52700
Source: unknown	Network traffic detected: HTTP traffic on port 52713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52821
Source: unknown	Network traffic detected: HTTP traffic on port 52772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52709
Source: unknown	Network traffic detected: HTTP traffic on port 52724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 52654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 53571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 52726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 52760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 52655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 52825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 52725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 52759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 52782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52637
Source: unknown	Network traffic detected: HTTP traffic on port 52676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52635
Source: unknown	Network traffic detected: HTTP traffic on port 52653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52636
Source: unknown	Network traffic detected: HTTP traffic on port 52699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52757
Source: unknown	Network traffic detected: HTTP traffic on port 52779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52751
Source: unknown	Network traffic detected: HTTP traffic on port 52791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52754
Source: unknown	Network traffic detected: HTTP traffic on port 52756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52631
Source: unknown	Network traffic detected: HTTP traffic on port 52733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52753
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52769
Source: unknown	Network traffic detected: HTTP traffic on port 52818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52765
Source: unknown	Network traffic detected: HTTP traffic on port 52606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52764
Source: unknown	Network traffic detected: HTTP traffic on port 52722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52772
Source: unknown	Network traffic detected: HTTP traffic on port 52848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52775
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52780
Source: unknown	Network traffic detected: HTTP traffic on port 52744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52668
Source: unknown	Network traffic detected: HTTP traffic on port 52698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52667
Source: unknown	Network traffic detected: HTTP traffic on port 52755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52786
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52670
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52791
Source: unknown	Network traffic detected: HTTP traffic on port 52837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52836
Source: unknown	Network traffic detected: HTTP traffic on port 52628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52713
Source: unknown	Network traffic detected: HTTP traffic on port 52817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52830
Source: unknown	Network traffic detected: HTTP traffic on port 52723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52604
Source: unknown	Network traffic detected: HTTP traffic on port 52711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52723
Source: unknown	Network traffic detected: HTTP traffic on port 52757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52607
Source: unknown	Network traffic detected: HTTP traffic on port 52675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52849
Source: unknown	Network traffic detected: HTTP traffic on port 52778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52842
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52841
Source: unknown	Network traffic detected: HTTP traffic on port 52849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52613
Source: unknown	Network traffic detected: HTTP traffic on port 52712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52619
Source: unknown	Network traffic detected: HTTP traffic on port 52697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52617
Source: unknown	Network traffic detected: HTTP traffic on port 52674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52850
Source: unknown	Network traffic detected: HTTP traffic on port 52607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52852
Source: unknown	Network traffic detected: HTTP traffic on port 52805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52626
Source: unknown	Network traffic detected: HTTP traffic on port 52652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52745
Source: unknown	Network traffic detected: HTTP traffic on port 52816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52746
Source: unknown	Network traffic detected: HTTP traffic on port 52629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52629
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52742
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52621
Source: unknown	Network traffic detected: HTTP traffic on port 52663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52598
Source: unknown	Network traffic detected: HTTP traffic on port 52718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53570
Source: unknown	Network traffic detected: HTTP traffic on port 52765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53574
Source: unknown	Network traffic detected: HTTP traffic on port 52845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53577
Source: unknown	Network traffic detected: HTTP traffic on port 52638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53581
Source: unknown	Network traffic detected: HTTP traffic on port 52799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53580
Source: unknown	Network traffic detected: HTTP traffic on port 52603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53585
Source: unknown	Network traffic detected: HTTP traffic on port 52809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53584
Source: unknown	Network traffic detected: HTTP traffic on port 52639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52679
Source: unknown	Network traffic detected: HTTP traffic on port 52672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52674
Source: unknown	Network traffic detected: HTTP traffic on port 52695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52671
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52672
Source: unknown	Network traffic detected: HTTP traffic on port 52775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52678
Source: unknown	Network traffic detected: HTTP traffic on port 52605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52799
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52676
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52797
Source: unknown	Network traffic detected: HTTP traffic on port 52614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52680
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52681
Source: unknown	Network traffic detected: HTTP traffic on port 52798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52688
Source: unknown	Network traffic detected: HTTP traffic on port 52719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52687
Source: unknown	Network traffic detected: HTTP traffic on port 52808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52690
Source: unknown	Network traffic detected: HTTP traffic on port 52764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52696
Source: unknown	Network traffic detected: HTTP traffic on port 52754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52699
Source: unknown	Network traffic detected: HTTP traffic on port 52731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52697
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52698
Source: unknown	Network traffic detected: HTTP traffic on port 53577 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:52598 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52602 version: TLS 1.2

System Summary

Found potential malicious PDF (bad image similarity)

Source: Complete_with_DocuSign_49584.pdf	Static PDF information: Image stream: 11
Source: Complete_with_DocuSign_49584.pdf	Static PDF information: Image stream: 13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll.sig	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\optimization-hints.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\ssl_error_assistant.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_6972_1070420309

Jump to behavior

Source: Google.Widevine.CDM.dll.9.dr	Static PE information: Number of sections : 12 > 10
Source: widevinecdm.dll.9.dr	Static PE information: Number of sections : 13 > 10

Source: classification engine

Classification label: mal80.phis.winPDF@46/64@15/9

Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\167\167\167\056\144\157\143\165\163\151\147\156\056\143\157\155\057\146\145\141\164\165\162\145\163\055\141\156\144\055\142\145\156\145\146\151\164\163\057\155\157\142\151\154\145\077\165\164\155\137\143\141\155\160\141\151\147\156\075\107\102\114\137\130\130\137\104\102\125\137\125\120\123\137\062\062\061\061\137\123\151\147\156\116\157\164\151\146\151\143\141\164\151\157\156\105\155\141\151\154\106\157\157\164\145\162\046\165\164\155\137\155\145\144\151\165\155\075\160\162\157\144\165\143\164\046\165\164\155\137\163\157\165\162\143\145\075\160\157\163\164\163\145\156\144\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\167\167\167\056\144\162\165\147\154\151\142\162\141\162\171\056\156\145\164\057\145\170\164\145\162\156\141\154\056\150\164\155\154\077\154\151\156\153\075\150\164\164\160\163\072\057\057\151\147\162\145\145\156\056\147\162\145\145\156\057\057\167\160\153\057\157\160\164\057\172\164\154\057\161\167\145\162\164\171\057\166\145\156\153\141\164\145\163\150\100\147\145\155\163\145\144\165\143\141\164\151\157\156\056\143\157\155\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\160\162\157\164\145\143\164\056\144\157\143\165\163\151\147\156\056\156\145\164\057\162\145\160\157\162\164\055\141\142\165\163\145\077\145\075\101\125\164\157\155\152\160\106\141\153\071\107\154\142\120\114\060\172\106\106\151\061\062\060\122\171\130\061\104\141\144\142\066\153\063\065\123\172\142\147\060\115\103\166\125\137\102\120\141\123\144\120\062\106\063\110\162\154\055\063\144\142\071\055\131\130\122\071\112\144\164\110\127\166\171\123\120\142\162\153\152\146\126\111\155\142\172\062\130\115\145\121\121\147\147\123\170\147\120\120\101\172\122\101\112\116\165\117\055\114\156\114\067\157\106\067\171\060\163\153\061\161\061\143\156\117\141\114\170\062\163\164\142\062\165\152\132\103\112\123\061\125\115\145\110\063\065\110\065\172\172\101\060\066\060\114\147\130\063\154\142\102\106\061\103\120\063\172\130\167\127\112\126\161\125\146\153\062\164\066\143\121\131\124\142\164\116\172\164\154\143\156\144\151\141\144\055\071\103\130\066\070\062\150\154\122\166\163\105\122\141\113\114\137\152\103\112\165\132\102\063\143\124\122\113\157\145\131\126\161\116\107\060\145\152\102\171\130\145\106\060\061\103\121\137\145\107\114\061\106\170\165\101\142\115\107\143\102\112\122\115\070\110\110\160\105\170\153\062\145\107\103\166\066\103\071\150\113\120\067\137\127\165\166\127\142\062\167\141\120\153\156\115\111\112\063\165\143\120\060\113\150\137\102\130\116\130\154\116\167\152\127\062\104\157\063\126\163\126\155\147\112\170\155\065\064\164\103\132\123\161\122\117\110\165\152\064\071\170\151\071\163\060\130\062\155\065\110\142\110\166\067\067\126\063\160\064\063\122\055\142\120\125\142\146\151\070\113\070\157\110\167\163\147\120\143\160\163\124\150\147\155\163\115\153\165\143\144\060\101\106\060\160\162\102\063\166\164\123\061\116\062\146\155\127\156\101\046\154\141\156\147\075\145\156\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\163\165\160\160\157\162\164\056\144\157\143\165\163\151\147\156\056\143\157\155\057\163\057\141\162\164\151\143\154\145\163\057\110\157\167\055\144\157\055\111\055\163\151\147\156\055\141\055\104\157\143\165\123\151\147\156\055\144\157\143\165\155\145\156\164\055\102\141\163\151\143\055\123\151\147\156\151\156\147\077\154\141\156\147\165\141\147\145\075\145\156\137\125\123\046\165\164\155\137\143\141\155\160\141\151\147\156\075\107\102\114\137\130\130\137\104\102\125\137\125\120\123\137\062\062\061\061\137\123\151\147\156\116\157\164\151\146\151\143\141\164\151\157\156\105\155\141\151\154\106\157\157\164\145\162\046\165\164\155\137\155\145\144\151\165\155\075\160\162\157\144\165\143\164\046\165\164\155\137\163\157\165\162\143\145\075\160\157\163\164\163\145\156\144\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\163\165\160\160\157\162\164\056\144\157\143\165\163\151\147\156\056\143\157\155\057\145\156\057\147\165\151\144\145\163\057\104\145\143\154\151\156\151\156\147\055\164\157\055\163\151\147\156\055\104\157\143\165\123\151\147\156\055\123\151\147\156\145\162\055\107\165\151\144\145\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\167\167\167\056\144\157\143\165\163\151\147\156\056\143\157\155\057\163\165\160\160\157\162\164\040\000
Source: Complete_with_DocuSign_49584.pdf	Initial sample: \040\150\164\164\160\163\072\057\057\163\165\160\160\157\162\164\056\144\157\143\165\163\151\147\156\056\143\157\155\057\145\156\057\141\162\164\151\143\154\145\163\057\110\157\167\055\144\157\055\111\055\155\141\156\141\147\145\055\155\171\055\145\155\141\151\154\055\156\157\164\151\146\151\143\141\164\151\157\156\163\040\000

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-11 01-02-17-229.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Complete_with_DocuSign_49584.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1732,i,3706654091440507380,12489716021560546543,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.druglibrary.net/external.html?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2080,i,12731502939009632189,14396455718482454569,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1732,i,3706654091440507380,12489716021560546543,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2080,i,12731502939009632189,14396455718482454569,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.9.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.9.dr

Source: Complete_with_DocuSign_49584.pdf	Initial sample: PDF keyword /JS count = 0
Source: Complete_with_DocuSign_49584.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Complete_with_DocuSign_49584.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Complete_with_DocuSign_49584.pdf

Initial sample: PDF keyword obj count = 66

Source: Google.Widevine.CDM.dll.9.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.9.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.9.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.9.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.9.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.9.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.9.dr	Static PE information: section name: .gxfg
Source: widevinecdm.dll.9.dr	Static PE information: section name: .retplne
Source: widevinecdm.dll.9.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.9.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.9.dr	Static PE information: section name: malloc_h

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: PDF document	LLM: Page contains button: 'VIEW COMPLETED DOCUMENT' Source: 'PDF document'
Source: PDF document	LLM: PDF document contains prominent button: 'view completed document'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\LICENSE.txt

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	21 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Web Protocols	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
druglibrary.net	0%	Virustotal		Browse
igreen.green	8%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://k7l8y.ltasetalty.com/cdn-cgi/styles/cf.errors.css	0%	Avira URL Cloud	safe
https://drimer.travel	0%	Avira URL Cloud	safe
https://k7l8y.ltasetalty.com/cdn-cgi/images/icon-exclamation.png?1376755637	0%	Avira URL Cloud	safe
https://k7l8y.ltasetalty.com/favicon.ico	0%	Avira URL Cloud	safe
https://drimer.io	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
druglibrary.net	67.223.102.74	true	true	0%, Virustotal, Browse	unknown
k7l8y.ltasetalty.com	188.114.97.3	true	false		unknown
igreen.green	108.179.211.77	true	true	8%, Virustotal, Browse	unknown
www.google.com	172.217.16.196	true	false		high
www.druglibrary.net	67.223.102.74	true	false		unknown
x1.i.lencr.org	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://k7l8y.ltasetalty.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://k7l8y.ltasetalty.com/cdn-cgi/styles/cf.errors.css	false	Avira URL Cloud: safe	unknown
https://k7l8y.ltasetalty.com/cdn-cgi/images/icon-exclamation.png?1376755637	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	chromecache_212.10.dr	false		high
https://wieistmeineip.de	sets.json.9.dr	false		high
https://mercadoshops.com.co	sets.json.9.dr	false		high
https://gliadomain.com	sets.json.9.dr	false		high
https://poalim.xyz	sets.json.9.dr	false		high
https://comprasegura.olx.com.br/pedidos/.	optimization-hints.pb.9.dr	false		high
https://mercadolivre.com	sets.json.9.dr	false		high
https://easylist.to/)	LICENSE.txt.9.dr	false		high
https://reshim.org	sets.json.9.dr	false		high
https://nourishingpursuits.com	sets.json.9.dr	false		high
https://medonet.pl	sets.json.9.dr	false		high
https://unotv.com	sets.json.9.dr	false		high
https://mercadoshops.com.br	sets.json.9.dr	false		high
https://joyreactor.cc	sets.json.9.dr	false		high
https://zdrowietvn.pl	sets.json.9.dr	false		high
https://johndeere.com	sets.json.9.dr	false		high
https://songstats.com	sets.json.9.dr	false		high
https://baomoi.com	sets.json.9.dr	false		high
https://supereva.it	sets.json.9.dr	false		high
https://elfinancierocr.com	sets.json.9.dr	false		high
https://www.motorola.com.br/checkout/#/payment	optimization-hints.pb.9.dr	false		high
https://bolasport.com	sets.json.9.dr	false		high
https://rws1nvtvt.com	sets.json.9.dr	false		high
https://www.cobasi.com.br/checkout/review.	optimization-hints.pb.9.dr	false		high
https://desimartini.com	sets.json.9.dr	false		high
https://hearty.app	sets.json.9.dr	false		high
https://emv-qr.googleplex.com/.	optimization-hints.pb.9.dr	false		high
https://hearty.gift	sets.json.9.dr	false		high
https://mercadoshops.com	sets.json.9.dr	false		high
https://heartymail.com	sets.json.9.dr	false		high
https://nlc.hu	sets.json.9.dr	false		high
https://www.paodeacucar.com/checkout.	optimization-hints.pb.9.dr	false		high
https://p106.net	sets.json.9.dr	false		high
https://radio2.be	sets.json.9.dr	false		high
https://finn.no	sets.json.9.dr	false		high
https://hc1.com	sets.json.9.dr	false		high
https://kompas.tv	sets.json.9.dr	false		high
https://mystudentdashboard.com	sets.json.9.dr	false		high
https://songshare.com	sets.json.9.dr	false		high
https://smaker.pl	sets.json.9.dr	false		high
https://mercadopago.com.mx	sets.json.9.dr	false		high
https://www.zzmall.com.br/checkout/order-confirmation/.	optimization-hints.pb.9.dr	false		high
https://p24.hu	sets.json.9.dr	false		high
https://talkdeskqaid.com	sets.json.9.dr	false		high
https://24.hu	sets.json.9.dr	false		high
https://mercadopago.com.pe	sets.json.9.dr	false		high
https://cardsayings.net	sets.json.9.dr	false		high
https://text.com	sets.json.9.dr	false		high
https://mightytext.net	sets.json.9.dr	false		high
https://pudelek.pl	sets.json.9.dr	false		high
https://hazipatika.com	sets.json.9.dr	false		high
https://joyreactor.com	sets.json.9.dr	false		high
https://cookreactor.com	sets.json.9.dr	false		high
https://wildixin.com	sets.json.9.dr	false		high
https://eworkbookcloud.com	sets.json.9.dr	false		high
https://cognitiveai.ru	sets.json.9.dr	false		high
https://nacion.com	sets.json.9.dr	false		high
https://checkout-new.dafiti.com.br/success/index.html.	optimization-hints.pb.9.dr	false		high
https://chennien.com	sets.json.9.dr	false		high
https://drimer.travel	sets.json.9.dr	false	Avira URL Cloud: safe	unknown
https://deccoria.pl	sets.json.9.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_212.10.dr	false		high
https://mercadopago.cl	sets.json.9.dr	false		high
https://talkdeskstgid.com	sets.json.9.dr	false		high
https://naukri.com	sets.json.9.dr	false		high
https://interia.pl	sets.json.9.dr	false		high
https://bonvivir.com	sets.json.9.dr	false		high
https://carcostadvisor.be	sets.json.9.dr	false		high
https://salemovetravel.com	sets.json.9.dr	false		high
https://sapo.io	sets.json.9.dr	false		high
https://wpext.pl	sets.json.9.dr	false		high
https://www.natura.com.br/pedido-concluido/.	optimization-hints.pb.9.dr	false		high
https://welt.de	sets.json.9.dr	false		high
https://poalim.site	sets.json.9.dr	false		high
https://drimer.io	sets.json.9.dr	false	Avira URL Cloud: safe	unknown
https://infoedgeindia.com	sets.json.9.dr	false		high
https://blackrockadvisorelite.it	sets.json.9.dr	false		high
https://cognitive-ai.ru	sets.json.9.dr	false		high
https://comprasegura.olx.com.br/	optimization-hints.pb.9.dr	false		high
https://cafemedia.com	sets.json.9.dr	false		high
https://graziadaily.co.uk	sets.json.9.dr	false		high
https://thirdspace.org.au	sets.json.9.dr	false		high
https://mercadoshops.com.ar	sets.json.9.dr	false		high
https://smpn106jkt.sch.id	sets.json.9.dr	false		high
https://elpais.uy	sets.json.9.dr	false		high
https://landyrev.com	sets.json.9.dr	false		high
https://www.hurb.com/br/pay/checkout/.	optimization-hints.pb.9.dr	false		high
https://the42.ie	sets.json.9.dr	false		high
https://commentcamarche.com	sets.json.9.dr	false		high
https://tucarro.com.ve	sets.json.9.dr	false		high
https://rws3nvtvt.com	sets.json.9.dr	false		high
https://eleconomista.net	sets.json.9.dr	false		high
https://helpdesk.com	sets.json.9.dr	false		high
https://mercadolivre.com.br	sets.json.9.dr	false		high
https://clmbtech.com	sets.json.9.dr	false		high
https://standardsandpraiserepurpose.com	sets.json.9.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
67.223.102.74	druglibrary.net	Canada	30176	AS-PRIORITYCOLOCA	true
23.47.168.24	unknown	United States	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	k7l8y.ltasetalty.com	European Union	13335	CLOUDFLARENETUS	false
108.179.211.77	igreen.green	United States	46606	UNIFIEDLAYER-AS-1US	true
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1553426
Start date and time:	2024-11-11 07:01:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Complete_with_DocuSign_49584.pdf
Detection:	MAL
Classification:	mal80.phis.winPDF@46/64@15/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 107.22.247.231, 34.193.227.236, 18.207.85.246, 54.144.73.197, 2.19.126.149, 2.19.126.143, 172.64.41.3, 162.159.61.3, 199.232.210.172, 2.23.197.184, 192.229.221.95, 2.20.245.141, 2.20.245.133, 142.250.185.195, 142.250.186.46, 74.125.133.84, 34.104.35.123, 172.217.18.106, 142.250.186.106, 142.250.181.234, 172.217.23.106, 142.250.186.138, 142.250.185.234, 142.250.185.74, 142.250.186.74, 172.217.18.10, 142.250.184.202, 142.250.185.202, 142.250.185.138, 142.250.185.170, 172.217.16.202, 142.250.186.170, 142.250.186.42, 216.58.206.35, 172.217.16.206, 142.250.184.195
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, d.8.0.a.e.e.f.b.0.0.0.0.0.0.0.0.5.0.0.0.0.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:02:27	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: PDF document Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Your document has been completed: Venkatesh Review And Sign.", "prominent_button_name": "VIEW COMPLETED DOCUMENT", "text_input_field_labels": [ "security code" ], "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: URL: https://igreen.green
URL: https://k7l8y.ltasetalty.com/akuFd/#kvenkatesh@gemseducation.com Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Suspected Phishing", "prominent_button_name": "Learn More", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: PDF document Model: claude-3-haiku-20240307	```json { "brands": [ "DocuSign" ] }
	```json { "brands": [ "DocuSign" ] }
URL: https://k7l8y.ltasetalty.com/akuFd/#kvenkatesh@gemseducation.com Model: claude-3-haiku-20240307	```json { "brands": [ "Cloudflare" ] }
	```json { "brands": [ "Cloudflare" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
23.47.168.24	ZGMW2wgPzY.lnk	Get hash	malicious	Ducktail	Browse
	XUpERCR9nC.lnk	Get hash	malicious	Ducktail	Browse
	Heritage Commercial Flooring.pdf	Get hash	malicious	Unknown	Browse
	copyright_infringement_evidence_1.exe	Get hash	malicious	Unknown	Browse
	cleu.cmD	Get hash	malicious	Unknown	Browse
	https://content.app-us1.com/5zbe53/2024/09/30/8d9df716-ca99-47ed-825e-d3a2a0e6cd9e.pdf	Get hash	malicious	HTMLPhisher	Browse
	PDF...pdf	Get hash	malicious	Unknown	Browse
	TM3utH2CsU.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse
	8f40pUzDo8.exe	Get hash	malicious	Metasploit	Browse
	johnny.guanCopy.pdf	Get hash	malicious	Unknown	Browse
239.255.255.250	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	https://parkonking.us15.list-manage.com/track/click?u=ad047aa5468a45d38c75e108c&id=88101fd354&e=1659a0a55d	Get hash	malicious	Unknown	Browse
	https://daddyztech.com/mah/pub/korea/korea/index.php?email=kdjung3@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse
	https://anzsupportus.web.app/#	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=rqjkphmdlmFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ftao.bb/RTupG#dGFla3l1LmtpbUBoeXVuZGFpZWxldmF0b3IuY29t	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	Cryptbot	Browse
	https://ethnikos-fc.blogspot.co.uk/2013/08/blog-post_11.html	Get hash	malicious	Unknown	Browse
	https://hobitronik.com/	Get hash	malicious	Unknown	Browse
	https://facebook-metasupbosanhuc.uncody.site/	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
188.114.97.3	fHkdf4WB7zhMcqP.exe	Get hash	malicious	FormBook	Browse	www.figa1digital.services/zjtq/
	ConfirmaciXnXdeXfacturaXPedidoXadicional.doc	Get hash	malicious	Unknown	Browse	paste.ee/d/qImtr
	QUOTATION_NOVQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	filetransfer.io/data-package/oV9U9W0U/download
	QUOTATION_NOVQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/21zJLAjt/download
	SDBARVe3d3.exe	Get hash	malicious	FormBook	Browse	www.dodsrprolev.shop/42jb/
	Hesap.exe	Get hash	malicious	FormBook	Browse	www.rtprajalojago.live/74ri/
	file.exe	Get hash	malicious	LummaC, Amadey, HTMLPhisher, LummaC Stealer, Stealc, Vidar	Browse	sosipisos.cc/SXQNMYTM.exe
	7RAK4mZ6nc.exe	Get hash	malicious	Metasploit	Browse	downsexv.com:8080/pptFudI4N_bZd9h2vlE2HgX6nJupnvnNvPpodtqLmxX2OC5MJtjR8Cw2hx7Jj0FM_ofkLnmJ
	Shipping documents..exe	Get hash	malicious	FormBook	Browse	www.bzxs.info/v58i/
	icRicpJWczmiOf8.exe	Get hash	malicious	FormBook	Browse	www.figa1digital.services/zjtq/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bg.microsoft.map.fastly.net	https://parkonking.us15.list-manage.com/track/click?u=ad047aa5468a45d38c75e108c&id=88101fd354&e=1659a0a55d	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://www.google.com/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=rqjkphmdlmFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ftao.bb/RTupG#dGFla3l1LmtpbUBoeXVuZGFpZWxldmF0b3IuY29t	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	https://ethnikos-fc.blogspot.co.uk/2013/08/blog-post_11.html	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://hobitronik.com/	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://perpetualsnob.com	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://cdn.discordapp.com/attachments/1284277835762110544/1305291734967779460/emu.exe?ex=67327f28&is=67312da8&hm=ea20e1c2a609dc1a0569bd4abb7e0da0a5e0671f3f7a388c1ed138f806c8e0c4&	Get hash	malicious	Unknown	Browse	199.232.210.172
	file.exe	Get hash	malicious	LummaC	Browse	199.232.214.172
	Dr6E650x6y.dll	Get hash	malicious	Unknown	Browse	199.232.214.172
	A322mb7u3h.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	send.exe	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	fHkdf4WB7zhMcqP.exe	Get hash	malicious	FormBook	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	https://parkonking.us15.list-manage.com/track/click?u=ad047aa5468a45d38c75e108c&id=88101fd354&e=1659a0a55d	Get hash	malicious	Unknown	Browse	172.66.41.8
	https://anzsupportus.web.app/#	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://www.google.com/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=rqjkphmdlmFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ftao.bb/RTupG#dGFla3l1LmtpbUBoeXVuZGFpZWxldmF0b3IuY29t	Get hash	malicious	HTMLPhisher	Browse	104.18.24.163
	install.ps1	Get hash	malicious	Unknown	Browse	104.18.21.76
	e-dekont (72).pdf(#U007e56 KB).exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	https://ethnikos-fc.blogspot.co.uk/2013/08/blog-post_11.html	Get hash	malicious	Unknown	Browse	104.18.10.207
UNIFIEDLAYER-AS-1US	https://daddyztech.com/mah/pub/korea/korea/index.php?email=kdjung3@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse	162.241.224.200
	yakuza.i686.elf	Get hash	malicious	Unknown	Browse	162.145.107.113
	https://glanwell.com/TJCe1B-ewnB0-yGJ1J-6CtU5-ILAx4-iXe2y-W2bJk.php	Get hash	malicious	Unknown	Browse	50.87.142.124
	New PO [FK4-7173].pdf.exe	Get hash	malicious	FormBook	Browse	162.241.63.77
	https://www.google.com/url?sa=https://r20.rs6.net/tn.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/dynamicitdevices.com%2Fjoikdjmeue%2FcNSPM5Bl13Sxjki/aGVscGRlc2tAY25jLmJjLmNh	Get hash	malicious	HTMLPhisher	Browse	192.185.115.105
	https://m.exactag.com/cl.aspx?extProvApi=sixt-crm_newsletter&extProvId=313&extPu=nl_rac_de&extLi=DE_COR_RENT_CRM_B2C_24_CW33_From%20Intermediate%20Push_ONT_NLW_de_DE_Streichpreis_138402&extCr=Footer_rent&extSi=nl_rac_de_2408_DE&url=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=amp%2F%76%69%64%79%61%73%61%67%61%72%2D%70%74%74%69%2E%69%6E%2F%77%61%2F%66%61%2Fsgmflefb4v8va/%2F/bWF0dGhldy5kYXZpc0BtYnUuZWR1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	108.167.141.116
	http://gjchristelsodikobehjsg.taplink.ws	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.185.222.170
	https://gjchristelsodikobehjsg.taplink.ws/	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	192.185.222.170
	TtyCIqbov8.exe	Get hash	malicious	AgentTesla	Browse	192.185.13.234
	EFT Remittance_CQDM.html	Get hash	malicious	Mamba2FA	Browse	162.241.224.248
AS-PRIORITYCOLOCA	H2A6LpLYtc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	192.81.57.98
	purchase list.exe	Get hash	malicious	FormBook	Browse	67.223.102.78
	wget.elf	Get hash	malicious	Unknown	Browse	45.61.49.224
	4YiWmkGDrh.elf	Get hash	malicious	Mirai, Moobot	Browse	205.189.222.39
	zRTzgoLgOh.elf	Get hash	malicious	Unknown	Browse	205.189.222.31
	Wt3k5CcOnp.exe	Get hash	malicious	BitCoin Miner	Browse	204.11.50.131
	ejHZ3HUs6E.exe	Get hash	malicious	AsyncRAT BitCoin Miner	Browse	204.11.50.131
AKAMAI-ASUS	bin.sh.elf	Get hash	malicious	Mirai	Browse	23.42.226.0
	https://parkonking.us15.list-manage.com/track/click?u=ad047aa5468a45d38c75e108c&id=88101fd354&e=1659a0a55d	Get hash	malicious	Unknown	Browse	23.216.205.249
	maryanne@propertynz.co.nz_Agreement70554.xlsx	Get hash	malicious	Unknown	Browse	184.28.90.27
	sora.arm.elf	Get hash	malicious	Mirai	Browse	23.33.113.240
	yakuza.mips.elf	Get hash	malicious	Unknown	Browse	172.228.229.154
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	184.85.6.156
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	2.23.147.4
	yakuza.x86.elf	Get hash	malicious	Unknown	Browse	96.24.179.57
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.47.50.137
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.192.223.200

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://parkonking.us15.list-manage.com/track/click?u=ad047aa5468a45d38c75e108c&id=88101fd354&e=1659a0a55d	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://daddyztech.com/mah/pub/korea/korea/index.php?email=kdjung3@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://anzsupportus.web.app/#	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://www.google.com/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=rqjkphmdlmFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ftao.bb/RTupG#dGFla3l1LmtpbUBoeXVuZGFpZWxldmF0b3IuY29t	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Cryptbot	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://ethnikos-fc.blogspot.co.uk/2013/08/blog-post_11.html	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://hobitronik.com/	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll	https://averellharriman.sharefile.com/public/share/web-sab7e0a816d3e4e0ca3a0899254901a6d	Get hash	malicious	Unknown	Browse
	DRL-272112.htm	Get hash	malicious	Unknown	Browse
	View alert details #20GBQ4J.html	Get hash	malicious	HTMLPhisher	Browse
	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/bfQgn5	Get hash	malicious	Unknown	Browse
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse
	http://www.revsharboomerang.com	Get hash	malicious	Unknown	Browse
	AMA - 375,545.04.htm	Get hash	malicious	Unknown	Browse
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll	#U25b6#Ufe0fVoice_mail_02309_wav0015.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://bistrodereformas.com.br/wp-content/plugins/z-downloads/index.php?token=2Oi6iEOKcKnCLIPdSJjn	Get hash	malicious	Unknown	Browse
	j0mvnOAe.htm	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	Secured Audlo_summitbhc.com_3609336482.html	Get hash	malicious	Unknown	Browse
	https://bitbucket.org/thanksforusingourwebsite/serv/downloads/Statement-415322025.exe	Get hash	malicious	ScreenConnect Tool	Browse
	https://onedrive.live.com/view.aspx?resid=8656653D19C3C7C0!s599af221dbfd41b9a607812ebc66d2cf&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy84NjU2NjUzZDE5YzNjN2MwL0VpSHltbG45MjdsQnBnZUJMcnhtMHM4QjRNbHFPTTJWd0ZlQTFNLWNhZ0lnRkE_ZT1aak8wczY&wd=target%28Sezione%20senza%20titolo.one%7C99ad2a4b-5ecc-495f-9ce8-040ac62eb8f2%2F%5BExternal%5D%20-%20Invoice%20%27s%208808-%7C9e6e973e-3cda-429a-a28f-c51dc242e5b1%2F%29&wdorigin=NavigationUrl	Get hash	malicious	Unknown	Browse
	_Play__New__VM__01min 04sec____ATT2006587654 (Randiwestbrook) .htm	Get hash	malicious	HTMLPhisher	Browse
	attachment(1).eml	Get hash	malicious	Unknown	Browse
	sample.pdf	Get hash	malicious	HtmlDropper	Browse

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.15369472260813
Encrypted:	false
SSDEEP:	6:HUzU9wZL+q2Pwkn2nKuAl9OmbnIFUt8YUzU9w6+1Zmw+YUzU9w6oLVkwOwkn2nKZ:+USL+vYfHAahFUt8ZUo/+ZUoLV5JfHAR
MD5:	7396854C38C1ED347F22E127E52C63F3
SHA1:	482A748494A9462638D1B95CB3AE316C119653F5
SHA-256:	5BA23BE1E17D8523E28FDC55415F344CB6F3399103A5E7F90F5E2E56E8A45B7C
SHA-512:	6B96BB4EDD772A4E5BF96AF379B14FF0B59562DD7D1A467751E6F72A54E60DE836D8AC287777A0A639F08D0A400B98A84C9474FD2751A61C67755099F1206BBF
Malicious:	false
Reputation:	low
Preview:	2024/11/11-01:02:14.981 1c7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/11-01:02:14.983 1c7c Recovering log #3.2024/11/11-01:02:14.983 1c7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.15369472260813
Encrypted:	false
SSDEEP:	6:HUzU9wZL+q2Pwkn2nKuAl9OmbnIFUt8YUzU9w6+1Zmw+YUzU9w6oLVkwOwkn2nKZ:+USL+vYfHAahFUt8ZUo/+ZUoLV5JfHAR
MD5:	7396854C38C1ED347F22E127E52C63F3
SHA1:	482A748494A9462638D1B95CB3AE316C119653F5
SHA-256:	5BA23BE1E17D8523E28FDC55415F344CB6F3399103A5E7F90F5E2E56E8A45B7C
SHA-512:	6B96BB4EDD772A4E5BF96AF379B14FF0B59562DD7D1A467751E6F72A54E60DE836D8AC287777A0A639F08D0A400B98A84C9474FD2751A61C67755099F1206BBF
Malicious:	false
Reputation:	low
Preview:	2024/11/11-01:02:14.981 1c7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/11-01:02:14.983 1c7c Recovering log #3.2024/11/11-01:02:14.983 1c7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.057362904359217
Encrypted:	false
SSDEEP:	6:HUzU9nFWQL+q2Pwkn2nKuAl9Ombzo2jMGIFUt8YUzU9HGuGKWZmw+YUzU9hFUWSF:+Ubb+vYfHAa8uFUt8ZUmKW/+ZU/uSV56
MD5:	3B6E4FA9CB63B76B375A2CA9216F1B2B
SHA1:	5189A1E2F4232F007F27723CFAB36DEEDA69C330
SHA-256:	847C121FF69E6E4888BFDDC31F9951F6B6E593F92F4482A18A573499021410F8
SHA-512:	08FDB6288A1B01A62358FC8A0163294CF60E6014F51041EDA7E8B476AB2E4FE93E1E1564D550F27AC8ACCEB0A3563098DC5679DC83426D75AAAE0D0BF815E4D1
Malicious:	false
Reputation:	low
Preview:	2024/11/11-01:02:15.022 1cec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/11-01:02:15.023 1cec Recovering log #3.2024/11/11-01:02:15.024 1cec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.057362904359217
Encrypted:	false
SSDEEP:	6:HUzU9nFWQL+q2Pwkn2nKuAl9Ombzo2jMGIFUt8YUzU9HGuGKWZmw+YUzU9hFUWSF:+Ubb+vYfHAa8uFUt8ZUmKW/+ZU/uSV56
MD5:	3B6E4FA9CB63B76B375A2CA9216F1B2B
SHA1:	5189A1E2F4232F007F27723CFAB36DEEDA69C330
SHA-256:	847C121FF69E6E4888BFDDC31F9951F6B6E593F92F4482A18A573499021410F8
SHA-512:	08FDB6288A1B01A62358FC8A0163294CF60E6014F51041EDA7E8B476AB2E4FE93E1E1564D550F27AC8ACCEB0A3563098DC5679DC83426D75AAAE0D0BF815E4D1
Malicious:	false
Reputation:	low
Preview:	2024/11/11-01:02:15.022 1cec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/11-01:02:15.023 1cec Recovering log #3.2024/11/11-01:02:15.024 1cec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8122d697-29f1-4b44-a9d6-5e15bb2b5b85.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.9740254305760585
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqiHksBdOg2HVfcaq3QYiubInP7E4T3y:Y2sRdsJJdMHQ3QYhbG7nby
MD5:	57F1606AD2039EF3062190AD3C621FC9
SHA1:	F6D3E63A9C08CE46FEBB68F20C020BC6AAC04B30
SHA-256:	27C8993CFE93D2EFBE5F861B8C1E6784D3F5A9DA9CD98C8F9F1CA8994A20ECA8
SHA-512:	4D5FA17D7DDCC9BD1828DA175362DB5BAF117FD0867A8C34E5C6284D04AFA4610EDAAD2DC3DF894AEBD086BB9037C56F2959820C8583E2170BC3A63821005DAC
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13375864947513601","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":105265},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.9740254305760585
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqiHksBdOg2HVfcaq3QYiubInP7E4T3y:Y2sRdsJJdMHQ3QYhbG7nby
MD5:	57F1606AD2039EF3062190AD3C621FC9
SHA1:	F6D3E63A9C08CE46FEBB68F20C020BC6AAC04B30
SHA-256:	27C8993CFE93D2EFBE5F861B8C1E6784D3F5A9DA9CD98C8F9F1CA8994A20ECA8
SHA-512:	4D5FA17D7DDCC9BD1828DA175362DB5BAF117FD0867A8C34E5C6284D04AFA4610EDAAD2DC3DF894AEBD086BB9037C56F2959820C8583E2170BC3A63821005DAC
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13375864947513601","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":105265},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.251045098384661
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo78sKamZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goU
MD5:	D1C3D999DF41A30C4947E2738F6C8D79
SHA1:	2AB11B8EF32AAB64F9D7F21BC5250C2232C0D0A4
SHA-256:	F93C6E798929D047B9C3EE8DB9C17907918C99EDAB94D665A204AB03A70B1853
SHA-512:	09617330EA524D99FAFF37F00E701B874C41F5622D92AD3470CB572EC98C427AF1A3A0BEEB2DB7D98014AC68426F6C646A5D85CFCEA972F91F7FAB969FCA442D
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.085615796353462
Encrypted:	false
SSDEEP:	6:HUzU98oGSQL+q2Pwkn2nKuAl9OmbzNMxIFUt8YUzU9DFWGKWZmw+YUzU9HFUWSQB:+USoi+vYfHAa8jFUt8ZUdFBKW/+ZUZFx
MD5:	A4F1B4FA1436BE793DA0FFEAF0B0A68D
SHA1:	149FAAA3CEFB021A1DF3C2575E8B40C216E66A46
SHA-256:	A46711EDD609FA93667EC678FEDBA66759BDCF1C1ED48B466E52E1FDDB8BB273
SHA-512:	4BFE5B1940CE3EEF86F2392455469C5219796FD473101CFAB705DB711966439D6FFC7BA8F3F37C1C0084F2DB9CFC9833D07E18A576C3683206416E882F849AF8
Malicious:	false
Preview:	2024/11/11-01:02:15.612 1cec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/11-01:02:15.620 1cec Recovering log #3.2024/11/11-01:02:15.624 1cec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.085615796353462
Encrypted:	false
SSDEEP:	6:HUzU98oGSQL+q2Pwkn2nKuAl9OmbzNMxIFUt8YUzU9DFWGKWZmw+YUzU9HFUWSQB:+USoi+vYfHAa8jFUt8ZUdFBKW/+ZUZFx
MD5:	A4F1B4FA1436BE793DA0FFEAF0B0A68D
SHA1:	149FAAA3CEFB021A1DF3C2575E8B40C216E66A46
SHA-256:	A46711EDD609FA93667EC678FEDBA66759BDCF1C1ED48B466E52E1FDDB8BB273
SHA-512:	4BFE5B1940CE3EEF86F2392455469C5219796FD473101CFAB705DB711966439D6FFC7BA8F3F37C1C0084F2DB9CFC9833D07E18A576C3683206416E882F849AF8
Malicious:	false
Preview:	2024/11/11-01:02:15.612 1cec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/11-01:02:15.620 1cec Recovering log #3.2024/11/11-01:02:15.624 1cec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241111060219Z-160.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	2.8605926591425
Encrypted:	false
SSDEEP:	192:2zjUjUjUjUjUjUjUjlj/jTjijaujV8jLNjGyFjzfjJ2j4Cjc+j0jUjUjUjUjUjO/:LsBwNxiPqsaEh7wUGEo/8UnqlI16ffo
MD5:	19B3204BE060C52BE9EDC213A5A67464
SHA1:	126E859E3E96A7A256C561792B29EF1600658961
SHA-256:	2649986CA1D46FB03CA447EA1DD1102530BC86C49F520CD7352DC0CF5322D9B6
SHA-512:	9656A04DB2846EE76E31C16CBBBA9856BB2F3368CB2A56E1D65FB5A450FF55AC21B4729FEB80D48970ABCCA72AECC8E1FEB4912063CA62704A008FCBF998FE21
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444739622911933
Encrypted:	false
SSDEEP:	384:yezci5tsiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rLs3OazzU89UTTgUL
MD5:	B0BD50DAF742D33A8086373B3390429D
SHA1:	99B49A98EE97CD3E7B509945AEEDCE386619CD23
SHA-256:	6A5E5F2E86CAFA94DD229CB516E7BE4B18F7F9E0C480F0FA3B4794A9FB99B0FF
SHA-512:	2B09A8C0043D26F857EE9AF0D6601B9538BBD542D5E2D0D55687A11717631D4623B6B208835BA18F342F8E2B8C40F7F5CCEEE247C6D94591B453835A05BF80B9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7743299781602864
Encrypted:	false
SSDEEP:	48:7Mhp/E2ioyVKVioy9oWoy1Cwoy1zeKOioy1noy1AYoy1Wioy1hioybioyF6oy1nz:76pjumFhXKQBob9IVXEBodRBkA
MD5:	6DA3267AA37C10C11766A8511C847E6F
SHA1:	538AA4CAC1B350E4A88C26816BB109B6A02515FC
SHA-256:	30392010D5905C047E62B364E6F27928BA259CD85259845A97E8ABB36F4243F9
SHA-512:	A99A9A079A8716E25206A778C3BD2993F4089068DCCF1F5E5EE961C24B069ACCF8AC6FA930D14F70908D203B37177C1315D39E041B94DC8CDE291D22E57AFA14
Malicious:	false
Preview:	.... .c......d*...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.736068239839641
Encrypted:	false
SSDEEP:	3:kkFklb1ws8kNttfllXlE/HT8kyIhlXNNX8RolJuRdxLlGB9lQRYwpDdt:kKXNEteT8uldNMa8RdWBwRd
MD5:	D9052B81EE26BCBFA7E498C517E733E2
SHA1:	557E935EA29BA4818725CECB488720BAD993BF6C
SHA-256:	96BA1487E1A43D2848D00159C750FCC412E0464F5B4152300D3D7AC09AAAEEDA
SHA-512:	AC944A21B830A81743E3485BD006BDB4D120540E0E7FCBA4154620A5924D46C4A30EB757B50470E0EC8EE3D7E51383326A6C5AA1EF51DC4EC8978088ADF12B20
Malicious:	false
Preview:	p...... ........(.UI.3..(....................................................... ..........W....Wm..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2394988199912085
Encrypted:	false
SSDEEP:	6:kK9L9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:1iDImsLNkPlE99SNxAhUe/3
MD5:	3CE617EA5032BF9DA0F14475418499B4
SHA1:	C4C01E1E881CCC59B552EA02DA8835DEB0B48CF0
SHA-256:	1DF14A338B5F953E3E89E984A072FB198DCE5D8F2FA88CE89A1735BDB1C57C89
SHA-512:	D75802C849434E3E582A24F29259221AA06AE64291D23FA11AAF09046A072F4C8F92C25D2F9D2286FB98ED5B8DC61AD33EF6EE4BB70FBB82A747976E408B844A
Malicious:	false
Preview:	p...... ..........zm.3..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.06650730334766
Encrypted:	false
SSDEEP:	48:Yf2sL0/EY0bMSlMtCM5mMOpiMAW0MretMSMmkaMY:rv/SYtt55V6AWLre6JmkhY
MD5:	F456364CD47060D55F681D474FD0D42F
SHA1:	585117081D916F7AA32AE4D3A83EC4EF1999C9D4
SHA-256:	043FCB6E9B6886966B797D02EA24EABBC5A0D308EC2EE08D649C79B83A81FE67
SHA-512:	456525429B5C01CCBA332E78A5676A468C47E5BAE109EFAA4F3D63FFDA7C28AC15F26C7738B8C0EE2EE93F8EB103595484A8584E6DB30FE571EEFDBF060115AE
Malicious:	false
Preview:	{"all":[{"id":"TESTING","info":{"dg":"DG","sid":"TESTING"},"mimeType":"file","size":4,"ts":1731304938000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"23c88c8acf166d9fda5ae4d83df3db72","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696420889000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"d5fa85f4cf271b5fa75367efd1b392fa","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1696420884000},{"id":"DC_FirstMile_Right_Sec_Surface","info":{"dg":"7c2ad79e375e3ea39f82a389e8a5841f","sid":"DC_FirstMile_Right_Sec_Surface"},"mimeType":"file","size":294,"ts":1696420882000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"c3af48ba3dee086edbbf20dff46c7ee0","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1255,"ts":1696333862000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"7101e009d8bf8920d0a3dd3f5dc75ebc","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696333862000},{"id":"DC_Reader_Edit_LHP_Banner"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1874858191520805
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUUSvR9H9vxFGiDIAEkGVvp2:lNVmswUUUUUUUUU+FGSIt6
MD5:	D40B725C159C7AFED7DB7077F349FBC8
SHA1:	4D3AADE86D0EDC258EB956F075986E4560D04F72
SHA-256:	B6166DFB87E5B6BDC716FB225E8B68FE746A4283A2B8AF64E685467DB27FAB05
SHA-512:	FC2DCAF37E1DFF17ABB7DA03C3626970A6DA304E80C8E75EE2E44F50453F4BF90953165A671FD6C1AB8ECB18CD3295FEC4F6983B577EB8CAFFCA738E48BDC853
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.606192665395119
Encrypted:	false
SSDEEP:	48:7M1KUUUUUUUUUU2vR9H9vxFGiDIAEkGVv1qFl2GL7mst:7zUUUUUUUUUU6FGSItXKVmst
MD5:	3EAE9A966F9D03EF5A008B8B1045B6CC
SHA1:	97C19B066C75E9402298C92AAF9748BCD0804471
SHA-256:	2EA825981B5B5072DAB259482869D340704C2FD32E11730D42CFAC966FEB6761
SHA-512:	8BA929AB22027411754DE3A8BA845B16F14344ACE044E547F4FDE585E8D43B20341B8A9A1343C5C72751E96A34C30B4F8F7906652A46EC178BB296C1A6654B37
Malicious:	false
Preview:	.... .c......7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgnhe/53OfBHfoRfIqLkFgbnC0sYyu:6a6TZ44ADEnhO53OIfCFgbC/K
MD5:	68351D72704106750478316E0089056D
SHA1:	A15197D0290879C9F4203ED0A589248A3EF21788
SHA-256:	581595A6B4D35BFFACCC40DD864C25A80D1236D4FBD1AC038D58B420A53284DD
SHA-512:	8BCF15B4133FC4CE865ED72D1C17F7DD3B9E71D9B895A7DDDA350B308691E43DC7FAF9F29CF9F8052B884D7A5BC447A0243AD4458FC02A331A8BCEDEA4C5D611
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI90a5d.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.469310613041146
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8ilvFH:Qw946cPbiOxDlbYnuRKrH
MD5:	DEF3987CC02F54C5F4591409985BF51F
SHA1:	10D6F8116043BAE77D6AD3D68AF4271BBA30E5CA
SHA-256:	3ED764ED333A22BD0052C2BF544419AA914C86617481C155D46559CF3E0AEEDF
SHA-512:	D5A905FF022C168D9CCB764B2C2D90C35867102DD4C15BA459A9A4E7E8A36C54CA2DD5584F33A5573B1FA8C890D6634E7C082D82CFC2AD816D71C1C8BCFCE395
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.1./.1.1./.2.0.2.4. . .0.1.:.0.2.:.2.2. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-11 01-02-17-229.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.301991252960501
Encrypted:	false
SSDEEP:	384:jqNMx9o9x9x9c9kG9Y9W19W9v9f9m949ZMeMIMOzozhzJzizpzU0SnLyL6LgKMKd:jWGeDnyWGuE1QhBMW3FRT8l1OdXsOes4
MD5:	9B4BC1A500C629CA0DCFC3784637C68A
SHA1:	07C2F565D275E4323260869B4E4785B79C6D3079
SHA-256:	A319365E31224D2CAB7609A98833318B62C0EA96019807BD89623A94DE34E84C
SHA-512:	8F083572E0C3D08367C517641A355D4EE70B36373B0F13D109226D4D24C792274AD1F78055FD6A826D8FC1597EFCA5F90CA990BD13AD30D900D841C04E6350D3
Malicious:	false
Preview:	SessionID=9056930c-a1a1-4434-b0ac-b9d93ee18115.1731304937241 Timestamp=2024-11-11T01:02:17:241-0500 ThreadID=2148 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=9056930c-a1a1-4434-b0ac-b9d93ee18115.1731304937241 Timestamp=2024-11-11T01:02:17:258-0500 ThreadID=2148 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=9056930c-a1a1-4434-b0ac-b9d93ee18115.1731304937241 Timestamp=2024-11-11T01:02:17:259-0500 ThreadID=2148 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=9056930c-a1a1-4434-b0ac-b9d93ee18115.1731304937241 Timestamp=2024-11-11T01:02:17:259-0500 ThreadID=2148 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=9056930c-a1a1-4434-b0ac-b9d93ee18115.1731304937241 Timestamp=2024-11-11T01:02:17:259-0500 ThreadID=2148 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.383887752703973
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rA:k
MD5:	7241D4A9D83A40700F2937521D42044A
SHA1:	3B7E575FF3115906370E2D52E470052727B6A73D
SHA-256:	C9AC2FFDC885AD1F2C986D89629015E1BB4C0483B35A609E089238D1E44376A1
SHA-512:	F244553548AF3DA6E459788601016EA8D48CD39C551D4123EE0FAF34E79C25550B544B2B2AEF069E9845FCD93DC867BBE723A8C727B211066288BC3011296BA5
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\368c9005-94a1-4a6f-bc59-7e71db307322.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\3e30fe20-2fa4-4bef-86b1-900e771c29fe.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\5845c04a-47f7-46fd-99b8-e50c9c04a10e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\eff83697-b334-47de-aedd-a33d69a0906e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	8B9FA2EC5118087D19CFDB20DA7C4C26
SHA1:	E32D6A1829B18717EF1455B73E88D36E0410EF93
SHA-256:	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
SHA-512:	662F8664CC3F4E8356D5F5794074642DB65565D40AC9FEA323E16E84EBD4F961701460A1310CC863D1AB38849E84E2142382F5DB88A0E53F97FF66248230F7B9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1571086072\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: #U25b6#Ufe0fVoice_mail_02309_wav0015.html, Detection: malicious, Browse Filename: Transcript_Sh03 summit bhc.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: j0mvnOAe.htm, Detection: malicious, Browse Filename: Secured Audlo_summitbhc.com_3609336482.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: _Play__New__VM__01min 04sec____ATT2006587654 (Randiwestbrook) .htm, Detection: malicious, Browse Filename: attachment(1).eml, Detection: malicious, Browse Filename: sample.pdf, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1829740320\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.388167319950301
Encrypted:	false
SSDEEP:	6:LOT6w+DmsDZrkrDxBYRgELGNB+cIMLohXOl0t1iKR/UFioWd9+iAt4jZMeLhJoUs:iwDtVEDsCDLeelyigqBjt4eK2f55
MD5:	F6719687BED7403612EAED0B191EB4A9
SHA1:	DD03919750E45507743BD089A659E8EFCEFA7AF1
SHA-256:	AFB514E4269594234B32C873BA2CD3CC8892E836861137B531A40A1232820C59
SHA-512:	DD14A7EAE05D90F35A055A5098D09CD2233D784F6AC228B5927925241689BFF828E573B7A90A5196BFDD7AAEECF00F5C94486AD9E3910CFB07475FCFBB7F0D56
Malicious:	false
Preview:	Google LLC and its affiliates ("Google") own all legal right, title and.interest in and to the content decryption module software ("Software") and.related documentation, including any intellectual property rights in the.Software. You may not use, modify, sell, or otherwise distribute the Software.without a separate license agreement with Google. The Software is not open.source software...If you are interested in licensing the Software, please contact.www.widevine.com.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1550
Entropy (8bit):	5.9461543350675905
Encrypted:	false
SSDEEP:	48:p/hFkmoyMTI1jglp6NjkakKwk+R2VJAz5s:RhMka5adwTYQz5s
MD5:	98B310FC33843D771DA0089FA155EDB2
SHA1:	5690A43F43673B947EB4C433CB4F5488A287E29C
SHA-256:	28F09A4AF935D2894689CC00658D597257422CAFF20A01055EFD8E78AD5E829F
SHA-512:	E76830974EA54C94E857179CA0DA893E088034367CA5C33E71C1016B788E737D65AB49AD9A9E6FEB85385B963AF5C13DB0A91E3F3072AC91600E91A1CEA0AB6F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KnESAO6ts6E14P0aoVwC_yghkUn7_i9PCMh0NvK44eLJL04dv

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	19236784
Entropy (8bit):	7.70214269860876
Encrypted:	false
SSDEEP:	393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
MD5:	9D76604A452D6FDAD3CDAD64DBDD68A1
SHA1:	DC7E98AD3CF8D7BE84F6B3074158B7196356675B
SHA-256:	EB98FA2CFE142976B33FC3E15CF38A391F079E01CF61A82577B15107A98DEA02
SHA-512:	EDD0C26C0B1323344EB89F315876E9DEB460817FC7C52FAEDADAD34732797DAD0D73906F63F832E7C877A37DB4B2907C071748EDFAD81EA4009685385E9E9137
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: , Detection: malicious, Browse Filename: DRL-272112.htm, Detection: malicious, Browse Filename: View alert details #20GBQ4J.html, Detection: malicious, Browse Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Inv_Doc_18#908.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AMA - 375,545.04.htm, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Gf.........." ......o.........P.l......................................p].....c.%...`A..........................................!.......!...... ]......`[..$...f%..!...0].0:....!.8.....................!.(...`cp.@...........p.!..............................text.....o.......o................. ..`.rdata..x.....o.......o.............@..@.data...pv8...".......".............@....pdata...$...`[..&....#.............@..@.00cfg..0.....\.......$.............@..@.gxfg... (....\......$.............@..@.retplne......\.......%..................rodata.......\.......%............. ..`.tls..........\.......%.............@..._RDATA..\.....]...... %.............@..@malloc_h......]......"%............. ..`.rsrc........ ]......$%.............@..@.reloc..0:...0]..<...%.............@..B................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\_platform_specific\win_x64\widevinecdm.dll.sig

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.572464059652219
Encrypted:	false
SSDEEP:	24:38H/VZn47VBRxgCUQuODHBJeriJ8yojUdnkLvXWgl0oHLrUXAokYH/o8j/bmspTh:38HdurRxHSOlAiqYoXWVDXJ/o8zbmsFh
MD5:	A19EC48B4B28F3AA9C32150DCA8C0E39
SHA1:	02981E40B643C2A987D47BF58F42B7F3CA5AAF07
SHA-256:	D363751B0EE48517DA1B56C17FFCD78DD57F25B092B09879667DB10338077621
SHA-512:	718A24E1FB45AB0FD3DB5A5C45B0E0061D9061D8615E2A8D6DB2150BF72267E96774094A6FC07A250D5BBBC5133A1CB635D8F7ADC5B1751FA99327FCE9555941
Malicious:	false
Preview:	....0...0...........6cd/+J.v{..B...0....H........0}1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1"0 ..U....widevine-codesign-root-ca0...171013173909Z..271011173909Z0y1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1.0...U....widevine-vmp-codesign0.."0....H.............0.........2F..8.e..-....$r...{^........0.%.HA...sA"D.q.=6...#.J.N.......&..k;.+...<xF.......B8.)S....o..\|Ci.F.A6....J.......Y..4..{.5u.9N...=...#.M..s.F!j.f%&ld.R...?!Ot@......#.f..O..[.V.p0y....+...S.].....M.=.9...>.. ........>.:....1tl.....`D/c..j..........0..0...U......L...cC.E..R.n...$.0...U.#..0....=..tW....!.B.#U).0...U....0.0...U........0...U.%..0...+.......0...+.....y........0....H.............g.."..[..t{.4~.,.G....4K.....(x$...} ....N..b\|d......h..u6?.L.(&.Oup...$!...4R. 5.-...s...K/..U[..[.+.sAX*.~...^0..ba>;.#....x...b.-1...E..l....S.n.a....)U .q..C>d:...<[..F5...7...[.-.l}.T Lc.X..Qf...z..:.Q..e.m

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9232676497295262
Encrypted:	false
SSDEEP:	3:SQTWAEVtGbSHaqHGDTzoARPkBDF:SQyANeayyTzTP6
MD5:	5BFBCC6E7AA3E9C1570C5C73F38FA8EA
SHA1:	497BAFA5658C6CE8C8010D12F104EEBEC7A1BAE2
SHA-256:	84470096167EA43C0880B39FE44B42F552014E4F85B66805C2935C542BA3CB8E
SHA-512:	41BBED6CC317FF190189D63D6D5910D30E23A5160E5FF5F635FF408AAB13452DA8174556D7120DB176701435A3329A93A7450583404D56C34A37B67F1A332EDC
Malicious:	false
Preview:	1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_1835020213\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	4.774546324439748
Encrypted:	false
SSDEEP:	24:ulaihI11X1TRuRckckH3WoA0UNqLQxUNqmTxyNq+TA:C1hYl1uRfckHkseDA
MD5:	2FF237ADBC218A4934A8B361BCD3428E
SHA1:	EFAD279269D9372DCF9C65B8527792E2E9E6CA7D
SHA-256:	25A702DD5389CC7B077C6B4E06C1FAD9BDEA74A9C37453388986D093C277D827
SHA-512:	BAFD91699019AB756ADF13633B825D9D9BAE374CA146E8C05ABC70C931D491D421268A6E6549A8D284782898BC6EB99E3017FBE3A98E09CD3DFECAD19F95E542
Malicious:	false
Preview:	{. "manifest_version": 2,. "update_url": "https://clients2.google.com/service/update2/crx",. "name": "WidevineCdm",. "description": "Widevine Content Decryption Module",. "version": "4.10.2830.0",. "minimum_chrome_version": "68.0.3430.0",. "x-cdm-module-versions": "4",. "x-cdm-interface-versions": "10",. "x-cdm-host-versions": "10",. "x-cdm-codecs": "vp8,vp09,avc1,av01",. "x-cdm-persistent-license-support": true,. "x-cdm-supported-encryption-schemes": [. "cenc",. "cbcs". ],. "icons": {. "16": "imgs/icon-128x128.png",. "128": "imgs/icon-128x128.png". },. "platforms": [. {. "os": "win",. "arch": "x64",. "sub_package_path": "_platform_specific/win_x64/". },. {. "os": "win",. "arch": "x86",. "sub_package_path": "_platform_specific/win_x86/". },. {. "os": "win",. "arch": "arm64",. "sub_package_path": "_platform_specific/win_arm64/". }. ],. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	6.000812070590638
Encrypted:	false
SSDEEP:	48:p/hZf7eOgOXVAKJkWkaknr4b1cHilZhD+4JjksxCxvl3bDV:R/eOZVIaE+6WnDpNsdlF
MD5:	4F4619D36A1F322DE52B528955BEE766
SHA1:	6D85E440DF21E5D26E143A40CCFADD6F37970C02
SHA-256:	44E5E6D5E8DD806E965B736023E302A7342B8FF3FFE0BBB714CB6C18C7D175FD
SHA-512:	4BC26AD4D6B12884437E4E711729DE98CE382481BEB252B803256A61B1AA1B5C430A1A48ADA4172AEEB15DB8D2DFA2D37CF5E156CCCC5D3224E0433685C333B4
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiclJ0Ui0zeTZ5bFBYTU1QTGphOS1XcGhGUnZ3Q0xZcE5GcnY5Y0pxQ1ZJbyJ9LHsicGF0aCI6Im9wdGltaXphdGlvbi1oaW50cy5wYiIsInJvb3RfaGFzaCI6IllSLVQyeHJpeEw5eVN1OXh6VktmNTM0clY5VHBhRjduWmIzaUFaMnNvVFkifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJsbWVsZ2xlamhlbWVqZ2lucGJvYWdkZGdkZmJlcGdtcCIsIml0ZW1fdmVyc2lvbiI6IjQ3NCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"TJ4yY5sfk1z2ec2FuQZ7Z5W5FiDR-uaem1pWny74Dt_QNfFOA5Yxf0vHWiwjdjvs4-iOuiRmWDz4xRhU_892OaS-RRo-aE8i1ALSup_WS1zHCr41vLJBE4Bric3mepvf96EaBzDj3n4D44tVngaeZUXV3jW2-FxNNp1v8eWuWfmx_zDFN8ZG65iiizbFLzz5nQgzKTUiykF1Vind2FWe_TQuDLXO6S0dvozGaCX8Ik0nI-adehrl6xrV5aZ3ax8YR9VIZ3_FLPRVuysEI0mSPvrFapoUH51waiujJDU-sXWxIwlTpwkkX-xXkaL98lMmhrFhzeEiOIQmuOtf8J_CQfoOz

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.819715992932138
Encrypted:	false
SSDEEP:	3:STBT1cBSPwxaStABBBjAUV1:SNaSoxZgEM1
MD5:	BDAEE4D84728B9F23D320EFC8BB2978A
SHA1:	B48838DFD97610A4634E9CF2C819AF8AF3FA5E37
SHA-256:	2168605782304B6D591CABB9EC81E1F533A6741BBA5D2956E26EF30D8FD4A4DE
SHA-512:	E7FCD42E815489E3390A53760D6C1D9D850E1809B789D1D46D7B83EFB492E01C20C1772F24CAF572BC658E5E162B84D1B933C27CA1A44D8A657283A40A3EF3CD
Malicious:	false
Preview:	1.6d3016a90cb7cd76c121e08c0ccf997f54cbf879950ddf9cdd0767d8482510a9

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.462631361764747
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFzIe4/+S1oBF9hHcDKhtH8tAn:F6VlMQ/+S1ozDSKH8tAn
MD5:	3BFFF137CF06F4BF2C6DE03DC24947E2
SHA1:	25971600EC83C3FD118EF8C42EC7682F93D11FA4
SHA-256:	AD1B51FB7CBACA53D730C3CB8DAF7E5A984546FC022D8A4D16BBFD709A82548A
SHA-512:	E6D4B4C5ACCC74E1AA8A02FC2BE14C971B2D7D480C6BA9FE1F416CB56B2C83190F661D363E5BC63DAA04EF2D793563DCE3E60192554E33D414CCD1DAEEA3F38B
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Optimization Hints",. "version": "474",. "ruleset_format": "1.0.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_2103273986\optimization-hints.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	53796
Entropy (8bit):	7.976559013061113
Encrypted:	false
SSDEEP:	1536:/zehGBKxdYm83YG3iHb8fZANCdX4SjsxgSH9Ch:x0xW3YG3i78fZk67jsBCh
MD5:	2F6B4AF55206D991BDF470BA8B8AF25B
SHA1:	FD5A8137CAC84E2C0DF4D2D7102467DE7EE483AC
SHA-256:	32CE2A2F9910A7114D53AA57A559959D8DCCA3A37C7ED3780003359BDF882C92
SHA-512:	67785852CA623E55632A56C58A910F43112C4797317D90FE96DC0ED0182EEBA9FF4844DB4DA2F60E7E154CF6799FAADB8FDEF090D9809FFF7A8BD93F4F7FA76A
Malicious:	false
Preview:	............I.....g2.I..jI..n).+..)...h.+.A7p..q.:S4.Z...O.. R..\|....Da.e.?..W.-..ni2.....[.....6%8....x..y".b.Y7^.n......%/...f..c../.CY....j..\|].b..+.f..].{S.s..J...\|..nn..G..jb).Mn..../....R%.Fm.....K.....&.n.P.]..M.q:E..#^..O.....+...%\|{....5d..............=....X......._...OS1...+.q...7..vzf.....(....iVp....7..."QA.k`......Q...Y../X4..`...<+.@.U...m .'.X6...-.aD....<..w..7bv.e......<~.J.d...i..7..o}x_...B.T....V.et....u.{/.....p6.....t.Y(a.E......t.....P..45.a...!B-......B.RY#H....E....%...I..a.....$...T....7;...y..`.l.p..kv..`..q]...z.9rX...Rb..Q.N..../.>....p.ah.........z.\.Y}2W..o.?..-6=y...2[:..t7(t)....^.H...cl"]F."..@'h....t..s..Pf..SA.yCs....IuT..=.6...{...X....,...}.....ddE.2............YU..HQ..h.i.v...;..b....}.]K..../O.....]S~.l.H...........&....~m....3..l.l*RN"..k..1f.x.$..n...P-..](.Z./.........9...WJ\. /.B.Q....h.R...e.............Fg]...........?.Z..iH.Kyxc.e.P...H.....1N.Ac.;.4..he..b.V.w..'.....Z...K.4......p...2..9.s.."

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1765
Entropy (8bit):	6.016932513650603
Encrypted:	false
SSDEEP:	48:p/hKAGj0FnAp7XgNGIaku9E5tPJXaWqkbszesM:R5Gj0FAlsaBmfPsRD3M
MD5:	6D1D175F88B64546105E3E7C31D1129A
SHA1:	75A1B56F55BB62B05365A0FDBFC7941DE77CBFAF
SHA-256:	A0BC246E8E160A9BB32FA60F4E7A04D148A17125F426509466031E07731FDF81
SHA-512:	5C80908331E30C7EAD67F7F6C5AB064B07626FD9C58925A0D2124D66B25C5AE2F218BDACFB68AFCB332E88EB297CFB7E0A7A9E5E1E54C9B7A510FEF095F9B54F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiSUxrUllPSmhIVEZacllLRmN5UC12SkJrVjNWbWVLdHo4d1hEb2VPWjBZMCJ9LHsicGF0aCI6InNzbF9lcnJvcl9hc3Npc3RhbnQucGIiLCJyb290X2hhc2giOiJyRFZLUnlPcXBQQnI3RGhkM2VTazBKZzYxUlJXOVNzeHFBYU95WDFiWHFjIn1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoiZ2lla2NtbWxua2xlbmxhb21wcGtwaGtuam1ubnBuZWgiLCJpdGVtX3ZlcnNpb24iOiI3IiwicHJvdG9jb2xfdmVyc2lvbiI6MX0","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"nBdNk-7bgnEftAs4hWaHwF1Lk9pt7Eh6pcqe2gyNsE7VnVRp-H27tm1RFAF4htCUlXNJxX6YY-MUiK2DqJpQ3c73KDaFV8DcnadQfcXO3Lbrw7jLYSUaSdzujPkTyhuFcq_BhK0KWiIJ0aJgh7nVOBfAa5AbE6oFlLKMB2Ls0gmzS1-a5hUIu4rw2h9r9jkr6gLYbein5Jk2hdwW3u-1GNjyki4dftG2iZNAI8VhUf5gnCiF4AHCnYSGJsM0RGkmO_HJIzgwpQpP3RDsG2ioeKgxL-kcHhjXWOj3uVGyxpp1FkyHGkeGuqpFZMAxx3CEBiOtFj7i3iQxkgEW-E3uMKI3yA

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9555383032528804
Encrypted:	false
SSDEEP:	3:SWjBMq9+jigBeQrEj3vWXyDt:SW93KBeQIj+XQ
MD5:	684DA5CCA8ADC8CA59CBE5B082CFE0B5
SHA1:	B8784E02DB81C5F846A7848455A2C6629A88BD64
SHA-256:	F48C9D93CC216AF13BBFAD15DD5E6D1679CD35D318E664029DDF61EFC6E51A5D
SHA-512:	EAEB9B8C51AEF3CC2749F4E6B2C2B58334E53C0BA701DB94F2896C9557B949D392CF4F44B771821C63DD238FAC2B2F869833BED2DFF830AFC4C8743683A75183
Malicious:	false
Preview:	1.3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	76
Entropy (8bit):	4.169145448714876
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFY8Wypv/KS1f:F6VlMQyBSS1f
MD5:	4AAA0ED8099ECC1DA778A9BC39393808
SHA1:	0E4A733A5AF337F101CFA6BEA5EBC153380F7B05
SHA-256:	20B91160E2611D3159AD82857323FEBC906457756678AB73F305C3A1E399D18D
SHA-512:	DFA942C35E1E5F62DD8840C97693CDBFD6D71A1FD2F42E26CB75B98BB6A1818395ECDF552D46F07DFF1E9C74F1493A39E05B14E3409963EFF1ADA88897152879
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "sslErrorAssistant",. "version": "7".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_491452866\ssl_error_assistant.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2816
Entropy (8bit):	6.108955364911366
Encrypted:	false
SSDEEP:	48:jkbh6AW2Bfc3osI6Hc3+XgU+EVeY55J4gXM/QDH4yq2dxckdfmkM:jkbhM2a3pntgQVb8Ylq2di
MD5:	E2F792C9E2DD86F39E8286B2EAD2FC70
SHA1:	8A32867614D2A23E473ED642056DED8E566687F9
SHA-256:	AC354A4723AAA4F06BEC385DDDE4A4D0983AD51456F52B31A8068EC97D5B5EA7
SHA-512:	6A7AF0CA1EFA65A89A9CA3B8DF0D2E24F21D91673C60CDFEEB02D33647442B01D535497249542F40E66E0D2DD3E9F8ED1F4A201FD97138D07A2B71366737E580
Malicious:	false
Preview:	...5.3sha256/fjZPHewEHTrMDX3I1ecEIeoy3WFxHyGplOLv28kIbtI=.5.3sha256/m/nBiLhStttu1YmOz7Y3D2u1iB1dV2CbIfFa3R2YW5M=.5.3sha256/8Iuf4xRbVCmCMQTJn3rxlglIO1IOKoyuSUgmXyfaIKs=.5.3sha256/8IHdrS+r6IWzSMcRcD/GA6mBxk1ECX8tGRW0rtGWILE=.5.3sha256/k/2eeJTznE32mblA/du19wpVDSIReFX44M8wXa2JY30=.5.3sha256/urWd7jMwR6DJgvWhp6xfRHF5b/cba3iG0ggXtTR6AfM=.5.3sha256/IJPCDSE5tM9H3nuD5m6RU2i9KDdPXVn4qmC/ULlcZzc=.5.3sha256/0Gy8RMdbxHNWR2GQJ62QKDXORYf5JmMmnr1FJFPYpzM=.5.3sha256/8tTICtyaxIQrdbYYDdgZhTN0OpM9kYndvoImtw1Ys5E=.5.3sha256/F7HIlsaG0bpJW8CzYekRbtFqLVTTGqwvuwPDqnlLct0=.5.3sha256/zaV2Aw1A742R1+WpXWvL5atsJbGmeSS6dzZOfe6f1Yw=.5.3sha256/UwOkRGMlP0K/mKNJdpQ0sTg2ean9Tje8UTOvFYzt1GE=.5.3sha256/w7KUXE4/BAo1YVZdO3mBsrMpu4IQuN0mhUXUI//agVU=.5.3sha256/JnPvGqEn36FjHQlBXtG1uWwNtdMj1o2ojR/asqyypNk=.5.3sha256/AUSXlKDCf1X30WhWeAWbjToABfBkJrKWPL6KwEi5VH0=.5.3sha256/zSyVjjFJMIeXK0ktVTIjewwr6U5OePRqyY/nEXTI4P8=.5.3sha256/9dcHlrXN2WV/ehbEdMxMZ8IV4qvGejCtNC5r6nfTviM=.5.3sha256/E+0WZLGSIe5nddlVKZ5fYzaNHHCE3hNqi/OWZD3iKgA=.5.3sha2

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74598
Entropy (8bit):	5.5368864380577545
Encrypted:	false
SSDEEP:	1536:7geXUzNNSGg1dSkNp+z55w4kgNmmO6I7kWvQFlGlHUvkS6xt/GL95vkdwz:sDRNfgr9NpK5wl+1O6IoWQFlGlHLS6xQ
MD5:	C6AF15DA82A8A9172FC9CAFC969DE4F9
SHA1:	81F477E181036D551EF6F09CB875C6B280BEBE00
SHA-256:	782009D9765C6104A1B4D1EAC553834E7E399D749A082EAD42BB47ABB42895B5
SHA-512:	F541CB1703A0BD31FCB6E293ACBC6E20F73B365FF8D2270A6D44780E9D5731B8D7803AECACD49D73E0DA065DD1026C9FA95F9CAD2BF0776CE1E2C3C9FCA052C6
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.just-news.pro^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.abh.jp^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana..(........0.8.@.R.ogads-pa.googleapis.com^..........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^..........0.8.@.R./300-250-.2........0.8.@.R"cloud

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.97509175092227
Encrypted:	false
SSDEEP:	24:pZRj/flTHY4NukYbKcFjeT3U8zkaoX+UqiF46u9ILn9oXUMzniumZ39TzIS/Xre:p/h44SbKcETEwkakBa6F9kUpumZR/Xi
MD5:	951BA6192A41622EC0E04174E1EFA31C
SHA1:	2C63243A5589671BF649FA049542308D3D7EB40E
SHA-256:	EA426C8FDAFABF1B3162C206175A17100613C85A0C30DDCDC0A3434232B69D59
SHA-512:	F9C612AA2848C01C2A3294378E6707AE92638FC5EF4C6C911D400AA981418AEF0334DBFAB1D954E0666ECDD5AB8B1506354D9C6DCF6D3D1459FAC2AD06F9E23E
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"534ZoaSA4vZpcy0b1OYq4wgLlduJCzBpUCZnNXyx3UoH1ihy6uYapK85BVjJa1ptpN9OiT86GN1r8DNZlX69tLTIyTb7lSKoX31Sef3uvZpSLJBlIGI1173pGoj52Eu77I4DraCiKTVQ4mtVLBee579FqGijozIApfrepXVZeIes4wac06yB06DuFkdEg_jnCv3xR2twcNzidsDVTw7W-VOezjdZgjousBDON_Pumwd7_4ze5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8945408555413215
Encrypted:	false
SSDEEP:	3:SjWMQ0GiUVfkCzNMEkDRApvTD:SjWR/3tkNApvTD
MD5:	87190EF44A670A5418E7E6B26DA5CF02
SHA1:	7F24A0F6E188CA285526C968359D5DEEB0CA3F1C
SHA-256:	B9C7B754CFFECA3981CA26BCFEC1FA9988070C8657AE9DA3CA2EA7944E16AB00
SHA-512:	2980EBB51CCEE91B7F887A49D495BA9E3F4D0274AA6D4D0A3E8E4D3E3661815FB825C6D44DAFA34285E3625F979084FFAD5D54E8AE0B9E12ABFEF5C2F71E568C
Malicious:	false
Preview:	1.b48b30af5ce18c96128bfff9d2755c7932a1f32adc66f68322f7dd505db9626f

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6972_812266974\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1HVgn:F6VlMZWuMt5SKPS16n
MD5:	3EE731D0E5BFB74CACB3D9E2DFDC7768
SHA1:	EE15CB60213BB402FD90308F0F67D7B6160C9751
SHA-256:	5DBF79F09D999EA982D90DF45EB444EBF66A0C700E51D4C9856AFBE7326E9D69
SHA-512:	F38E3FEDD392F9B273565CBE321A56051EDAF48DB75A0EBB539D57E8D1238D4BAC41E973F037395F9C5D4A189DF5E68726ED2C000134FC36BB7E7295C9A779C1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.52.0".}

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4438
Entropy (8bit):	5.070639842330063
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOiVAZaZLqm6grRkI9PaQxJbGD:1j9jhjYjIK/Vo+t6aZ2m6gr19ieJGD
MD5:	6FCA1F221FF7495F610036A9ED4651AE
SHA1:	2244E22E5749A6F4A916213F94EE5ECD819F3F22
SHA-256:	4FFAE1888A3B1BAFFFD901A26626C1A4104747DD5B78140E47016E4525E413B8
SHA-512:	804E89643D82237294B0772E7538AE2CED4EEA15DB9F2E1FF64BA0A0E3B0DC92D539D3701A358A8938F1C52B4BF87FBC370A73561D0957F0323C7E92EAB74689
Malicious:	false
URL:	https://k7l8y.ltasetalty.com/akuFd/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
URL:	https://k7l8y.ltasetalty.com/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
URL:	https://k7l8y.ltasetalty.com/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Static File Info

General

File type:	PDF document, version 1.4, 3 pages
Entropy (8bit):	7.690822666067196
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Complete_with_DocuSign_49584.pdf
File size:	100'301 bytes
MD5:	3b363fd7dc351d448b473aad3ebfec95
SHA1:	c873a0c9ba91722cd7b23a6a59f4621f3be54a07
SHA256:	89ef2a11438a1ba2032fe7cc6e1c151514fdd9635c2b8ca51f8bbbe655c5ce58
SHA512:	dc2199d08ae4e456d4bab1c9c8d730a6114c0536c0b897f63397dca5eaf656809ddc035a9999994871f022269937876ec1aaf0c00bdc8e9f489cd7ffa9223321
SSDEEP:	3072:ThMDIDDhBhDsdoDsjhLhnFDkR/DpUsg9fy/Df2M2hMDIDDhBhDsdoDsjhLhIDFDB:ThMDIDDhBhDsdoDsjhLhnFDkR/DpUsgl
TLSH:	73A3177354B51984B4D243C1BC2FBA4FD06863E50AC352B22DE8FDE8E87C94C961EB55
File Content Preview:	%PDF-1.4.......................................................................................................................................................................................................................................................

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4Ãƒ\x90
Total Entropy:	7.690823
Total Bytes:	100301
Stream Entropy:	7.956746
Stream Bytes:	75720
Entropy outside Streams:	5.084680
Bytes outside Streams:	24581
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	66
endobj	66
stream	17
endstream	16
xref	1
trailer	1
startxref	1
/Page	3
/Encrypt	0
/ObjStm	0
/URI	14
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
9	803586f5130a4208	c036869ea6a43f140b77718e4afaf2d1
11	cca66d5155599acc	258e49f428d437bbebb097b44e84cbd0
13	cca66d5155599acc	ced35fd6510e456de84332da668035d9
18	1146653163490344	3c6b91d3332af4f5cee65a9e5b28c268

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-11T07:02:28.590051+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.4	49740	TCP
2024-11-11T07:02:55.753481+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.4	52598	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 11, 2024 07:02:14.550044060 CET	49675	443	192.168.2.4	173.222.162.32
Nov 11, 2024 07:02:21.804596901 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:21.804625988 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:21.804702997 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:21.806337118 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:21.806349039 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.390578985 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.390642881 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.394949913 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.394959927 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.395181894 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.444001913 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.487330914 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.611354113 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.611424923 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.611474991 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.611515045 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.611535072 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.611546040 CET	49738	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.611551046 CET	443	49738	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.653763056 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.653811932 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:22.653881073 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.654254913 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:22.654266119 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.234525919 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.234603882 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.273767948 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.273787975 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.274043083 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.275804996 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.319343090 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.442410946 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.442488909 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:23.443351030 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.443351030 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.443391085 CET	49739	443	192.168.2.4	184.28.90.27
Nov 11, 2024 07:02:23.443408012 CET	443	49739	184.28.90.27	192.168.2.4
Nov 11, 2024 07:02:27.215496063 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:27.215536118 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:27.215596914 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:27.216820955 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:27.216830015 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:27.859304905 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:27.859663963 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:27.862371922 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:27.862400055 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:27.862608910 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:27.906347036 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.373380899 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.411361933 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.411406040 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.411463976 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.411633968 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.411647081 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.415328026 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585522890 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585550070 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585556984 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585586071 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585612059 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585632086 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.585676908 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.585692883 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.585726023 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.586129904 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.586196899 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.586204052 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.589941025 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:28.590096951 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:28.946552992 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.946855068 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.946888924 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.947900057 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.947973967 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.950658083 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.950719118 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.950831890 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:28.950840950 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:28.996296883 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:29.032634020 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:29.032649040 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:29.032730103 CET	49740	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:29.032737017 CET	443	49740	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:29.057177067 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:29.057241917 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:29.057291031 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:29.057585001 CET	49745	443	192.168.2.4	23.47.168.24
Nov 11, 2024 07:02:29.057599068 CET	443	49745	23.47.168.24	192.168.2.4
Nov 11, 2024 07:02:33.034219980 CET	80	49723	217.20.57.24	192.168.2.4
Nov 11, 2024 07:02:33.034462929 CET	49723	80	192.168.2.4	217.20.57.24
Nov 11, 2024 07:02:33.034495115 CET	49723	80	192.168.2.4	217.20.57.24
Nov 11, 2024 07:02:33.039417982 CET	80	49723	217.20.57.24	192.168.2.4
Nov 11, 2024 07:02:41.709590912 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.709625959 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:41.709690094 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.710279942 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.710310936 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:41.710366964 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.710561991 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.710575104 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:41.710824966 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:41.710839987 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.166132927 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.166193008 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.166407108 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.166423082 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.166640043 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.166650057 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.167279959 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.167341948 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.167514086 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.167567015 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.168294907 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.168346882 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.168562889 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.168628931 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.168747902 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.168752909 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.217073917 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.218051910 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.218059063 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.263768911 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.272097111 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.272151947 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.272305012 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.272454023 CET	49753	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.272471905 CET	443	49753	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.630295992 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.630326033 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:42.631361961 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.631546974 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:42.631558895 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.081811905 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.108655930 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.108665943 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.109560013 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.109633923 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.110578060 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.110630035 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.110752106 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.155334949 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.172373056 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.172379017 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.215167999 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.220913887 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.220961094 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.221693039 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.221703053 CET	443	49755	67.223.102.74	192.168.2.4
Nov 11, 2024 07:02:43.221726894 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.221760988 CET	49755	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:02:43.421720982 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:43.421766043 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:43.421835899 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:43.422133923 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:43.422153950 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:43.999152899 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:43.999386072 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:43.999413013 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.000284910 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.000346899 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.001210928 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.001262903 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.001557112 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.001564980 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.051372051 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.127357006 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.128901958 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.128972054 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.134335041 CET	49756	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.134356022 CET	443	49756	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.192018986 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.192054033 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.192111969 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.192436934 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.192451954 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.227298021 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.227330923 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.227406979 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.227722883 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.227735043 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.263516903 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.263537884 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.263612986 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.264539003 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.264549017 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.652746916 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.653065920 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.653098106 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.653389931 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.653692961 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.653750896 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:44.653825045 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:44.656454086 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.656620026 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.656632900 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.657598972 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.657665968 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659066916 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659096003 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659127951 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.659218073 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659226894 CET	443	49759	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.659235001 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659276962 CET	49759	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659545898 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659564972 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.659621000 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659908056 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.659924984 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.688662052 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.688877106 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.688885927 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.689728975 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.689800978 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.693873882 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.693892956 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.693923950 CET	443	49760	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.693950891 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.693985939 CET	49760	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.694245100 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.694255114 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.694315910 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.694499969 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:44.694509983 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:44.699331999 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.090564013 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.092658997 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.092679024 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.093693972 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.093756914 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.094664097 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.094722986 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.094892025 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.094899893 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.119488001 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.119692087 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.119709969 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.120553970 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.120625019 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.120848894 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.120898008 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.143887043 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.175582886 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.175590038 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.183478117 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.183820009 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.183876991 CET	443	49758	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.183938980 CET	49758	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.185065031 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.185085058 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.185146093 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.185363054 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.185374975 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.192159891 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192208052 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192243099 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192254066 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.192264080 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192307949 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.192313910 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192342997 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.192385912 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.193264008 CET	49761	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.193273067 CET	443	49761	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.204144001 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.204159975 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.204216003 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.204400063 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.204410076 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.217135906 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.263331890 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.308554888 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.308851957 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.308911085 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.308919907 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.308991909 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.309020042 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.309039116 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.309045076 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.309079885 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.309406996 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.309618950 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.309659004 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.309664011 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.363863945 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.363868952 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.389650106 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.389683008 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.389720917 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.389727116 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.389770985 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.389957905 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390001059 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390039921 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.390044928 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390608072 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390635967 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390655041 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.390659094 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390676975 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.390698910 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.390726089 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.391063929 CET	49762	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.391072035 CET	443	49762	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.435072899 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.435133934 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.435211897 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.435997009 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.436017990 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.632136106 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.646975040 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.689289093 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.700561047 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.700572014 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.700707912 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.700712919 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.701471090 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.701479912 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.701538086 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.701879025 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.701894999 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.701941967 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.702562094 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.702615023 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.707595110 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.707668066 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.707765102 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.707772970 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.743458986 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.743469954 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:02:45.756031990 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.791846037 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:02:45.826144934 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.826489925 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.826539993 CET	443	49764	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.826608896 CET	49764	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.827033997 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.827070951 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.827143908 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.827348948 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:45.827359915 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:45.860272884 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.860572100 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.860605001 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.861489058 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.861563921 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.861927032 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.861943007 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.861980915 CET	443	49766	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.861999989 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.862039089 CET	49766	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.862296104 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.862338066 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.862401962 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.862639904 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:45.862654924 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:45.893573999 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:45.893601894 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:45.893670082 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:45.893842936 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:45.893856049 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.252532005 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.252883911 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.252899885 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.253978968 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.254043102 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.254440069 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.254511118 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.254616022 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.254625082 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.297472000 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.297832966 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.297859907 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.298140049 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.298491001 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.298556089 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.298636913 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.306962967 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.343333006 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.371860027 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.372293949 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.372334003 CET	443	49767	35.190.80.1	192.168.2.4
Nov 11, 2024 07:02:46.372397900 CET	49767	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:02:46.391854048 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.391900063 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.391947031 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.392937899 CET	49768	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.392951965 CET	443	49768	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.424679041 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.424712896 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.424791098 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.425580025 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.425596952 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.494333982 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.494580984 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:46.494591951 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.495450020 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.495518923 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:46.496534109 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:46.496582031 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.548265934 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:46.548273087 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:46.588002920 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:46.588030100 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:46.588099957 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:46.588372946 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:46.588385105 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:46.595820904 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:46.848956108 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.849350929 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.849375963 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.850378036 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.850451946 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.850761890 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.850775957 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.850814104 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.850826025 CET	443	49770	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.850881100 CET	49770	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.851161003 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.851201057 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:46.851268053 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.851455927 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:46.851469994 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.011096001 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.011461020 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.011471987 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.012334108 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.012399912 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.012660027 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.012681007 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.012712002 CET	443	49771	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.012725115 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.012763023 CET	49771	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.013032913 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.013051987 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.013120890 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.013293028 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.013304949 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.276341915 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.276741982 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.276757956 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.277781963 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.277848959 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.278160095 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.278214931 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.278296947 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.278309107 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.329370022 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.439974070 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.440356970 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.440366030 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.441242933 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.441324949 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.441787958 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.441837072 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.445749998 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.445759058 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.461431980 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461482048 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461524963 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461529016 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.461539030 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461625099 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461668015 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461692095 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.461697102 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461707115 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.461741924 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461772919 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461781979 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.461786985 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461832047 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.461836100 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461862087 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.461905956 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.462915897 CET	49772	443	192.168.2.4	188.114.97.3
Nov 11, 2024 07:02:47.462932110 CET	443	49772	188.114.97.3	192.168.2.4
Nov 11, 2024 07:02:47.485716105 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.535600901 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.535640001 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.535703897 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.536298037 CET	49773	443	192.168.2.4	188.114.96.3
Nov 11, 2024 07:02:47.536308050 CET	443	49773	188.114.96.3	192.168.2.4
Nov 11, 2024 07:02:47.875986099 CET	80	49724	217.20.57.24	192.168.2.4
Nov 11, 2024 07:02:47.876130104 CET	49724	80	192.168.2.4	217.20.57.24
Nov 11, 2024 07:02:47.879247904 CET	49724	80	192.168.2.4	217.20.57.24
Nov 11, 2024 07:02:47.884022951 CET	80	49724	217.20.57.24	192.168.2.4
Nov 11, 2024 07:02:54.384202003 CET	52594	53	192.168.2.4	162.159.36.2
Nov 11, 2024 07:02:54.389179945 CET	53	52594	162.159.36.2	192.168.2.4
Nov 11, 2024 07:02:54.389286995 CET	52594	53	192.168.2.4	162.159.36.2
Nov 11, 2024 07:02:54.394191027 CET	53	52594	162.159.36.2	192.168.2.4
Nov 11, 2024 07:02:54.806540966 CET	52594	53	192.168.2.4	162.159.36.2
Nov 11, 2024 07:02:54.811901093 CET	53	52594	162.159.36.2	192.168.2.4
Nov 11, 2024 07:02:54.811953068 CET	52594	53	192.168.2.4	162.159.36.2
Nov 11, 2024 07:02:54.866508961 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:54.866548061 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:54.866614103 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:54.866976976 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:54.866991043 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.514143944 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.514216900 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.519983053 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.519989014 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.520231962 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.531529903 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.579328060 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.744885921 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.744915962 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.744930029 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.744962931 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.744975090 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.744992018 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.745003939 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.746052027 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.746078014 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.746105909 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.746112108 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.746131897 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.753391981 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.753442049 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.753674030 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.753686905 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:55.753700018 CET	52598	443	192.168.2.4	172.202.163.200
Nov 11, 2024 07:02:55.753705025 CET	443	52598	172.202.163.200	192.168.2.4
Nov 11, 2024 07:02:56.487993956 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:56.488043070 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:02:56.488101006 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:57.597260952 CET	49769	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:02:57.597285032 CET	443	49769	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:02.282489061 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:03:02.282562971 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:03:02.282648087 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:03:03.597131968 CET	49754	443	192.168.2.4	67.223.102.74
Nov 11, 2024 07:03:03.597152948 CET	443	49754	67.223.102.74	192.168.2.4
Nov 11, 2024 07:03:10.034310102 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.034358025 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.034420967 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.034673929 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.034688950 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.554949045 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.555043936 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.556441069 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.556452036 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.556653023 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.571037054 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.615330935 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.742079020 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.742101908 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.742116928 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.742177963 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.742199898 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.742245913 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.744060040 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.744076014 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.744138002 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.744143963 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.744182110 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.823268890 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.823282957 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.823343039 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.823350906 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.823389053 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.824424982 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.824440002 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.824491024 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.824496984 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.824534893 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.826236963 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.826250076 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.826297045 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.826302052 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.826343060 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.828028917 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.828043938 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.828093052 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.828100920 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.828135967 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.904512882 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.904531956 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.904592037 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.904604912 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.904647112 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.904958963 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.904973030 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.905014992 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.905021906 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.905061960 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.905474901 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.905489922 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.905544996 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.905550957 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.905586004 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.907520056 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907535076 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907596111 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.907599926 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907620907 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907639980 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907648087 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.907653093 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907672882 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.907702923 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.907929897 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907943964 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.907993078 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.908001900 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.908034086 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.985517979 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985532999 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985601902 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.985610008 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985641956 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.985682011 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985730886 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.985737085 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985754013 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.985775948 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.985802889 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.986059904 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.986073971 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:10.986083984 CET	52602	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:10.986089945 CET	443	52602	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.030544996 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.030584097 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.030685902 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.031244993 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.031259060 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.032627106 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.032660007 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.032713890 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.032849073 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.032859087 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.033689976 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.033714056 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.033772945 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.034739971 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.034748077 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.034806967 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.035754919 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.035763025 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.035818100 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.036104918 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.036115885 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.036206961 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.036216974 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.036292076 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.036302090 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.547497034 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.547550917 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.548161030 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.548188925 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.548219919 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.548242092 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.548665047 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.548670053 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.549036026 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.549048901 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.549961090 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.550209045 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.550224066 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.550556898 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.550561905 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.550945997 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.551160097 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.551172972 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.551495075 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.551498890 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.551532030 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.551724911 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.551749945 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.552046061 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.552052021 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.640225887 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.640249968 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.640297890 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.640330076 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.640372038 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.640573025 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.640587091 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.640595913 CET	52603	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.640599966 CET	443	52603	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.642622948 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.642642021 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.642680883 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.642699957 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.642720938 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643030882 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643049002 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643063068 CET	52604	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643068075 CET	443	52604	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643208027 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643399954 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643443108 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643706083 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643744946 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643795013 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643889904 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643889904 CET	52605	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.643898964 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.643907070 CET	443	52605	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.644365072 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.644378901 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645112038 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645133018 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645169020 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645198107 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645215988 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645227909 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645265102 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645307064 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645385027 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645390987 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645399094 CET	52606	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645401955 CET	443	52606	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645800114 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645816088 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645881891 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645941019 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645945072 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.645952940 CET	52607	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.645956039 CET	443	52607	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.646080971 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.646090984 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.646152973 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.646161079 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.646205902 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.646601915 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.646611929 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.648375988 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648380041 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648384094 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.648400068 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.648458004 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648462057 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648576021 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648583889 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:11.648866892 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:11.648875952 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.155901909 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.156653881 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.156683922 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.157241106 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.157280922 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.157286882 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.157408953 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.157525063 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.157532930 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.157676935 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.157697916 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.158014059 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.158019066 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.158123016 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.158130884 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.160783052 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.160856962 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.161036968 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.161046982 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.161226988 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.161233902 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.161485910 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.161490917 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.161753893 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.161758900 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.250747919 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.250747919 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.250770092 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251085997 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251177073 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.251194000 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.251204014 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251213074 CET	52609	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.251216888 CET	443	52609	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251246929 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251276016 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.251293898 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.251326084 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.252526045 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.252541065 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.252552032 CET	52610	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.252557039 CET	443	52610	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.253380060 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.253384113 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.253392935 CET	52608	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.253396034 CET	443	52608	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.254617929 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.254682064 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.254730940 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.254955053 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.254961967 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.254971027 CET	52612	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.254975080 CET	443	52612	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.255652905 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.255968094 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.256021976 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.257688046 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.257704020 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.257780075 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.262495041 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.262500048 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.262522936 CET	52611	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.262526989 CET	443	52611	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.263139963 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.263150930 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.263209105 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.263772964 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.263784885 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.263880014 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.263887882 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.264058113 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.264065027 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.264120102 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.264255047 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.264262915 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.265260935 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265295029 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.265306950 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265336037 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.265364885 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265391111 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265527964 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265532970 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.265542030 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.265546083 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.783211946 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.783808947 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.783832073 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.783842087 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.783982038 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784169912 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.784188032 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784208059 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784221888 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784476042 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.784481049 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784732103 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.784738064 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.784770012 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.784775972 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.785023928 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.785037041 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.785159111 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.785164118 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.785402060 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.785419941 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.785542965 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.785548925 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.785785913 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.785790920 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.875498056 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.875617981 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.875679016 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.875766039 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.875776052 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.875786066 CET	52613	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.875792027 CET	443	52613	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.876712084 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.876914978 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.876981020 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877083063 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877095938 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877099037 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877113104 CET	52616	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877120972 CET	443	52616	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877233028 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877234936 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877278090 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877532005 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877542973 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.877552986 CET	52614	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.877557993 CET	443	52614	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.878000975 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.878041983 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.878046036 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.878093958 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.878756046 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.878757954 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.878763914 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.878799915 CET	52617	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.878803968 CET	443	52617	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.879623890 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.879626989 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.879640102 CET	52615	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.879642010 CET	443	52615	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.879841089 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.879858017 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.879914045 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881134033 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881151915 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.881221056 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881328106 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881355047 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.881401062 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881620884 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881633043 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.881695032 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881705999 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.881751060 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.881764889 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.882587910 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.882618904 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.882678032 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.882786989 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.882798910 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.883035898 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.883044004 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:12.883097887 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.883172989 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:12.883179903 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.401758909 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.401793957 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.401957035 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402113914 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402301073 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.402318954 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402350903 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.402383089 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402796030 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402813911 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.402818918 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.402962923 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.402971983 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.403091908 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.403110027 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.403273106 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.403279066 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.403470039 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.403476000 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.403676987 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.403687000 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.403830051 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.403834105 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.404073000 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.404078007 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494045019 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494190931 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494251013 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494345903 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494359016 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494366884 CET	52618	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494371891 CET	443	52618	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494407892 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494469881 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494510889 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494560003 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494666100 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494684935 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494694948 CET	52620	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494700909 CET	443	52620	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494765997 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494837046 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.494878054 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.494966030 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.495141029 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.495179892 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.495286942 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.495335102 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.495481014 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.495487928 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.495522976 CET	52621	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.495527983 CET	443	52621	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.496155024 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.496161938 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.496170044 CET	52622	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.496172905 CET	443	52622	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.496752977 CET	52619	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.496762037 CET	443	52619	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.500020981 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500032902 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.500051975 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500065088 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.500094891 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500123024 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500247002 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500256062 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.500451088 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.500461102 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.501662016 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.501682043 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.501739979 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.501843929 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.501858950 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.502512932 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.502518892 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.502583027 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.502933025 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.502938986 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.502966881 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.502989054 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:13.503036976 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.503166914 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:13.503180027 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.012950897 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.013703108 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.013715982 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.014972925 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.015059948 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.015064955 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.015358925 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.015378952 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.016501904 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.016506910 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.017499924 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.017843008 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.017864943 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.017957926 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.018224001 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.018235922 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.018290997 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.018697023 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.018701077 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.018908024 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.018929958 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.019049883 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.019054890 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.019295931 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.019299030 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111298084 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111341000 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111370087 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111387968 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111419916 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111437082 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111485958 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111485958 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.111510038 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.111532927 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.111731052 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111738920 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.111742973 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111753941 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111771107 CET	52625	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.111776114 CET	443	52625	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.111782074 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112140894 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112154007 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.112196922 CET	52626	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112201929 CET	443	52626	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.112391949 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.112438917 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112500906 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112505913 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.112524986 CET	52627	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.112529039 CET	443	52627	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.113188982 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.113208055 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.113219976 CET	52623	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.113224983 CET	443	52623	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.113689899 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.113693953 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.113703012 CET	52624	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.113706112 CET	443	52624	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.117366076 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.117382050 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.117453098 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.117950916 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.117961884 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.117979050 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.118011951 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.118057966 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.118155003 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.118169069 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.119580984 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119592905 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.119646072 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119723082 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119731903 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.119780064 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119854927 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119864941 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.119960070 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.119971991 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.120074034 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.120102882 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.120158911 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.120232105 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.120245934 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.632132053 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.632781029 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.632810116 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.633371115 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.633377075 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.634342909 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.634625912 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.634639978 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635014057 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635098934 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.635104895 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635139942 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635307074 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.635329962 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635525942 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.635549068 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.635793924 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.635801077 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.636039019 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.636044025 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.637861013 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.638138056 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.638144970 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.638578892 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.638582945 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.724374056 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.724642992 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.724709034 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.724750042 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.724767923 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.724776983 CET	52629	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.724782944 CET	443	52629	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.726259947 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.726784945 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.726850986 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.726914883 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.726924896 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.726944923 CET	52628	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.726948977 CET	443	52628	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.727610111 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.727650881 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.727715969 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.727842093 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.727854967 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728244066 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728307009 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728353024 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.728446007 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.728461027 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728470087 CET	52632	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.728475094 CET	443	52632	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728806019 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.728960991 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.729015112 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729274035 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729279995 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.729290009 CET	52631	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729293108 CET	443	52631	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.729576111 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729590893 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.729645967 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729799986 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.729809999 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.730529070 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.730799913 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.730868101 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.730997086 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731019020 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.731033087 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731035948 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.731045961 CET	52630	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731049061 CET	443	52630	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.731065035 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731930971 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731934071 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.731941938 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.731962919 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.732017040 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.732140064 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.732151031 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.733571053 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.733597040 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:14.733671904 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.733792067 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:14.733804941 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.240149975 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.240299940 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.240657091 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.240680933 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.240858078 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.240884066 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.241198063 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.241204023 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.241468906 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.241472960 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.243458033 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.243629932 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.243757010 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.243772030 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.243971109 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.243985891 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.244149923 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.244154930 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.244499922 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.244504929 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.250088930 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.250365973 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.250386953 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.250811100 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.250816107 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333151102 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333338976 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333364964 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333396912 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.333456993 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333504915 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.333614111 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.333632946 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.333646059 CET	52633	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.333651066 CET	443	52633	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.336731911 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.337544918 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.337559938 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.337608099 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.337609053 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.337651014 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.339481115 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.339485884 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.339498997 CET	52635	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.339502096 CET	443	52635	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.339819908 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.339835882 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.339848042 CET	52634	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.339852095 CET	443	52634	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.340349913 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.340358973 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.340367079 CET	52636	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.340370893 CET	443	52636	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.342783928 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.342792988 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.342850924 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.342993975 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.343013048 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.343065977 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.343123913 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.343286991 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.343297005 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.343393087 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.343404055 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.343605995 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.343657017 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344099045 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344126940 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.344150066 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344155073 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.344166040 CET	52637	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344168901 CET	443	52637	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.344192982 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344336987 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344348907 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.344369888 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344397068 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.344449997 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344566107 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.344579935 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.346638918 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.346646070 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.346715927 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.346848965 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.346858978 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.857451916 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.857470989 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.857894897 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.857904911 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.858093023 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.858110905 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.858438969 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.858447075 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.858540058 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.858688116 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.858692884 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.858830929 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.858845949 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.859132051 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.859302998 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.859308958 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.859369040 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.859383106 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.859746933 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.859751940 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.860045910 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.860296965 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.860310078 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.860754013 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.860758066 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.954888105 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.954929113 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.954950094 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.954962015 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.954972982 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955002069 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955018044 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955020905 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955050945 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955077887 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955116987 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955120087 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955157042 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955159903 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955199003 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955374956 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955384016 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955394030 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955396891 CET	52639	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955400944 CET	443	52639	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955413103 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.955426931 CET	52641	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.955430984 CET	443	52641	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.956216097 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.956227064 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.956238031 CET	52640	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.956243038 CET	443	52640	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.956401110 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.956403971 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.956417084 CET	52642	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.956419945 CET	443	52642	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.957204103 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.957212925 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.957242966 CET	52638	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.957247972 CET	443	52638	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.959455013 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959476948 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.959543943 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959719896 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959732056 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.959769964 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959788084 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.959844112 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959981918 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.959994078 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.960896015 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.960927963 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.960985899 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961213112 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961220026 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.961275101 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961348057 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961361885 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.961448908 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961457968 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.961760998 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961770058 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:15.961823940 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961913109 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:15.961919069 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.478974104 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479430914 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479631901 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.479640007 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479685068 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.479692936 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479789019 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479825020 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.479861975 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.480197906 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.480202913 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.480238914 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.480242968 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.480448008 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.480453968 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.480586052 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.480613947 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.480828047 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.480832100 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.481031895 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.481038094 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.481080055 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.481085062 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.481396914 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.481400967 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.571528912 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.571690083 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.571744919 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.571773052 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.571779013 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.571789026 CET	52646	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.571793079 CET	443	52646	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.571866035 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572065115 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572105885 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572139978 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572371006 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572416067 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572487116 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572499990 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572509050 CET	52643	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572514057 CET	443	52643	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572623014 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572638988 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.572648048 CET	52647	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.572654009 CET	443	52647	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.573172092 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.573211908 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.573255062 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.573596954 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.573601007 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.573611021 CET	52644	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.573613882 CET	443	52644	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.573730946 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.574016094 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.574064016 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.574374914 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.574379921 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.574388981 CET	52645	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.574392080 CET	443	52645	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.576828957 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.576855898 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.576951981 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578198910 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578234911 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.578293085 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578675032 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578681946 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.578736067 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578857899 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.578867912 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.579252958 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.579263926 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.579303980 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.579315901 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.579365015 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.579463959 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.579478979 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.579639912 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.579652071 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.581259012 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.581285954 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:16.581355095 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.581480980 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:16.581494093 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.097497940 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098052979 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098206997 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.098211050 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098233938 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098365068 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098490000 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.098505974 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098702908 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.098726034 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.098747015 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.099174976 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.099179029 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.099572897 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.099579096 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.099657059 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.099672079 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.099703074 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.099709034 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.100037098 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.100042105 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.100310087 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.100317001 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.100636005 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.100640059 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197436094 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197613001 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197613955 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197664976 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197700977 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197711945 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197772026 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197793961 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197793961 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197822094 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197844028 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197864056 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197865009 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197897911 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197911978 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197926044 CET	52649	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.197931051 CET	443	52649	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.197978973 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.198024035 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198188066 CET	52651	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198191881 CET	443	52651	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.198436022 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198447943 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.198457003 CET	52652	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198462009 CET	443	52652	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.198937893 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198951006 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.198960066 CET	52648	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.198965073 CET	443	52648	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.199978113 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.199980974 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.199997902 CET	52650	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.200000048 CET	443	52650	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.203716040 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.203742027 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.203835964 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204183102 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204197884 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.204273939 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204325914 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204333067 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.204377890 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204893112 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.204905987 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.204993010 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.205002069 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.205106974 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.205116034 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.205993891 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206013918 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.206068993 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206172943 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206190109 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.206201077 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206219912 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.206271887 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206340075 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.206351995 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.724605083 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.725084066 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.725100994 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.725439072 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.725577116 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.725583076 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.725790977 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.725807905 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.725822926 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726010084 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726012945 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726208925 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.726214886 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726403952 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.726432085 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726733923 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.726739883 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.726911068 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.726931095 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.727241039 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.727246046 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.727417946 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.727425098 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.727737904 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.727742910 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.817179918 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.817223072 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.817271948 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.817456007 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.817467928 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.817476034 CET	52654	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.817478895 CET	443	52654	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818350077 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818420887 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818525076 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818576097 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.818645000 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.818654060 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818661928 CET	52655	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.818665028 CET	443	52655	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818666935 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.818706989 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.818768978 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819251060 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.819255114 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819283009 CET	52653	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.819284916 CET	443	52653	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819345951 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819381952 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819390059 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.819442987 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.819484949 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.819993019 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.820005894 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.820017099 CET	52656	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.820020914 CET	443	52656	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.821090937 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.821101904 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.821110964 CET	52657	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.821115017 CET	443	52657	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.823467970 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.823487997 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.823553085 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.824476957 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.824486017 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.824537992 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.824551105 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.824580908 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.824601889 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.825161934 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.825175047 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.825876951 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.825890064 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.825941086 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826055050 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826064110 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.826137066 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826147079 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.826227903 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826237917 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.826443911 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826450109 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:17.826503992 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826579094 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:17.826589108 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.337830067 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.338360071 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.338373899 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.338947058 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.338952065 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.340518951 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.340776920 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.340799093 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.341224909 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.341228008 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.342222929 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.342442989 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.342453957 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.342873096 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.342876911 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.342880964 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.342888117 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.343168020 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.343184948 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.343291044 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.343301058 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.343612909 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.343616962 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.343797922 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.343801022 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.430387020 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.430428982 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.430491924 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433047056 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433053017 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.433062077 CET	52661	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433065891 CET	443	52661	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.433403969 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.433839083 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.433890104 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433917999 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433926105 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.433933973 CET	52659	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.433938026 CET	443	52659	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.434986115 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436289072 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436305046 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436378956 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436465025 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436491966 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436513901 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436522007 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436543941 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436705112 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436719894 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436777115 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436827898 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436868906 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436877966 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.436886072 CET	52662	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.436889887 CET	443	52662	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438072920 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438123941 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438148022 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438172102 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.438210011 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438257933 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.438303947 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.438308001 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.438328028 CET	52660	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.438329935 CET	443	52660	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.439101934 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.439129114 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.439188004 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.439297915 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.439316034 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.439420938 CET	52658	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.439435005 CET	443	52658	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.440377951 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.440387964 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.440445900 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.440649986 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.440663099 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.441692114 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.441699982 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.441762924 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.441894054 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.441904068 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.948705912 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.949197054 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.949207067 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.949603081 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.949608088 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.952768087 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.953018904 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.953031063 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.953371048 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.953375101 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.953414917 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.953645945 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.953659058 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.953974009 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.953979969 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.956862926 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.957217932 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.957231998 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.957658052 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.957663059 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.963017941 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.963321924 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.963335037 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:18.963754892 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:18.963758945 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.041299105 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.041610956 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.041662931 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.041693926 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.041704893 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.041716099 CET	52664	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.041719913 CET	443	52664	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.044013977 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.044050932 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.044118881 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.044229984 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.044244051 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.045665026 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.045707941 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.045749903 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.045845032 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.045850992 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.045859098 CET	52666	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.045861959 CET	443	52666	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.047758102 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.047786951 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.047847986 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.047956944 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.047970057 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.050473928 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.050606966 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.050657034 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.050694942 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.050704956 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.050717115 CET	52665	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.050719976 CET	443	52665	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.050774097 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.051054955 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.051112890 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.051136017 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.051141024 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.051147938 CET	52667	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.051151037 CET	443	52667	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.053158045 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053169966 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053172112 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.053198099 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.053265095 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053266048 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053386927 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053389072 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.053396940 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.053402901 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.056417942 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.056606054 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.056658030 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.056674957 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.056684017 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.056693077 CET	52663	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.056696892 CET	443	52663	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.058381081 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.058388948 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.058453083 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.058562994 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.058571100 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.556433916 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.557116985 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.557142973 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.558458090 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.558463097 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.561359882 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.561708927 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.561722040 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.562802076 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.562805891 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.566076040 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.566390038 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.566397905 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.567475080 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.567480087 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.567557096 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.567848921 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.567859888 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.568891048 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.568895102 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.570264101 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.570559978 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.570568085 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.571624041 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.571628094 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.651357889 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.651896000 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.651952982 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.651983976 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.651995897 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.652005911 CET	52668	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.652013063 CET	443	52668	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.654007912 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.654339075 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.654400110 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.654501915 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.654511929 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.654539108 CET	52669	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.654544115 CET	443	52669	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.655214071 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.655235052 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.655292034 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.655411005 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.655430079 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.658766031 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.658821106 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.658833027 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.658891916 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.659029007 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.659039021 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.659276009 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.659328938 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.659353971 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.659353971 CET	52671	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.659358978 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.659365892 CET	443	52671	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.660443068 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.661092997 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.661139965 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.661176920 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.661183119 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.661190987 CET	52670	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.661195040 CET	443	52670	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.662096024 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.662111044 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.662173986 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.662291050 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.662306070 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.663438082 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.663573027 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.663625002 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.663651943 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.663655043 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.663662910 CET	52672	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.663666010 CET	443	52672	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.665059090 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.665081024 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.665148020 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.665524006 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.665533066 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.666126966 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.666152954 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:19.666210890 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.666326046 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:19.666337967 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.167630911 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.170799017 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.170828104 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.170890093 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.171164036 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.171179056 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.171315908 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.171322107 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.171674967 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.171679974 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180053949 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180147886 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180361986 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.180372000 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180452108 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.180461884 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180758953 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.180763006 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180782080 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.180811882 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.180816889 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.181056976 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.181076050 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.181377888 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.181381941 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.260390043 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.260507107 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.260649920 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.260649920 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.261039972 CET	52673	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.261053085 CET	443	52673	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.263103008 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.263117075 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.263200045 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.263330936 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.263339043 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.263858080 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.264014959 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.264060020 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.264095068 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.264095068 CET	52674	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.264103889 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.264110088 CET	443	52674	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.266000032 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.266026974 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.266088009 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.266195059 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.266208887 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272418022 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272588968 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272639990 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272672892 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272680044 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272690058 CET	52676	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272694111 CET	443	52676	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272737026 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272783041 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272820950 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272959948 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272969007 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.272979021 CET	52677	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.272981882 CET	443	52677	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.273452044 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.273835897 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.273890018 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.274081945 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.274089098 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.274099112 CET	52675	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.274108887 CET	443	52675	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.275268078 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275289059 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.275361061 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275460005 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275489092 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.275535107 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275607109 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275619030 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.275707960 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.275721073 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.276062965 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.276070118 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.276125908 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.276207924 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.276218891 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.775444031 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.776117086 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.776135921 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.776829004 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.777084112 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.777093887 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.777554989 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.777560949 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.777594090 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.777600050 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.787218094 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.787616968 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.787642002 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.788386106 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.788606882 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.788618088 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.788810015 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.788815022 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.788999081 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.789004087 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.789390087 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.789710045 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.789716959 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.790791988 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.790796995 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868431091 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868462086 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868530035 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.868544102 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868729115 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868783951 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.868851900 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.868865967 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.868892908 CET	52678	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.868901014 CET	443	52678	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.870208979 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.870738029 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.870795965 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.870835066 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.870848894 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.870860100 CET	52679	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.870865107 CET	443	52679	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.873457909 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873478889 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.873549938 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873677969 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873688936 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.873727083 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873759031 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.873820066 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873903036 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.873919964 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.880263090 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.880278111 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.880311966 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.880319118 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.880359888 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.880497932 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.880503893 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.880513906 CET	52681	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.880517006 CET	443	52681	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883507013 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883524895 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883594036 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883604050 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883644104 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883646965 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883690119 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883763075 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883788109 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883795023 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883832932 CET	52682	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883836985 CET	443	52682	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.883944988 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.883980036 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.884037018 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.884046078 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.884082079 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.884243011 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.884247065 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.884257078 CET	52680	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.884259939 CET	443	52680	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.884414911 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.884428978 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.886342049 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.886349916 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.886435032 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.886529922 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.886539936 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.887156010 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.887165070 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:20.887219906 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.887301922 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:20.887319088 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.387186050 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.387207985 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.387665033 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.387665987 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.387674093 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.387689114 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.388108015 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.388113022 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.388164997 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.388169050 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.396749973 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.397032976 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.397058010 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.397363901 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.397370100 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.398334980 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.398427963 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.398571968 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.398585081 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.398674965 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.398682117 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.398963928 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.398967981 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.399005890 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.399009943 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480215073 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480254889 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480328083 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.480542898 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.480556965 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480566978 CET	52683	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.480572939 CET	443	52683	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480932951 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480947971 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.480998039 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.481013060 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.481132984 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.481143951 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.481151104 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.481234074 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.481254101 CET	443	52684	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.481292963 CET	52684	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483316898 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483333111 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.483369112 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483397961 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.483406067 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483449936 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483550072 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483558893 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.483571053 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.483583927 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.489415884 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.489526987 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.489579916 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.489624023 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.489640951 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.489651918 CET	52685	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.489658117 CET	443	52685	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.490824938 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.490942001 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.490993977 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491029978 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491041899 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.491046906 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.491053104 CET	52686	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491055965 CET	443	52686	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.491691113 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.491744995 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491852045 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491857052 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.491863966 CET	52687	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.491867065 CET	443	52687	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.492203951 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.492213011 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.492268085 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.492413044 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.492424011 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.493283033 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493289948 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.493359089 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493458033 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493472099 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.493551016 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493571043 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.493626118 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493741035 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.493753910 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.998150110 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.998590946 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.998605013 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:21.999238014 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:21.999243021 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.001132965 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.001432896 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.001441956 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.001929998 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.001935005 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.007925034 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.007961988 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.008349895 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.008364916 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.008388996 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.008394957 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.008862019 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.008867025 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.008940935 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.008944035 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.009473085 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.009756088 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.009787083 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.010068893 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.010073900 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.092895985 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.092937946 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.092988968 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.093173027 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.093180895 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.093192101 CET	52688	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.093195915 CET	443	52688	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.095858097 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.095879078 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.095957994 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.096112013 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.096122980 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112266064 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112283945 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112323999 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112327099 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112382889 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112382889 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112495899 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112495899 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112504005 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112517118 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112529993 CET	52689	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112529993 CET	52691	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112534046 CET	443	52689	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112533092 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112541914 CET	443	52691	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112581015 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112607956 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112621069 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112654924 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112699986 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112724066 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112732887 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.112741947 CET	52690	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.112746954 CET	443	52690	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.113606930 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.113606930 CET	52692	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.113620043 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.113631964 CET	443	52692	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.115300894 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115322113 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.115376949 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115390062 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115398884 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.115443945 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115587950 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115600109 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.115686893 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.115695953 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.116245031 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116267920 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.116328955 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116441965 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116453886 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.116569042 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116595984 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.116651058 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116727114 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.116738081 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.616030931 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.616720915 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.616746902 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.618036032 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.618041039 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.630343914 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.630708933 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.630714893 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.631742001 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.631851912 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.631855965 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.631989956 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.632018089 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.632169008 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.632327080 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.632488966 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.632497072 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.632832050 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.632846117 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.632982969 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.633002043 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.633203983 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.633208990 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.634143114 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.634152889 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.710089922 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.710131884 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.710186005 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.710557938 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.710573912 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.710602045 CET	52693	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.710607052 CET	443	52693	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.715620995 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.715647936 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.715747118 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.715881109 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.715895891 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.723292112 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.723310947 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.723345041 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.723367929 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.723402023 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.723730087 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.723733902 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.723786116 CET	52695	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.723788977 CET	443	52695	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724843025 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724879026 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724908113 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724920988 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.724931002 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724966049 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.724971056 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.724997997 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725271940 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725284100 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725308895 CET	52694	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725313902 CET	443	52694	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725481033 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725495100 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725507975 CET	52696	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725512981 CET	443	52696	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725651979 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725699902 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725745916 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725943089 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.725953102 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.725997925 CET	52697	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.726002932 CET	443	52697	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.729075909 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.729089022 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.729145050 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.729631901 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.729643106 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.729844093 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.729866028 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.729927063 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730021954 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730036020 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.730300903 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730329037 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.730389118 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730647087 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730654001 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.730705976 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730809927 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730811119 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:22.730822086 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:22.730824947 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.229521990 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.229959965 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.229980946 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.230410099 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.230416059 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.246912956 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247236967 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247356892 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247479916 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.247482061 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247492075 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247531891 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.247543097 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.247893095 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.247898102 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.248007059 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.248012066 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.248233080 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.248248100 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.248289108 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.248296976 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.248728991 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.248733044 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.248795986 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.248799086 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.322762966 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.322803974 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.322849989 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.323081017 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.323098898 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.323108912 CET	52698	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.323113918 CET	443	52698	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.327449083 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.327465057 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.327548027 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.327693939 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.327703953 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340331078 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340414047 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340414047 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340468884 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340502024 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340533972 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340539932 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340574026 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340672970 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340684891 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340712070 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340713978 CET	52702	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340718985 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340719938 CET	443	52702	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.340751886 CET	52701	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.340755939 CET	443	52701	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341283083 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341341972 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341391087 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341698885 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341706038 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341727972 CET	52699	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341732025 CET	443	52699	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341752052 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341795921 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341837883 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341969013 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341973066 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.341980934 CET	52700	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.341984034 CET	443	52700	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.344683886 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.344710112 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.344803095 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.345627069 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.345642090 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.345691919 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.345943928 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.345956087 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.346332073 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.346343994 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.346543074 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.346550941 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.346600056 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.346693993 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.346703053 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.347093105 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.347100019 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.347161055 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.347240925 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.347245932 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.841583967 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.842335939 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.842354059 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.843625069 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.843630075 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.859539986 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.860363007 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.860379934 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.861480951 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.861485958 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.861745119 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.861829042 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.862139940 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.862143040 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.862155914 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.862155914 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.862468958 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.862713099 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.862718105 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.862802029 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.862808943 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.863146067 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.863151073 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.863435030 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.863439083 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.937825918 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.937866926 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.938031912 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.939049006 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.939058065 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.939074993 CET	52703	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.939079046 CET	443	52703	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.942660093 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.942697048 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.942770004 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.942930937 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.942945957 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.952336073 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.952430964 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.952482939 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.952661037 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.952661037 CET	52705	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.952672005 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.952678919 CET	443	52705	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.953979969 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954595089 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954633951 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954651117 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.954684973 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.954730034 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.954734087 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954746008 CET	52707	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.954750061 CET	443	52707	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954812050 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954854012 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.954896927 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955199957 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955224991 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955269098 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955279112 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955311060 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955363989 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955394030 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955462933 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955538988 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955545902 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955578089 CET	52704	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955586910 CET	443	52704	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955672026 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955684900 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955707073 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955709934 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.955720901 CET	52706	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.955724001 CET	443	52706	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.957777977 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.957787991 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.957865000 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.958091021 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.958098888 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.958148956 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.958240032 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.958252907 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.958328962 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.958338976 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.959124088 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.959157944 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:23.959222078 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.959317923 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:23.959328890 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.456239939 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.457077980 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.457093000 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.458431959 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.458436966 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.468133926 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.468533993 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.468554020 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.469773054 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.469779015 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.471669912 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.471996069 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.472007990 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.472166061 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.472407103 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.472429991 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.472845078 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.472853899 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.473265886 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.473270893 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.475337982 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.475641012 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.475649118 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.476094961 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.476099968 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.549619913 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.549666882 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.549729109 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.549918890 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.549932003 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.549954891 CET	52708	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.549961090 CET	443	52708	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.553625107 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.553644896 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.553708076 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.553831100 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.553843021 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.560452938 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.560525894 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.560574055 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.560717106 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.560728073 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.560777903 CET	52709	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.560782909 CET	443	52709	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.563775063 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.563802958 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.563864946 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.563982964 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.563997030 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.564713955 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.564768076 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.564810991 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.565119028 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.565124989 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.565174103 CET	52712	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.565177917 CET	443	52712	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567514896 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567538023 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567567110 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567584991 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.567610025 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.567796946 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567846060 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567888975 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.567982912 CET	52711	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.567984104 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.567987919 CET	443	52711	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.567989111 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.568001986 CET	52710	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.568006039 CET	443	52710	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.569708109 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.569717884 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.569780111 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.570142984 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.570149899 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.571033955 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.571063995 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.571126938 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.571238995 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.571259022 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.572176933 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.572204113 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:24.572267056 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.572361946 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:24.572376966 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.067975998 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.068566084 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.068577051 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.069061995 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.069066048 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.078289032 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.078547001 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.078567028 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.079082966 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.079087973 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.082447052 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.082447052 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.082732916 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.082739115 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.082850933 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.082869053 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.083169937 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.083173990 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.083353996 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.083359957 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.084110022 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.084367037 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.084388018 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.084820986 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.084825993 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.163259029 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.163307905 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.163465023 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.163536072 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.163544893 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.163557053 CET	52713	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.163561106 CET	443	52713	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.166543961 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.166569948 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.166655064 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.166786909 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.166800022 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.172261000 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.172514915 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.172552109 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.172566891 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.172600031 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.172643900 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.172658920 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.172667980 CET	52714	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.172673941 CET	443	52714	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.174840927 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.174856901 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.174916983 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.175025940 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.175034046 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179106951 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179172039 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179219007 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.179332972 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.179336071 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179358959 CET	52715	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.179363012 CET	443	52715	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179845095 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179948092 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.179992914 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.180077076 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.180082083 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.180104971 CET	52717	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.180108070 CET	443	52717	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.180665970 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.180792093 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.180839062 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.181008101 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.181015015 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.181025982 CET	52716	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.181030035 CET	443	52716	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.182014942 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182024956 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.182076931 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182281971 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182291031 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.182776928 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182796955 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.182858944 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182975054 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.182988882 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.183331966 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.183339119 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.183398008 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.183489084 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.183499098 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.680063963 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.680583954 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.680608988 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.681185007 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.681190968 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.686868906 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.687216997 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.687239885 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.688324928 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.688330889 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.694772959 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.695183039 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.695205927 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.696012974 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.696284056 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.696310997 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.696367979 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.696374893 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.696755886 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.696760893 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.773102045 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.773132086 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.773163080 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.773289919 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.773289919 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.773406982 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.773420095 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.773428917 CET	52718	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.773433924 CET	443	52718	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.777759075 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.777786970 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.777863979 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.778014898 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.778028011 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.780960083 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.781012058 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.781059027 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.781303883 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.781313896 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.781335115 CET	52719	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.781339884 CET	443	52719	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.785713911 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.785727978 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.785830975 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.785958052 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.785968065 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.788317919 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.788543940 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.788594961 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.788620949 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.788630962 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.788639069 CET	52721	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.788642883 CET	443	52721	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.788985014 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.789016962 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.789057016 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.789061069 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.789132118 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.789417028 CET	52722	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.789422989 CET	443	52722	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.791652918 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.791671038 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.791732073 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.791857004 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.791870117 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.792627096 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.792639017 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:25.792695045 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.792783976 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:25.792793989 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.290173054 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.290792942 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.290818930 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.292186975 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.292192936 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.299599886 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.299887896 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.299899101 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.300271034 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.300276995 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.304809093 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.305030107 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.305039883 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.305218935 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.305438042 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.305444002 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.305813074 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.305814981 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.305818081 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.305819988 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.384208918 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.384251118 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.384320021 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.384650946 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.384650946 CET	52723	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.384669065 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.384677887 CET	443	52723	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.389635086 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.389667988 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.389754057 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.389923096 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.389936924 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.392855883 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.392879009 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.392915964 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.392919064 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.392963886 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.393291950 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.393300056 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.393352032 CET	52724	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.393357038 CET	443	52724	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.397680998 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.397703886 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.397777081 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.397914886 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.397927046 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398546934 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398673058 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398705959 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398720026 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.398750067 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.398750067 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398803949 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398811102 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.398818016 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398827076 CET	52725	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.398832083 CET	443	52725	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.398847103 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.399127007 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.399131060 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.399168015 CET	52726	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.399172068 CET	443	52726	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.401705980 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.401736975 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.401808023 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.401918888 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.401931047 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.403397083 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.403403997 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.403466940 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.403564930 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.403579950 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.902870893 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.903568029 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.903584957 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.904820919 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.904827118 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.909849882 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.910209894 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.910219908 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.911317110 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.911322117 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.912245989 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.912552118 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.912559986 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.913634062 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.913638115 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.915009975 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.915308952 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.915318966 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.916377068 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.916382074 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.995718956 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.995784998 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.995933056 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.995978117 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.995991945 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:26.996001005 CET	52727	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:26.996006012 CET	443	52727	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.000227928 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.000238895 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.000313044 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.000463963 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.000471115 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.002260923 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.002321005 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.002357960 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.002366066 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.002403975 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.002599001 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.002605915 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.002635002 CET	52728	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.002640009 CET	443	52728	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006212950 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006241083 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006253958 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006325006 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006330967 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006376028 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006489038 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006496906 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006505013 CET	52729	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006508112 CET	443	52729	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.006551027 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.006565094 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008392096 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008692026 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008733988 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008790970 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008821964 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008858919 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008866072 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008903980 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008960962 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008965015 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.008985996 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008990049 CET	52730	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.008992910 CET	443	52730	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.009006023 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.011157990 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.011166096 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.011231899 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.011358023 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.011368036 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.443231106 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.444005013 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.444027901 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.445224047 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.445229053 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.512371063 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.512999058 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.513016939 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.514123917 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.514127970 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.517838001 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.518192053 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.518204927 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.519331932 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.519336939 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.531814098 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.532100916 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.532125950 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.532159090 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.532502890 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.532511950 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.532891035 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.532896042 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.533220053 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.533226967 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.535921097 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.535959005 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.536005020 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.536165953 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.536179066 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.536186934 CET	52720	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.536192894 CET	443	52720	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.540574074 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.540605068 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.540690899 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.540838957 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.540854931 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.605930090 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.606072903 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.606123924 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.606195927 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.606201887 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.606216908 CET	52731	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.606220961 CET	443	52731	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.608443022 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.608450890 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.608530998 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.608695030 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.608704090 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.610699892 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.610750914 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.610799074 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.610910892 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.610918045 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.610929966 CET	52732	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.610933065 CET	443	52732	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.613014936 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.613034964 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.613246918 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.613424063 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.613435984 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.624524117 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.624562025 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.624598980 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.624603033 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.624819040 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.624819040 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.624918938 CET	52734	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.624922037 CET	443	52734	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.625294924 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.625365019 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.625411034 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.625643015 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.625650883 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.625663996 CET	52733	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.625669003 CET	443	52733	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.627331972 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.627340078 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.627417088 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.627552986 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.627561092 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.627796888 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.627804995 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:27.627867937 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.627990961 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:27.628000975 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.052087069 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.052767992 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.052791119 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.053883076 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.053889990 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.120518923 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.121099949 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.121114016 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.121593952 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.121598005 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.126530886 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.126791000 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.126802921 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.127263069 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.127269983 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.139622927 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.139868975 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.139880896 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.140429974 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.140433073 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.142168045 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.142390966 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.142405033 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.142889023 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.142893076 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.146039009 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.146173000 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.146225929 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.146246910 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.146261930 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.146270990 CET	52735	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.146275043 CET	443	52735	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.149095058 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.149111986 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.149187088 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.149337053 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.149350882 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.214061975 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.214261055 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.214289904 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.214309931 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.214359999 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.214466095 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.214476109 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.214483976 CET	52736	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.214492083 CET	443	52736	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.216869116 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.216891050 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.216972113 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.217094898 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.217106104 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.219554901 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.219607115 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.219656944 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.219758987 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.219768047 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.219777107 CET	52737	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.219782114 CET	443	52737	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.222024918 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.222035885 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.222096920 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.222199917 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.222212076 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.232748985 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.232830048 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.232878923 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.233041048 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.233041048 CET	52738	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.233046055 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.233052015 CET	443	52738	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.235136032 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.235143900 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.235212088 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.235336065 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.235343933 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.235990047 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.236052036 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.236102104 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.236171961 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.236176014 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.236185074 CET	52739	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.236191034 CET	443	52739	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.238410950 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.238444090 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.238518953 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.238641024 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.238656044 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.661540031 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.662579060 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.662597895 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.663909912 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.663916111 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.729710102 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.730566978 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.730583906 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.731832027 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.731836081 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.733520031 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.734138012 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.734152079 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.735268116 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.735272884 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.746212959 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.746911049 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.746917963 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.748075962 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.748080015 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.751502991 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.752218008 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.752238035 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.753415108 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.753420115 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.755233049 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.755253077 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.755283117 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.755311012 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.755353928 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.755637884 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.755651951 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.755670071 CET	52740	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.755676031 CET	443	52740	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.758639097 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.758671045 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.758733988 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.758858919 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.758871078 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.823148966 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.823196888 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.823298931 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.823719978 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.823728085 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.823785067 CET	52741	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.823790073 CET	443	52741	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.826486111 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.826507092 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.826546907 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.826620102 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.826741934 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.827054024 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.827059984 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.827116013 CET	52742	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.827119112 CET	443	52742	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.830589056 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.830620050 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.830761909 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.831088066 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.831101894 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.833103895 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.833117962 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.833236933 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.833602905 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.833611965 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.840046883 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.840136051 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.840197086 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.840315104 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.840318918 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.840328932 CET	52743	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.840332031 CET	443	52743	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.842468977 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.842498064 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.842566013 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.842714071 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.842729092 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.845191956 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.845259905 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.845319033 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.845407009 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.845416069 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.845427036 CET	52744	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.845431089 CET	443	52744	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.850553989 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.850581884 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:28.850720882 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.851077080 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:28.851090908 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.271138906 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.271687984 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.271703005 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.272967100 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.272972107 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.344940901 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.345201015 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.345592976 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.345616102 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.345716953 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.345726013 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.345954895 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.345959902 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.347054958 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.347064972 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.354517937 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.354882956 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.354893923 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.355994940 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.355999947 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.364916086 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.364958048 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.365010023 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.365381956 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.365389109 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.365415096 CET	52745	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.365422964 CET	443	52745	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.368216038 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.368643999 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.368657112 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.369715929 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.369736910 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.369805098 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.369909048 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.369913101 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.369988918 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.369995117 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.437695026 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.437764883 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.437959909 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.438179970 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.438258886 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.438308001 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.441883087 CET	52747	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.441888094 CET	443	52747	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.443142891 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.443164110 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.443173885 CET	52746	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.443180084 CET	443	52746	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.446109056 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.446122885 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.446192026 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.446614981 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.446625948 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.447331905 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.447340965 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.447407961 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.447535992 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.447545052 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.448508024 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.448554039 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.448643923 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.448776007 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.448791027 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.448801041 CET	52748	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.448806047 CET	443	52748	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.451060057 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.451086044 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.451152086 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.451293945 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.451317072 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.667886019 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.667967081 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.668070078 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.668169022 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.668178082 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.668214083 CET	52749	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.668220043 CET	443	52749	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.672029018 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.672045946 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.672127962 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.672264099 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.672275066 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.882584095 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.883296967 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.883320093 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.884545088 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.884551048 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.958486080 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.959218025 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.959224939 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.959511995 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.959765911 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.959777117 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.960211992 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.960217953 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.960503101 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.960506916 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.961721897 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.962090015 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.962117910 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.963238955 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.963244915 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.975364923 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.975383997 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.975411892 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.975441933 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.975642920 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.975832939 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.975842953 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.975884914 CET	52750	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.975889921 CET	443	52750	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.980777025 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.980803967 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:29.980876923 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.981014967 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:29.981029034 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052174091 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052228928 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052273989 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.052443981 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.052449942 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052478075 CET	52752	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.052481890 CET	443	52752	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052659988 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052781105 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.052834034 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.053041935 CET	52751	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.053047895 CET	443	52751	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.054580927 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.054698944 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.054744005 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.054863930 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.054877043 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.054888010 CET	52753	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.054892063 CET	443	52753	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.057272911 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.057285070 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.057360888 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.057852983 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.057869911 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.057915926 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058044910 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058056116 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.058376074 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058388948 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.058808088 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058814049 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.058866024 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058970928 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.058979988 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.186218977 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.187278986 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.187293053 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.188704967 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.188709974 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.280128002 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.280145884 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.280185938 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.280205011 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.280369997 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.280437946 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.280442953 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.280453920 CET	52754	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.280457020 CET	443	52754	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.283608913 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.283628941 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.283693075 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.283823013 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.283834934 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.571224928 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.571494102 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.571772099 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.571788073 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.571800947 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.571809053 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.571882010 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.572352886 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.572365999 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.572734118 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.572738886 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.572804928 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.572808981 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.573164940 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.573169947 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664211988 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664251089 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664295912 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664402962 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.664402962 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.664542913 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.664551973 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664562941 CET	52758	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.664566994 CET	443	52758	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664940119 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.664995909 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.665030956 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.665040970 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.665076971 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.665539026 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.665637016 CET	52756	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.665641069 CET	443	52756	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.665745020 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.665791988 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.666446924 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.666455030 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.666471958 CET	52757	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.666476011 CET	443	52757	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.668646097 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.668673038 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.668732882 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.669589043 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.669617891 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.669684887 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.669747114 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.669759989 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.669850111 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.669862986 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.670831919 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.670840025 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.670897961 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.670977116 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:30.670984983 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:30.751878023 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:03:30.751889944 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:03:31.002824068 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.003654003 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.003669977 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.004952908 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.004957914 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.095292091 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.095397949 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.095568895 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.095642090 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.095654011 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.095664024 CET	52759	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.095669031 CET	443	52759	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.098457098 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.098479033 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.098552942 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.098699093 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.098711014 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.183706045 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184135914 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.184137106 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184145927 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184216022 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184504032 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.184519053 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184746027 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.184751034 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.184829950 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.184834003 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.185097933 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.185105085 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.185441017 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.185448885 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.276951075 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.276988983 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277030945 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277036905 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277055979 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277074099 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277081013 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277112007 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277122021 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277153969 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277290106 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277296066 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277307987 CET	52762	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277307987 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277312040 CET	443	52762	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277314901 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.277342081 CET	52761	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.277345896 CET	443	52761	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279289961 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279325962 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279376030 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.279383898 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279403925 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279444933 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.279877901 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.279897928 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.279963017 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280031919 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280035973 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.280044079 CET	52760	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280047894 CET	443	52760	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.280112982 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280124903 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.280277014 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280313015 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.280369043 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280486107 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.280500889 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.282388926 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.282397032 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.282461882 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.282589912 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.282596111 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.612734079 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.613336086 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.613353014 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.613845110 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.613850117 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.707950115 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.708039045 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.708116055 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.708678007 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.708678007 CET	52763	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.708688021 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.708697081 CET	443	52763	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.714596033 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.714628935 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.714759111 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.715105057 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.715117931 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.792119980 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.793085098 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.793096066 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.793101072 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.793776035 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.793781042 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.794323921 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.794327974 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.795001030 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.795236111 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.795239925 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.795790911 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.795800924 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.796974897 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.796979904 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.885449886 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.885471106 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.885499001 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.885576010 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.885765076 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.885986090 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.886068106 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.886266947 CET	52766	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.886274099 CET	443	52766	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.886305094 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.886308908 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.886379004 CET	52764	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.886383057 CET	443	52764	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.889548063 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.889755964 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.889836073 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.890187979 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.890202045 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.890254021 CET	52765	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.890259981 CET	443	52765	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.894056082 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.894088030 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.894243002 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.894896984 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.894907951 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.895920038 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.895960093 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.896105051 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.896215916 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.896230936 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.896732092 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.896739006 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:31.896800041 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.896933079 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:31.896941900 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.227293968 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.228142023 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.228172064 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.229394913 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.229399920 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.321377993 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.321429014 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.321476936 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.321630955 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.321645975 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.321655989 CET	52767	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.321660995 CET	443	52767	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.326113939 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.326148033 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.326241970 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.326386929 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.326400995 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.406954050 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.407428980 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.407449961 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.408694029 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.408873081 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.408878088 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.408953905 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.409208059 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.409224987 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.409342051 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.409353018 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.409619093 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.409625053 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.410640001 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.410644054 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.499919891 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.499963999 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.500111103 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.500154972 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.500164986 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.500174999 CET	52768	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.500180006 CET	443	52768	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.500910044 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.500997066 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.501028061 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.501044989 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.501085043 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.501164913 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.501168013 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.501177073 CET	52770	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.501183033 CET	443	52770	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.503171921 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.503201962 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.503282070 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.503634930 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.503647089 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.504035950 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.504060984 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.504139900 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.504255056 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.504270077 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.505851984 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.505971909 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.506020069 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.506021976 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.506067038 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.506110907 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.506124973 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.506134987 CET	52769	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.506139994 CET	443	52769	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.509102106 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.509109020 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.509171963 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.509280920 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.509290934 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.839690924 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.840365887 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.840393066 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.840879917 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.840883970 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.935117960 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.935190916 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.935336113 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.935655117 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.935655117 CET	52771	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.935671091 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.935678005 CET	443	52771	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.940139055 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.940171003 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:32.940246105 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.940416098 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:32.940431118 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.017326117 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.017875910 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.018002987 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.018028021 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.018150091 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.018167019 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.018707037 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.018712044 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.019469023 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.019475937 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.022197962 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.022536993 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.022542953 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.023663998 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.023667097 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.111835003 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.111838102 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.111882925 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.111923933 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.111931086 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.111968040 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.112102032 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.112117052 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.112127066 CET	52773	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.112132072 CET	443	52773	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.112425089 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.112435102 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.112458944 CET	52772	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.112462997 CET	443	52772	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.115003109 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.115026951 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.115123987 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.115236998 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.115250111 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.116349936 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.116405964 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.116451979 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.116763115 CET	52774	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.116766930 CET	443	52774	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.117074013 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.117101908 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.117172003 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.117415905 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.117427111 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.120568037 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.120575905 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.120640039 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.120769024 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.120778084 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.453465939 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.454204082 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.454217911 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.455393076 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.455396891 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.546650887 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.546714067 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.546875000 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.546895981 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.546907902 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.546919107 CET	52775	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.546924114 CET	443	52775	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.552068949 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.552095890 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.552187920 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.552541018 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.552553892 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.628806114 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.629000902 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.629235983 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.629244089 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.629450083 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.629461050 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.629709005 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.629713058 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.630085945 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.630091906 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.632154942 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.632438898 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.632452965 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.632909060 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.632913113 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.721976042 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.722001076 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.722043037 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.722176075 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.722176075 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.722260952 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.722275972 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.722285032 CET	52776	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.722287893 CET	443	52776	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.723397017 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.723926067 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.723984003 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.724137068 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.724144936 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.724168062 CET	52777	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.724173069 CET	443	52777	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.724977016 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725001097 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725059032 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725208998 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725333929 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725363016 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725377083 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725411892 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725482941 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725495100 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725508928 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725517988 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.725528002 CET	52778	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.725531101 CET	443	52778	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.727060080 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.727102995 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.727168083 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.727552891 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.727566957 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.728996038 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.729003906 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.729072094 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.729221106 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.729228973 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.938725948 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.939260006 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.939280033 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:33.939958096 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:33.939964056 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.032315016 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.032331944 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.032360077 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.032485962 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.032485962 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.032612085 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.032625914 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.032634974 CET	52755	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.032640934 CET	443	52755	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.035392046 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.035415888 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.035495043 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.035640001 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.035653114 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.065063953 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.065582991 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.065599918 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.066028118 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.066032887 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.157735109 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.157793045 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.157900095 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.158207893 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.158207893 CET	52779	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.158216000 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.158224106 CET	443	52779	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.160485983 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.160497904 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.160566092 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.160697937 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.160716057 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.238601923 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.239326954 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.240437031 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.242223978 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.242242098 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.246645927 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.246650934 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.247076035 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.247081041 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.247102976 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.247128010 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.247474909 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.247478962 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.247724056 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.247730017 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.335021019 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.335072041 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.335112095 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.335125923 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.335163116 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.335329056 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.335338116 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.335349083 CET	52780	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.335352898 CET	443	52780	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.336340904 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.336467981 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.336518049 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.336541891 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.336558104 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.336568117 CET	52781	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.336572886 CET	443	52781	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.337255001 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.337274075 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.337300062 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.337333918 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.337371111 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.337905884 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.337908983 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.337917089 CET	52782	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.337919950 CET	443	52782	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.338160038 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.338182926 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.338247061 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.338898897 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.338911057 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.339189053 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.339212894 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.339278936 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.339391947 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.339404106 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.340491056 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.340497971 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.340559959 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.340682983 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.340692043 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.547489882 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.548299074 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.548327923 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.549590111 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.549597025 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.641915083 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.642002106 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.642160892 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.642211914 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.642234087 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.642246008 CET	52783	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.642251968 CET	443	52783	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.646822929 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.646842003 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.646920919 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.647083998 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.647098064 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.673779964 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.674581051 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.674599886 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.675029993 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.675035954 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.766813040 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.766830921 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.766890049 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.767085075 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.767151117 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.767164946 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.767177105 CET	52784	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.767183065 CET	443	52784	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.771215916 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.771245003 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.771328926 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.771454096 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.771465063 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.854424953 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.854650021 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.854798079 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.854973078 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.854973078 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.854980946 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.854994059 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.855371952 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.855376959 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.855570078 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.855582952 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.855926037 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.855931044 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.856383085 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.856386900 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947860956 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947882891 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947904110 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947925091 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947942019 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947945118 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947954893 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.947968006 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948018074 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948054075 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.948082924 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948093891 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948226929 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948235989 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.948244095 CET	52785	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.948246956 CET	443	52785	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.949184895 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.949197054 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.949207067 CET	52786	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.949213028 CET	443	52786	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.955698967 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.955703974 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.955722094 CET	52787	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.955724955 CET	443	52787	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.958225965 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958251953 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.958296061 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958306074 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.958334923 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958359003 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958477974 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958492041 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.958570004 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.958580017 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.958977938 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.959016085 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:34.959079027 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.959223032 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:34.959239006 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.164155960 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.164618015 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.164633036 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.165040970 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.165046930 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.257473946 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.257499933 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.257530928 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.257555008 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.257596970 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.257719040 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.257734060 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.257744074 CET	52788	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.257749081 CET	443	52788	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.263170004 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.263201952 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.263274908 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.263642073 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.263653040 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.284282923 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.284704924 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.284722090 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.285196066 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.285202026 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.389065027 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.389117002 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.389163971 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.389295101 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.389302015 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.389316082 CET	52789	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.389319897 CET	443	52789	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.391776085 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.391814947 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.391872883 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.391983032 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.391997099 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.481743097 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.482079983 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.482091904 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.482203960 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.482310057 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.482543945 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.482558966 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.482677937 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.482682943 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.483026028 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.483032942 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.483177900 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.483182907 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.483591080 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.483596087 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575642109 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575661898 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575691938 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575754881 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575829983 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575829983 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575829983 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575861931 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575869083 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575896978 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575963974 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575968981 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.575979948 CET	52791	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.575984001 CET	443	52791	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.576069117 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.576078892 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.576087952 CET	52790	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.576092005 CET	443	52790	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.578406096 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578418970 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.578484058 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578600883 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578613043 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.578741074 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578767061 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.578819990 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578902960 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.578929901 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.641422987 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.641464949 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.641609907 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.641813993 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.641824007 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.641838074 CET	52792	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.641843081 CET	443	52792	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.644793034 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.644814014 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.644892931 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.645071030 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.645085096 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.774842978 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.775403023 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.775412083 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.775899887 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.775903940 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.869982004 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.870034933 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.870079041 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.870208025 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.870215893 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.870227098 CET	52793	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.870232105 CET	443	52793	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.872855902 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.872879028 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.872961044 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.873110056 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.873122931 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.904520988 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.904854059 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.904880047 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.905518055 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.905523062 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.997680902 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.997884035 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.997920990 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:35.997941017 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.998099089 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.998099089 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:35.998099089 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.000503063 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.000515938 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.000583887 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.000700951 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.000710964 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.091275930 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.091770887 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.091779947 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.092108011 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.092113018 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.092231989 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.092691898 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.092709064 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.093211889 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.093216896 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.157080889 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.157478094 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.157493114 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.157999039 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.158003092 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.195965052 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196028948 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196078062 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196216106 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196221113 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196249008 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196254015 CET	52795	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196258068 CET	443	52795	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196294069 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196341991 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196523905 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196523905 CET	52796	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.196542025 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.196551085 CET	443	52796	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.199799061 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.199807882 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.199862003 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.199980021 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.199999094 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.200052977 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.200130939 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.200139999 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.200304031 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.200318098 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.251106024 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.251122952 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.251152039 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.251171112 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.251202106 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.251357079 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.251363039 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.251372099 CET	52797	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.251375914 CET	443	52797	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.253712893 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.253720045 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.253779888 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.253917933 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.253926992 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.298717976 CET	52794	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.298741102 CET	443	52794	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.386727095 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.387223959 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.387243032 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.387799978 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.387806892 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.480709076 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.480763912 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.480926037 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.480983973 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.480983973 CET	52798	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.480997086 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.481005907 CET	443	52798	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.483897924 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.483915091 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.484000921 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.484177113 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.484189987 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.513120890 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.513535023 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.513544083 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.513973951 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.513978958 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.606072903 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.606132984 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.606339931 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.606398106 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.606405973 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.606414080 CET	52799	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.606419086 CET	443	52799	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.608840942 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.608860970 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.608930111 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.609061956 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.609071970 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.712412119 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.712897062 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.712912083 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.713337898 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.713478088 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.713483095 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.713602066 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.713612080 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.714060068 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.714065075 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.768701077 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.769068003 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.769073963 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.769591093 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.769593954 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.805900097 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.805922985 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.805957079 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.805968046 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.806010962 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.806176901 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.806185961 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.806199074 CET	52800	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.806201935 CET	443	52800	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.806858063 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.806951046 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.807003021 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.807054996 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.807063103 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.807085991 CET	52801	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.807090998 CET	443	52801	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.808743000 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.808778048 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.808844090 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.809020996 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.809029102 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.809207916 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.809221983 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.809293032 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.809415102 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.809425116 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.864892960 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.864943981 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.864970922 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.865003109 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.865035057 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.865190029 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.865195036 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.865202904 CET	52802	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.865206003 CET	443	52802	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.867508888 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.867537975 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.867613077 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.867748022 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.867764950 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.995884895 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.996289015 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.996301889 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:36.996876955 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:36.996881962 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.089000940 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.089040041 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.089091063 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.089243889 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.089256048 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.089265108 CET	52803	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.089268923 CET	443	52803	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.091583014 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.091613054 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.091692924 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.091836929 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.091849089 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.122591972 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.122972965 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.122988939 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.123363018 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.123367071 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.217232943 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.217278957 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.217325926 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.217461109 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.217469931 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.217478037 CET	52804	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.217482090 CET	443	52804	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.219788074 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.219820976 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.219881058 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.219989061 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.220001936 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.322099924 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.322391987 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.322432995 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.322460890 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.322837114 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.322849989 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.323019028 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.323029995 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.323340893 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.323344946 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.381366014 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.381771088 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.381805897 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.382158995 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.382168055 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.415494919 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.415513039 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.415548086 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.415575027 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.415625095 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.415833950 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.415852070 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.415862083 CET	52805	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.415868998 CET	443	52805	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.417026043 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.417068958 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.417124987 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.417212009 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.417217016 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.417226076 CET	52806	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.417228937 CET	443	52806	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.418603897 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.418622017 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.418714046 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.418807030 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.418818951 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.419337988 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.419370890 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.419444084 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.419626951 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.419639111 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.475792885 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.475843906 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.475927114 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.476085901 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.476109982 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.476123095 CET	52807	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.476130009 CET	443	52807	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.478441954 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.478471041 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.478549957 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.478698015 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.478705883 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.618184090 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.618688107 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.618702888 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.619143009 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.619147062 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.713957071 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.713979006 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.714019060 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.714030027 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.714062929 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.714262962 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.714272022 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.714279890 CET	52808	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.714284897 CET	443	52808	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.716852903 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.716883898 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.716972113 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.717142105 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.717153072 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.737421989 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.737808943 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.737838030 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.738189936 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.738194942 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.835099936 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.835153103 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.835211039 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.835395098 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.835414886 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.835433960 CET	52809	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.835439920 CET	443	52809	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.837852955 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.837866068 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.837935925 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.838068008 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.838078976 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.931751013 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.932279110 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.932286978 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.932702065 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.932706118 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.936585903 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.936853886 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.936885118 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.937164068 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.937170029 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.994112015 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.994590044 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.994607925 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:37.994944096 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:37.994949102 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.026441097 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.026468992 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.026515961 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.026565075 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.026618958 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.026889086 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.026894093 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.026909113 CET	52810	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.026911974 CET	443	52810	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.029846907 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.029877901 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.029978037 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.030153036 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.030170918 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.030668020 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.030721903 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.030776024 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.030878067 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.030894995 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.030909061 CET	52811	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.030914068 CET	443	52811	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.033014059 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.033042908 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.033138037 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.033318996 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.033330917 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.087363958 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.087407112 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.087544918 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.087769985 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.087780952 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.087790966 CET	52812	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.087795019 CET	443	52812	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.090672016 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.090683937 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.090797901 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.090970039 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.090977907 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.229140043 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.229665995 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.229686975 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.230092049 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.230097055 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.322268009 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.322312117 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.322379112 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.322594881 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.322607994 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.322618008 CET	52813	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.322621107 CET	443	52813	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.325329065 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.325370073 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.325459957 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.325645924 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.325660944 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.542169094 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.542711973 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.542725086 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.543117046 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.543122053 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.544852018 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.545123100 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.545149088 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.545396090 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.545402050 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.613692999 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.614228010 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.614238977 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.614511967 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.614516020 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.635210037 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.635267973 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.635411024 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.635528088 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.635539055 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.635548115 CET	52815	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.635552883 CET	443	52815	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638036013 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638053894 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638140917 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638147116 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638288021 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638318062 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638319016 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638328075 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638344049 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638395071 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638456106 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638472080 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.638483047 CET	52816	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.638488054 CET	443	52816	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.640320063 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.640336037 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.640419960 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.640566111 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.640574932 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.707576990 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.707668066 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.707720041 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.707823992 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.707832098 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.707839966 CET	52817	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.707843065 CET	443	52817	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.709904909 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.709927082 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.709985018 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.710141897 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.710150003 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.850847006 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.851404905 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.851438999 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.851824045 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.851830006 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.943564892 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.943586111 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.943615913 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.943692923 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.943733931 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.943975925 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.943999052 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.944009066 CET	52818	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.944014072 CET	443	52818	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.946876049 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.946899891 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:38.946993113 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.947170019 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:38.947181940 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.150218010 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.151159048 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.151181936 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.151590109 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.151596069 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.153249025 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.153609991 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.153631926 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.154035091 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.154043913 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.221978903 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.222570896 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.222595930 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.223090887 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.223097086 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.243294954 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.243360043 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.243453026 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.243825912 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.243825912 CET	52819	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.243839979 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.243848085 CET	443	52819	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.246818066 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.246841908 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.246942997 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.247150898 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.247160912 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.247613907 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.247664928 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.247720957 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.247817993 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.247833014 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.247840881 CET	52820	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.247845888 CET	443	52820	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.249989986 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.250032902 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.250109911 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.250268936 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.250283003 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.321013927 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.321054935 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.321130037 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.321361065 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.321367025 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.321376085 CET	52821	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.321382046 CET	443	52821	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.324321032 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.324350119 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.324470043 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.324641943 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.324652910 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.459851027 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.460426092 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.460449934 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.460827112 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.460830927 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.552774906 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.552809000 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.552845001 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.553008080 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.553144932 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.553160906 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.553170919 CET	52822	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.553175926 CET	443	52822	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.555990934 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.556041956 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.556135893 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.556287050 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.556298971 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.562221050 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.562602997 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.562619925 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.562988043 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.562992096 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.656595945 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.656620026 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.656663895 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.656829119 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.656829119 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.657053947 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.657066107 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.657074928 CET	52814	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.657078981 CET	443	52814	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.659962893 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.659981966 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.660068989 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.660211086 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.660221100 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.758096933 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.758717060 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.758733034 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.759151936 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.759156942 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.763220072 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.763500929 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.763524055 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.763787031 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.763796091 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.837402105 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.838206053 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.838217974 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.838532925 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.838536978 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.854476929 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.854543924 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.854701042 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.854826927 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.854840040 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.854850054 CET	52823	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.854854107 CET	443	52823	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.856513023 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.856569052 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.856622934 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.856823921 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.856848955 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.856859922 CET	52824	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.856864929 CET	443	52824	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.857363939 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.857419968 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.857496977 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.857723951 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.857748032 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.858617067 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.858645916 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.858719110 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.858805895 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.858815908 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.943900108 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.943958998 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.944168091 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.944313049 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.944324970 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.944335938 CET	52825	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.944339991 CET	443	52825	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.947243929 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.947307110 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:39.947406054 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.947603941 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:39.947630882 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.076387882 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.077114105 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.077161074 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.077651978 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.077658892 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.169538021 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.169594049 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.169639111 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.169799089 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.169821978 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.169836998 CET	52826	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.169842005 CET	443	52826	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.172036886 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.172077894 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.172163010 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.172276020 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.172286034 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.174968004 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.175376892 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.175393105 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.175761938 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.175766945 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.268233061 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.268309116 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.268373013 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.268565893 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.268584967 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.268594980 CET	52827	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.268600941 CET	443	52827	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.271684885 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.271734953 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.271830082 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.272006989 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.272020102 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.369754076 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.370371103 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.370404959 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.370820999 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.370826006 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.381478071 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.381900072 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.381932020 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.382256031 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.382261992 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.459062099 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.459701061 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.459764004 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.460133076 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.460139990 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.462688923 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.462778091 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.462860107 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.463190079 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.463208914 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.463247061 CET	52829	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.463253021 CET	443	52829	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.465924025 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.465971947 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.466063976 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.466237068 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.466248035 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.474045038 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.474133015 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.474212885 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.474359989 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.474379063 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.474409103 CET	52828	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.474416018 CET	443	52828	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.476964951 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.477010965 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.477104902 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.477264881 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.477284908 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.552231073 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.552261114 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.552299976 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.552398920 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.552450895 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.552751064 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.552791119 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.552804947 CET	52830	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.552814007 CET	443	52830	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.557538033 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.557557106 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.557687998 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.557884932 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.557893991 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.685480118 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.686342955 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.686359882 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.687711954 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.687716007 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.780745029 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.782237053 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.782301903 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.782375097 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.782392979 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.782402039 CET	52831	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.782407045 CET	443	52831	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.785250902 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.785279989 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.785371065 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.785429001 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.785562038 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.785573006 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.785763025 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.785784006 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.786204100 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.786207914 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.878539085 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.878563881 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.878609896 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.878679991 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.878712893 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.878935099 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.878954887 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.878968954 CET	52832	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.878974915 CET	443	52832	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.883586884 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.883613110 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.883733988 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.883913994 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.883924007 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.978106022 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.978893042 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.978913069 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:40.980108976 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:40.980114937 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.004512072 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.005008936 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.005033970 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.006200075 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.006205082 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.069596052 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.070235014 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.070249081 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.071552992 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.071557999 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.072336912 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.072494030 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.072557926 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.072662115 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.072674036 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.072683096 CET	52833	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.072688103 CET	443	52833	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.077066898 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.077079058 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.077158928 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.077321053 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.077330112 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.099697113 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.111366034 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.111423016 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.111424923 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.111473083 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.111532927 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.111550093 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.111560106 CET	52834	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.111566067 CET	443	52834	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.113961935 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.113995075 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.114064932 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.114186049 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.114201069 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.163844109 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.163887978 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.163933992 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.164066076 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.164069891 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.164082050 CET	52835	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.164084911 CET	443	52835	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.167259932 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.167288065 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.167354107 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.167479992 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.167491913 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.296583891 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.297086000 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.297103882 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.297409058 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.297414064 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.389624119 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.389667034 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.389820099 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.389892101 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.389905930 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.389914989 CET	52836	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.389919043 CET	443	52836	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.392549992 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.392570019 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.392651081 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.392765045 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.392772913 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.398514032 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.398870945 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.398888111 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.399254084 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.399259090 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.496318102 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.496378899 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.496526957 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.496603012 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.496615887 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.496630907 CET	52837	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.496635914 CET	443	52837	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.499330997 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.499355078 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.499444962 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.499596119 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.499607086 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.588927031 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.589411020 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.589416981 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.589715958 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.589719057 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.626287937 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.626617908 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.626626968 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.627013922 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.627017975 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.678431034 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.678774118 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.678787947 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.679125071 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.679128885 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.681643963 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.681751013 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.681782007 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.681801081 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.681835890 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.681875944 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.681880951 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.681895971 CET	52839	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.681899071 CET	443	52839	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.684154034 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.684201956 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.684272051 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.684410095 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.684431076 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.720056057 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.720104933 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.720283985 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.720283985 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.720283985 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.722321033 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.722347021 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.722428083 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.722560883 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.722573042 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.772075891 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.772176027 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.772237062 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.772313118 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.772322893 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.772330999 CET	52841	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.772335052 CET	443	52841	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.774334908 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.774374962 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.774458885 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.774590969 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.774611950 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.907049894 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.907480001 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.907501936 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.907932043 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:41.907941103 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.999706984 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.999723911 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:41.999753952 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.001086950 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.001086950 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.001086950 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.001086950 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.002707958 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.002731085 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.002795935 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.002938032 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.002947092 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.014175892 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.014528990 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.014545918 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.015058994 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.015063047 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.033041954 CET	52840	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.033070087 CET	443	52840	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.112317085 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.112380028 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.112541914 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.112643003 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.112662077 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.112672091 CET	52843	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.112677097 CET	443	52843	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.115324020 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.115345001 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.115439892 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.115641117 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.115653038 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.203176975 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.203687906 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.203720093 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.204325914 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.204344034 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.234276056 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.234714985 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.234735966 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.235153913 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.235160112 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.287033081 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.287493944 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.287520885 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.287906885 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.287921906 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.296531916 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.296552896 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.296608925 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.296611071 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.296672106 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.296870947 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.296902895 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.296919107 CET	52844	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.296926975 CET	443	52844	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.299833059 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.299863100 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.299937010 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.300048113 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.300057888 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.314280987 CET	52842	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.314290047 CET	443	52842	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327193022 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327213049 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327255964 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.327265978 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327286959 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327327013 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.327485085 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.327496052 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.327503920 CET	52845	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.327507973 CET	443	52845	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.330279112 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.330312014 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.330377102 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.330502987 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.330514908 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.379945040 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.379966974 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.380004883 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.380023956 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.380053043 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.380233049 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.380255938 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.380268097 CET	52846	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.380274057 CET	443	52846	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.382982969 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.383013964 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.383081913 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.383213997 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.383229017 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.515763044 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.516438007 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.516452074 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.517076015 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.517080069 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.610210896 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.610234976 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.610287905 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.610424042 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.610424995 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.610572100 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.610589981 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.610599995 CET	52847	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.610604048 CET	443	52847	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.613701105 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.613717079 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.613800049 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.613943100 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.613954067 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.629400969 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.629964113 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.629987955 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.630614996 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.630621910 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.722436905 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.722487926 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.722645044 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.722712040 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.722726107 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.722734928 CET	52848	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.722738981 CET	443	52848	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.725513935 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.725557089 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.725636005 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.725783110 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.725799084 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.812851906 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.813411951 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.813431025 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.813755989 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.813760042 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.842713118 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.843173981 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.843202114 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.843637943 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.843643904 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.895840883 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.896342039 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.896368980 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.896753073 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.896759987 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.907073975 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.907138109 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.907191038 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.907438040 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.907438040 CET	52849	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.907454014 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.907461882 CET	443	52849	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.910269976 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.910284042 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.910346031 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.910465002 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.910475016 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.915371895 CET	53568	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:03:42.920167923 CET	53	53568	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:42.920231104 CET	53568	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:03:42.920250893 CET	53568	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:03:42.925067902 CET	53	53568	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:42.935849905 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.935908079 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.936124086 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.936203003 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.936218977 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.936253071 CET	52850	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.936258078 CET	443	52850	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.938354969 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.938383102 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.938457966 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.938597918 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.938611031 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.988622904 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.988665104 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.988812923 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.988856077 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.988862991 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.988872051 CET	52851	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.988877058 CET	443	52851	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.990933895 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.990951061 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:42.991170883 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.991170883 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:42.991197109 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.130328894 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.131033897 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.131048918 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.131400108 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.131405115 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.229880095 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.229901075 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.229943991 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.229996920 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.230158091 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.230276108 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.230285883 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.230295897 CET	52852	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.230300903 CET	443	52852	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.233182907 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.233217001 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.233304024 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.233467102 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.233479023 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.238821030 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.239188910 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.239212990 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.239594936 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.239598989 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.332684040 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.332710028 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.332784891 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.332808018 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.332954884 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.332997084 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.333091021 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.333105087 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.333112955 CET	52853	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.333117962 CET	443	52853	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.336150885 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.336178064 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.336263895 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.336417913 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.336431026 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.338051081 CET	53	53568	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:43.338351965 CET	53568	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:03:43.344697952 CET	53	53568	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:43.344763041 CET	53568	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:03:43.425080061 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.425671101 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.425683022 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.426115990 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.426121950 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.452858925 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.453330040 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.453346968 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.453706026 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.453711987 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.505987883 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.506447077 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.506464958 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.506841898 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.506846905 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.549285889 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.549304962 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.549351931 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.549356937 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.549406052 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.549607992 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.549623966 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.549633026 CET	53569	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.549638033 CET	443	53569	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.552373886 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.552403927 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.552490950 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.552640915 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.552653074 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.601962090 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.601985931 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602000952 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602067947 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602085114 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602134943 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602313995 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602365017 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602375984 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602404118 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602475882 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602488041 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.602497101 CET	52854	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.602499962 CET	443	52854	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.606044054 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.606084108 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.606156111 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.606295109 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.606307983 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.675364971 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.675385952 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.675400972 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.675473928 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.675488949 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.675530910 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.675556898 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.682558060 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.682599068 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.682620049 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.682622910 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.682658911 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.682780981 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.682790041 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.682826042 CET	53570	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.682830095 CET	443	53570	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.685520887 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.685539007 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.685627937 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.685772896 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.685786009 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.750104904 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.750580072 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.750597000 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.750920057 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.750924110 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.844186068 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.844203949 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.844242096 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.844377995 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.844377995 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.844480991 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.844486952 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.844496965 CET	53571	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.844500065 CET	443	53571	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.846853971 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.846887112 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.846957922 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.847057104 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.847069979 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.849610090 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.849956989 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.849982023 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.850344896 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.850349903 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.944243908 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.944267035 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.944390059 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.944425106 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.944443941 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.944483995 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.944494009 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.944505930 CET	53572	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.944510937 CET	443	53572	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.946728945 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.946743011 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:43.946819067 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.946935892 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:43.946945906 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.067347050 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.067749023 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.067786932 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.068217039 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.068226099 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.121548891 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.122008085 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.122019053 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.122314930 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.122319937 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.160157919 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.160250902 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.160298109 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.160377979 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.160398960 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.160410881 CET	53574	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.160415888 CET	443	53574	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.162959099 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.162993908 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.163062096 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.163184881 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.163198948 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.204798937 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.206021070 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.206051111 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.206692934 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.206698895 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.215379953 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.215451002 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.215497017 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.215574980 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.215590000 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.215599060 CET	53575	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.215605021 CET	443	53575	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.217952967 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.217993975 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.218056917 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.218168974 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.218183041 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.304359913 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.304406881 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.304456949 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.304738998 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.304738998 CET	53576	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.304753065 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.304760933 CET	443	53576	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.306797028 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.306829929 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.306910038 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.307039976 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.307054996 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.369627953 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.370081902 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.370101929 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.370383978 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.370388985 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.458688974 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.459043026 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.459064007 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.459453106 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.459458113 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.463433981 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.463550091 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.463604927 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.463634014 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.463646889 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.463666916 CET	53577	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.463673115 CET	443	53577	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.465925932 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.465955973 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.466046095 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.466186047 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.466197014 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.551016092 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.551038980 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.551074028 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.551197052 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.551197052 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.551220894 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.551232100 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.551239967 CET	53578	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.551245928 CET	443	53578	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.677301884 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.677751064 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.677767992 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.678232908 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.678236961 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.729743004 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.730135918 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.730153084 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.730536938 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.730542898 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.770287991 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.770338058 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.770483017 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.770529032 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.770544052 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.770553112 CET	53579	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.770558119 CET	443	53579	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.818876028 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.819319963 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.819334984 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.819634914 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.819641113 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.825529099 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.825597048 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.825648069 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.825711966 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.825722933 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.825737000 CET	53580	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.825741053 CET	443	53580	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.911328077 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.911365032 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.911416054 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.915359974 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.915379047 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.915389061 CET	53581	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.915395021 CET	443	53581	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.979649067 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.980097055 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.980104923 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:44.980530024 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:44.980534077 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:45.071878910 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:45.071954966 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:45.072010040 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:45.072118998 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:45.072129011 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:45.072139025 CET	53582	443	192.168.2.4	13.107.246.45
Nov 11, 2024 07:03:45.072144032 CET	443	53582	13.107.246.45	192.168.2.4
Nov 11, 2024 07:03:45.206408978 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.206438065 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.206628084 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.206768036 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.206780910 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.631803036 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.632090092 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.632103920 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.633136988 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.633342028 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.633661032 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.633661032 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.633719921 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.673643112 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.673651934 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.720540047 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.752533913 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.752763033 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.752799034 CET	443	53583	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.752860069 CET	53583	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.752990961 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:03:45.753071070 CET	443	49763	108.179.211.77	192.168.2.4
Nov 11, 2024 07:03:45.753134012 CET	49763	443	192.168.2.4	108.179.211.77
Nov 11, 2024 07:03:45.753310919 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.753329992 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.753391981 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.753583908 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:45.753595114 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:45.932858944 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:45.932884932 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:45.932961941 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:45.933190107 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:45.933202028 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:46.178026915 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.178314924 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.178327084 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.179208040 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.179272890 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.179553986 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.179608107 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.179688931 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.179699898 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.220597029 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.300276995 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.300571918 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.300600052 CET	443	53584	35.190.80.1	192.168.2.4
Nov 11, 2024 07:03:46.300664902 CET	53584	443	192.168.2.4	35.190.80.1
Nov 11, 2024 07:03:46.533135891 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:46.533415079 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:46.533442974 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:46.533776045 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:46.534066916 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:46.534121037 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:46.580054998 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:56.524837017 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:56.524904966 CET	443	53585	172.217.16.196	192.168.2.4
Nov 11, 2024 07:03:56.524976015 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:57.602818966 CET	53585	443	192.168.2.4	172.217.16.196
Nov 11, 2024 07:03:57.602844000 CET	443	53585	172.217.16.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 11, 2024 07:02:28.053630114 CET	60140	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:33.790421963 CET	138	138	192.168.2.4	192.168.2.255
Nov 11, 2024 07:02:41.390467882 CET	53	56156	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:41.413908958 CET	64126	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:41.414119005 CET	52998	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:41.422266006 CET	53	53386	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:41.517077923 CET	53	52998	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:41.709022045 CET	53	64126	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:42.274585009 CET	55430	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:42.274743080 CET	54232	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:42.301759958 CET	53	62979	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:42.569051027 CET	53	55430	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:42.646821976 CET	53	54232	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:43.234304905 CET	56611	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:43.234543085 CET	57435	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:43.386148930 CET	53	56611	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:43.534007072 CET	53	57435	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:44.191268921 CET	53264	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:44.191526890 CET	58264	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:44.226535082 CET	53	53264	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:44.226900101 CET	53	58264	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:45.194288015 CET	53158	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:45.194852114 CET	50274	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:45.200885057 CET	53	53158	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:45.201401949 CET	53	50274	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:45.877816916 CET	63582	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:45.877981901 CET	53928	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:45.889127970 CET	53	63582	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:45.892694950 CET	53	53928	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:46.423353910 CET	64534	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:46.423485041 CET	59265	53	192.168.2.4	1.1.1.1
Nov 11, 2024 07:02:46.431741953 CET	53	59265	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:46.587383986 CET	53	64534	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:53.651030064 CET	53	52210	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:54.383537054 CET	53	53592	162.159.36.2	192.168.2.4
Nov 11, 2024 07:02:54.826896906 CET	53	61287	1.1.1.1	192.168.2.4
Nov 11, 2024 07:02:59.274925947 CET	53	53819	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:18.244831085 CET	53	51306	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:40.698442936 CET	53	62615	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:41.028525114 CET	53	62360	1.1.1.1	192.168.2.4
Nov 11, 2024 07:03:42.915061951 CET	53	57027	1.1.1.1	192.168.2.4
Nov 11, 2024 07:04:10.385040998 CET	53	49891	1.1.1.1	192.168.2.4
Nov 11, 2024 07:04:51.943941116 CET	53	61340	1.1.1.1	192.168.2.4
Nov 11, 2024 07:04:54.568363905 CET	53	64727	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 11, 2024 07:02:42.647330999 CET	192.168.2.4	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable
Nov 11, 2024 07:02:43.534071922 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 11, 2024 07:02:28.053630114 CET	192.168.2.4	1.1.1.1	0xbcf2	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:41.413908958 CET	192.168.2.4	1.1.1.1	0x8519	Standard query (0)	www.druglibrary.net	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:41.414119005 CET	192.168.2.4	1.1.1.1	0xaf4e	Standard query (0)	www.druglibrary.net	65	IN (0x0001)	false
Nov 11, 2024 07:02:42.274585009 CET	192.168.2.4	1.1.1.1	0xa841	Standard query (0)	druglibrary.net	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:42.274743080 CET	192.168.2.4	1.1.1.1	0xb0d5	Standard query (0)	druglibrary.net	65	IN (0x0001)	false
Nov 11, 2024 07:02:43.234304905 CET	192.168.2.4	1.1.1.1	0xb152	Standard query (0)	igreen.green	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:43.234543085 CET	192.168.2.4	1.1.1.1	0xcc6d	Standard query (0)	igreen.green	65	IN (0x0001)	false
Nov 11, 2024 07:02:44.191268921 CET	192.168.2.4	1.1.1.1	0xe3f1	Standard query (0)	k7l8y.ltasetalty.com	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:44.191526890 CET	192.168.2.4	1.1.1.1	0xab69	Standard query (0)	k7l8y.ltasetalty.com	65	IN (0x0001)	false
Nov 11, 2024 07:02:45.194288015 CET	192.168.2.4	1.1.1.1	0x6b98	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:45.194852114 CET	192.168.2.4	1.1.1.1	0xd936	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 11, 2024 07:02:45.877816916 CET	192.168.2.4	1.1.1.1	0x9ec7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:45.877981901 CET	192.168.2.4	1.1.1.1	0xbceb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 11, 2024 07:02:46.423353910 CET	192.168.2.4	1.1.1.1	0x2b16	Standard query (0)	k7l8y.ltasetalty.com	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:46.423485041 CET	192.168.2.4	1.1.1.1	0x26f3	Standard query (0)	k7l8y.ltasetalty.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 11, 2024 07:02:27.939194918 CET	1.1.1.1	192.168.2.4	0xeaab	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:27.939194918 CET	1.1.1.1	192.168.2.4	0xeaab	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:28.061017990 CET	1.1.1.1	192.168.2.4	0xbcf2	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 11, 2024 07:02:41.709022045 CET	1.1.1.1	192.168.2.4	0x8519	No error (0)	www.druglibrary.net		67.223.102.74	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:42.569051027 CET	1.1.1.1	192.168.2.4	0xa841	No error (0)	druglibrary.net		67.223.102.74	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:43.386148930 CET	1.1.1.1	192.168.2.4	0xb152	No error (0)	igreen.green		108.179.211.77	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:44.226535082 CET	1.1.1.1	192.168.2.4	0xe3f1	No error (0)	k7l8y.ltasetalty.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:44.226535082 CET	1.1.1.1	192.168.2.4	0xe3f1	No error (0)	k7l8y.ltasetalty.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:44.226900101 CET	1.1.1.1	192.168.2.4	0xab69	No error (0)	k7l8y.ltasetalty.com			65	IN (0x0001)	false
Nov 11, 2024 07:02:45.200885057 CET	1.1.1.1	192.168.2.4	0x6b98	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:45.889127970 CET	1.1.1.1	192.168.2.4	0x9ec7	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:45.892694950 CET	1.1.1.1	192.168.2.4	0xbceb	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 11, 2024 07:02:46.431741953 CET	1.1.1.1	192.168.2.4	0x26f3	No error (0)	k7l8y.ltasetalty.com			65	IN (0x0001)	false
Nov 11, 2024 07:02:46.587383986 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	k7l8y.ltasetalty.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 11, 2024 07:02:46.587383986 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	k7l8y.ltasetalty.com		188.114.97.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

armmf.adobe.com

www.druglibrary.net

druglibrary.net

igreen.green

https:

k7l8y.ltasetalty.com

a.nel.cloudflare.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-11 06:02:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=38576 Date: Mon, 11 Nov 2024 06:02:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-11 06:02:23 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=38599 Date: Mon, 11 Nov 2024 06:02:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-11 06:02:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Ubm4Xc44Z1yWy52&MD=5rOSoczs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-11 06:02:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4b0edf6e-8254-404a-b0c4-a960e694b01b MS-RequestId: 1f800271-c1ab-4467-a664-f8245d637119 MS-CV: Nomt+OB7t0GwBubu.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Nov 2024 06:02:27 GMT Connection: close Content-Length: 24490
2024-11-11 06:02:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-11 06:02:28 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	23.47.168.24	443	7364	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:28 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-11-11 06:02:29 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Mon, 11 Nov 2024 06:02:29 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49753	67.223.102.74	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:42 UTC	749	OUT	GET /external.html?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1 Host: www.druglibrary.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:42 UTC	410	IN	HTTP/1.1 302 Found Date: Mon, 11 Nov 2024 06:02:22 GMT Server: Apache/2.4 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Location: https://druglibrary.net/cgi-bin/cgiwrap/druglibrary/external.pl?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com Content-Length: 391 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-11-11 06:02:42 UTC	391	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 72 75 67 6c 69 62 72 61 72 79 2e 6e 65 74 2f 63 67 69 2d 62 69 6e 2f 63 67 69 77 72 61 70 2f 64 72 75 67 6c 69 62 72 61 72 79 2f 65 78 74 65 72 6e 61 6c 2e 70 6c 3f 6c 69 6e 6b 3d 68 74 74 70 73 3a 2f 2f 69 67 72 65 65 6e 2e 67 72 65 65 6e 2f 2f 77 70 6b 2f 6f 70 74 2f 7a 74 6c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://druglibrary.net/cgi-bin/cgiwrap/druglibrary/external.pl?link=https://igreen.green//wpk/opt/ztl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	67.223.102.74	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:43 UTC	771	OUT	GET /cgi-bin/cgiwrap/druglibrary/external.pl?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1 Host: druglibrary.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:43 UTC	244	IN	HTTP/1.1 302 Found Date: Mon, 11 Nov 2024 06:02:23 GMT Server: Apache/2.4 Location: https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com Content-Length: 322 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-11-11 06:02:43 UTC	322	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 67 72 65 65 6e 2e 67 72 65 65 6e 2f 2f 77 70 6b 2f 6f 70 74 2f 7a 74 6c 2f 71 77 65 72 74 79 2f 76 65 6e 6b 61 74 65 73 68 40 67 65 6d 73 65 64 75 63 61 74 69 6f 6e 2e 63 6f 6d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com">here</a>.</p><hr><address>Apac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49756	108.179.211.77	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:43 UTC	702	OUT	GET //wpk/opt/ztl/qwerty/venkatesh@gemseducation.com HTTP/1.1 Host: igreen.green Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:44 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:02:43 GMT Server: Apache refresh: 0;url=https://k7l8y.ltasetalty.com/akuFd/#kvenkatesh@gemseducation.com Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-11 06:02:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	108.179.211.77	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:44 UTC	627	OUT	GET /favicon.ico HTTP/1.1 Host: igreen.green Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:45 UTC	331	IN	HTTP/1.1 302 Found Date: Mon, 11 Nov 2024 06:02:43 GMT Server: Apache Link: <https://igreen.green/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://igreen.green/wp-content/uploads/2021/08/favcon-150x150.png Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49761	188.114.97.3	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:45 UTC	687	OUT	GET /akuFd/ HTTP/1.1 Host: k7l8y.ltasetalty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://igreen.green/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:45 UTC	566	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Nov 2024 06:02:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e0c1340290f0c82-EWR
2024-11-11 06:02:45 UTC	803	IN	Data Raw: 31 31 35 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1156<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c Data Ascii: cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getEl
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: /access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-11-11 06:02:45 UTC	905	IN	Data Raw: 2e 32 30 36 2e 31 30 39 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f Data Ascii: .206.109</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-erro
2024-11-11 06:02:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49762	188.114.97.3	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:45 UTC	573	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: k7l8y.ltasetalty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://k7l8y.ltasetalty.com/akuFd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:45 UTC	411	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:02:45 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Wed, 06 Nov 2024 15:40:06 GMT ETag: "672b8dd6-5df3" Server: cloudflare CF-RAY: 8e0c1340ec4142c4-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Mon, 11 Nov 2024 08:02:45 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-11-11 06:02:45 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-11-11 06:02:45 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49764	35.190.80.1	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:45 UTC	553	OUT	OPTIONS /report/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://k7l8y.ltasetalty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:45 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 11 Nov 2024 06:02:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49767	35.190.80.1	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:46 UTC	490	OUT	POST /report/v4?s=6mSTIHypiFk4Kirb3NU5EhWZCBJ%2FnEYvMkIR4fTUdH2wDqAMExcFqdL7iKOFPtGKbKcSsEnDm7%2BCdNiqbQuLTcYAz38MpxEWLXhoEVcB9z%2FNQThNo07PZp6uTcdSP2ajkFV%2F8OvhPw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 417 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:46 UTC	417	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 30 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 67 72 65 65 6e 2e 67 72 65 65 6e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: [{"age":1,"body":{"elapsed_time":1000,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://igreen.green/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":"htt
2024-11-11 06:02:46 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 11 Nov 2024 06:02:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49768	188.114.97.3	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:46 UTC	659	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: k7l8y.ltasetalty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://k7l8y.ltasetalty.com/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:46 UTC	409	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:02:46 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Wed, 06 Nov 2024 15:40:06 GMT ETag: "672b8dd6-1c4" Server: cloudflare CF-RAY: 8e0c1347ab44426b-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Mon, 11 Nov 2024 08:02:46 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-11-11 06:02:46 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49772	188.114.97.3	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:47 UTC	602	OUT	GET /favicon.ico HTTP/1.1 Host: k7l8y.ltasetalty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://k7l8y.ltasetalty.com/akuFd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:47 UTC	852	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Nov 2024 06:02:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29aFLyRfPdr44YZJ5fejbFPLUhDC9YcITK%2B%2F%2Birmpd9iBjcuJJJ4MNuADcsYQRZ8qO8G9CcXygzd6KjDpHM6%2Fw0SMtmLF7ZZ1NU3HD8M%2FxFCztuLZpTp9Ko2FQrTAON%2FNAPt173GtA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e0c134dc9b84244-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1109&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1180&delivery_rate=2516072&cwnd=246&unsent_bytes=0&cid=7540fec18f58dc53&ts=189&x=0"
2024-11-11 06:02:47 UTC	517	IN	Data Raw: 32 38 38 62 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f Data Ascii: 288b<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" co
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: -height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0;
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 69 6e 3a 20 32 30 70 78 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 75 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 Data Ascii: in: 20px 0; font-size: 16px; } ul { display: inline-block; list-style: none outside none; margin: 0; padding: 0; } ul li { float: left; tex
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6e 66 6f 2d 69 74 65 6d 73 20 75 6c 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 61 73 6f 6e 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: align: left; } .additional-info-items ul li:first-child { padding: 20px; } .reason-text { font-size: 18px; } .contact-info { font-size:
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 51 6d 44 47 67 42 76 5a 6a 58 42 75 57 4e 32 67 6f 67 62 50 79 36 52 74 63 4f 65 6a 4e 50 78 46 6b 62 2b 43 45 59 68 48 43 66 6d 4a 36 44 51 53 68 66 45 47 66 4d 74 37 31 46 4f 50 67 70 45 31 50 48 4f 4d 54 45 59 38 6f 5a 33 79 43 72 32 55 74 69 49 6e 71 45 66 74 6a 33 69 4c 4d 31 38 41 66 73 75 2f 78 4b 76 39 42 34 51 55 7a 73 56 31 58 4b 46 54 7a 44 50 47 2b 4c 66 6f 4c 70 45 2f 4c 6a 4a 6e 7a 4f 30 38 51 43 41 75 67 4c 61 6c 4b 65 71 50 2f 6d 45 6d 57 36 51 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f 33 48 6e 79 43 37 74 31 35 6f 62 47 42 74 71 52 46 52 Data Ascii: QmDGgBvZjXBuWN2gogbPy6RtcOejNPxFkb+CEYhHCfmJ6DQShfEGfMt71FOPgpE1PHOMTEY8oZ3yCr2UtiInqEftj3iLM18Afsu/xKv9B4QUzsV1XKFTzDPG+LfoLpE/LjJnzO08QCAugLalKeqP/mEmW6Qj+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFR
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 51 64 59 2b 35 4e 4d 66 75 2f 32 32 38 50 6b 71 33 4e 5a 4e 4d 71 44 31 57 37 72 4d 6e 72 77 4a 65 51 45 6d 49 77 4b 73 61 63 4d 49 2f 54 56 4f 4c 6c 48 6a 51 6a 4d 31 59 56 74 56 51 33 52 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a 6d 42 41 65 32 62 39 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 59 37 70 34 38 35 45 53 41 56 6d 75 6c 64 76 7a 53 54 4b 77 32 Data Ascii: QdY+5NMfu/228Pkq3NZNMqD1W7rMnrwJeQEmIwKsacMI/TVOLlHjQjM1YVtVQ3RwhvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 61 79 49 53 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 74 68 2b 64 2b 70 68 63 69 38 46 4a 66 31 66 77 61 70 69 34 34 72 46 70 66 71 54 5a 41 6e 57 2b 4a 46 52 47 33 6b 66 39 34 5a 2b 73 53 71 64 52 31 55 49 69 49 2f 64 63 2f 42 36 4e 2f 4d 39 57 73 69 41 44 4f 30 30 41 33 51 55 30 68 6f 68 58 35 52 54 64 65 43 72 73 74 79 54 31 57 70 68 55 52 54 42 65 76 42 61 56 34 69 77 59 4a 47 47 63 74 52 44 43 Data Ascii: Cp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC
2024-11-11 06:02:47 UTC	1369	IN	Data Raw: 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 35 31 32 33 33 65 33 65 32 35 31 31 36 30 36 36 36 33 37 63 36 38 36 32 37 63 36 30 36 33 36 31 37 63 36 33 36 35 37 66 33 32 32 31 32 33 33 30 32 31 33 38 33 35 37 66 33 32 33 65 33 63 36 65 32 32 32 34 33 33 33 62 33 34 33 32 32 35 36 63 31 34 32 33 32 33 33 65 32 33 37 31 33 63 33 34 32 32 32 32 33 30 33 36 33 34 37 31 30 61 36 35 36 31 36 35 30 63 37 31 37 39 33 66 33 65 33 66 33 34 37 38 37 31 33 37 33 65 32 33 37 31 33 61 36 36 33 64 36 39 32 38 37 66 33 64 32 35 33 30 32 32 33 34 32 35 33 30 33 64 32 35 32 38 37 66 33 32 33 65 33 63 37 65 33 37 33 30 32 37 33 38 33 32 33 65 33 66 37 66 33 38 33 32 33 65 37 31 32 31 33 65 32 33 32 35 37 31 36 39 36 31 37 31 33 65 33 66 37 31 31 63 Data Ascii: cgi/l/email-protection#51233e3e25116066637c68627c6063617c63657f322123302138357f323e3c6e2224333b3432256c1423233e23713c342222303634710a6561650c71793f3e3f347871373e23713a663d69287f3d2530223425303d25287f323e3c7e37302738323e3f7f38323e71213e2325716961713e3f711c
2024-11-11 06:02:47 UTC	287	IN	Data Raw: 3d 22 63 50 61 6e 65 6c 2c 20 49 6e 63 2e 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 70 79 72 69 67 68 74 22 3e 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 20 63 50 61 6e 65 6c 2c 20 49 6e 63 2e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 6f 74 65 72 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e Data Ascii: ="cPanel, Inc." /> <div class="copyright">Copyright 2016 cPanel, Inc.</div> </a> </div> </footer> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min
2024-11-11 06:02:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49773	188.114.96.3	443	2208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:47 UTC	390	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: k7l8y.ltasetalty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-11 06:02:47 UTC	409	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:02:47 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Wed, 06 Nov 2024 15:40:06 GMT ETag: "672b8dd6-1c4" Server: cloudflare CF-RAY: 8e0c134ecb3d428f-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Mon, 11 Nov 2024 08:02:47 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-11-11 06:02:47 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	52598	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:02:55 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Ubm4Xc44Z1yWy52&MD=5rOSoczs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-11 06:02:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4ca21f93-32d4-478e-af9c-d61c0fcb2424 MS-RequestId: e3e0aa35-8f77-4923-9aa9-7b8117d40049 MS-CV: 1gxHLPnwHk+zQ3k0.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Nov 2024 06:02:54 GMT Connection: close Content-Length: 30005
2024-11-11 06:02:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-11 06:02:55 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	52602	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:10 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:10 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 09 Nov 2024 18:56:51 GMT ETag: "0x8DD00F04568BDCF" x-ms-request-id: a2ad2bd1-f01e-0096-27d5-3310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060310Z-174f7845968vwdr7hC1EWRsh3w00000004g000000000525s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:10 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-11 06:03:10 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	52603	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:11 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:11 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0eb2a1cd-301e-0020-44d5-336299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060311Z-174f7845968ljs8phC1EWRe6en00000004ag00000000a0ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:11 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	52604	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:11 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 45cb36d2-601e-0070-3cd5-33a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060311Z-174f78459685m244hC1EWRgp2c000000049g00000000d6d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	52605	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:11 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:11 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c8cfd17a-b01e-0053-1cd5-33cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060311Z-174f7845968nxc96hC1EWRspw8000000049g000000005dmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:11 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	52607	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:11 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 8317a370-b01e-0001-33d5-3346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060311Z-174f78459685m244hC1EWRgp2c00000004a000000000b59k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	52606	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:11 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:11 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 33d009d3-501e-007b-36d5-335ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060311Z-174f78459685m244hC1EWRgp2c00000004eg000000001n7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:11 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	52608	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1973b281-501e-0047-7bd5-33ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968cpnpfhC1EWR3afc000000042000000000ea1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	52610	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 55c0910e-d01e-0082-5dd5-33e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968v79b7hC1EWRu01s0000000470000000003kb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	52609	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 9a2bdabf-a01e-0053-27d5-338603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968swgbqhC1EWRmnb400000004s0000000002dbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	52612	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: feb354c0-101e-0079-0dd5-335913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968cdxdrhC1EWRg0en00000004gg0000000057mb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	52611	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 1815df8f-001e-0028-27d5-33c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968vqt9xhC1EWRgten00000004hg00000000933a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	52613	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: dc8e78b0-f01e-0085-35d5-3388ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968t42glhC1EWRa36w00000004ag000000002wes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	52617	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 2f59f113-901e-002a-1dd5-337a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f78459685726chC1EWRsnbg00000004n0000000004fez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	52615	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 5f7101d7-901e-0048-4fd5-33b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f784596886s2bhC1EWR743w00000004g000000000dk4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	52616	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1958a6a9-101e-0046-5bd5-3391b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968psccphC1EWRuz9s00000004u0000000004f4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	52614	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:12 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 87508168-a01e-0098-0bd5-338556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060312Z-174f7845968vwdr7hC1EWRsh3w00000004gg000000004er7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	52618	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 33d00c7b-501e-007b-28d5-335ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060313Z-174f78459685m244hC1EWRgp2c00000004c0000000006gbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	52620	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: cd0babfe-b01e-0002-56d5-331b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060313Z-174f7845968jrjrxhC1EWRmmrs00000004n0000000009q3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	52621	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:13 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 4e338842-401e-0016-31d5-3353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060313Z-174f78459685m244hC1EWRgp2c00000004b00000000098an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:13 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	52622	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 2f59f176-901e-002a-79d5-337a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060313Z-174f7845968pf68xhC1EWRr4h800000004wg0000000006sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	52619	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7eed3662-201e-003f-1ad5-336d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060313Z-174f7845968px8v7hC1EWR08ng00000004q000000000fnqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	52625	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 5f09de9a-701e-0050-70d5-336767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968swgbqhC1EWRmnb400000004rg000000003rkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	52623	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 31c5dc94-101e-008d-18d5-3392e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968pf68xhC1EWRr4h800000004u00000000052dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	52627	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 5d78e2d9-801e-00a0-72d5-332196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968psccphC1EWRuz9s00000004pg00000000ehws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	52624	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8377dd30-c01e-00a1-3ad5-337e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968px8v7hC1EWR08ng00000004p000000000k37b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	52626	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 95c6b661-501e-0078-17d5-3306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f784596886s2bhC1EWR743w00000004gg00000000bfkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	52629	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8e1dc95e-801e-007b-6ed5-33e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968glpgnhC1EWR7uec00000004t0000000000quc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	52628	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f5f8c6aa-e01e-0099-78d5-33da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968xlwnmhC1EWR0sv8000000049000000000e2qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	52631	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 1c99e56d-601e-0097-76d5-33f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968cdxdrhC1EWRg0en00000004eg000000009v65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	52632	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 602c134e-d01e-0049-04d5-33e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f7845968cdxdrhC1EWRg0en00000004d000000000enqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	52630	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:14 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 5fec14be-a01e-0021-75d5-33814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060314Z-174f78459684bddphC1EWRbht400000004c00000000003xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	52633	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 78b03680-101e-000b-4bd5-335e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968vwdr7hC1EWRsh3w00000004k00000000013wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	52634	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 186f8a49-401e-005b-46d5-339c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f78459685726chC1EWRsnbg00000004h000000000b49c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	52636	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 072c0228-901e-00ac-3ad5-33b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968nnm4mhC1EWR1rn400000004gg000000004qnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	52635	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5eaa081d-f01e-0099-68d5-339171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968jrjrxhC1EWRmmrs00000004n0000000009q50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	52637	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 8377dffe-c01e-00a1-6ad5-337e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968vwdr7hC1EWRsh3w00000004g00000000052ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	52641	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 1815e533-001e-0028-01d5-33c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968nnm4mhC1EWR1rn400000004k0000000001r10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	52639	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a7e44230-001e-0082-7dd5-335880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f78459685726chC1EWRsnbg00000004g000000000e4ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	52640	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 31c5dea7-101e-008d-51d5-3392e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968psccphC1EWRuz9s00000004p000000000gh3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	52638	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 642c93e8-001e-0014-7cd5-335151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f7845968glpgnhC1EWR7uec00000004ng00000000b3y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	52642	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:15 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c8358df5-201e-005d-53d5-33afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060315Z-174f784596886s2bhC1EWR743w00000004k0000000007f6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	52643	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:16 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:16 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 63eb2845-501e-00a3-1dd5-33c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060316Z-174f7845968qj8jrhC1EWRh41s00000004d000000000bmpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:16 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	52646	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:16 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:16 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: bdd7469a-701e-0053-5fd5-333a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060316Z-174f7845968qj8jrhC1EWRh41s00000004fg000000005sad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:16 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	52644	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:16 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 22e15e04-b01e-0070-3ed5-331cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060316Z-174f7845968frfdmhC1EWRxxbw00000004f000000000frue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	52645	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:16 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:16 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b80249cf-101e-0017-2bd5-3347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060316Z-174f7845968vqt9xhC1EWRgten00000004mg000000004utd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	52647	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 7cd113ea-e01e-0052-21d5-33d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060316Z-174f7845968psccphC1EWRuz9s00000004p000000000gh4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	52650	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 554aabf5-b01e-00ab-71d5-33dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f78459685726chC1EWRsnbg00000004n0000000004fkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	52651	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d9045dfb-101e-00a2-06d5-339f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968psccphC1EWRuz9s00000004ug000000003ftt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	52649	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c8358f32-201e-005d-77d5-33afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968frfdmhC1EWRxxbw00000004f000000000frv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	52652	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 01111fca-d01e-002b-41d5-3325fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f784596886s2bhC1EWR743w00000004pg000000000pnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	52648	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 77d57460-901e-0083-6dd5-33bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968v79b7hC1EWRu01s0000000470000000003kf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	52654	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 4e338e66-401e-0016-6fd5-3353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968swgbqhC1EWRmnb400000004rg000000003rp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	52657	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 4e338eb5-401e-0016-3ad5-3353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968pf68xhC1EWRr4h800000004vg000000001txr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	52656	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 6193c1ec-701e-000d-35d5-336de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968nxc96hC1EWRspw8000000045g00000000dy7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	52655	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1c14d510-c01e-0079-05d5-33e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968jrjrxhC1EWRmmrs00000004t0000000000ab2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	52653	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 65802b10-501e-000a-61d5-330180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060317Z-174f7845968xlwnmhC1EWR0sv800000004e00000000025pa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	52661	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: feb35d59-101e-0079-01d5-335913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968psccphC1EWRuz9s00000004rg00000000afqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	52659	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 87508ad6-a01e-0098-68d5-338556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968nnm4mhC1EWR1rn400000004fg000000006kch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	52662	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 30996da0-701e-006f-5cd5-33afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f78459685726chC1EWRsnbg00000004mg000000005whf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	52658	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: d9045f06-101e-00a2-02d5-339f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968px8v7hC1EWR08ng00000004wg0000000007ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	52660	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: aedf17c0-c01e-0046-3ad5-332db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968swgbqhC1EWRmnb400000004k000000000gwpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	52664	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 45a856d6-001e-0017-5bd5-330c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968v79b7hC1EWRu01s000000044g000000007xqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	52666	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 7cd1171a-e01e-0052-10d5-33d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968c2t8dhC1EWR8s2000000004b0000000002m81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	52667	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 16af1629-301e-0033-6dd5-33fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968j6t2phC1EWRcfe800000004tg0000000005n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	52665	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 954b4d19-301e-0052-53d5-3365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f784596886s2bhC1EWR743w00000004fg00000000eg5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	52663	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 648756f6-901e-0067-0fd5-33b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060318Z-174f7845968ljs8phC1EWRe6en000000048g00000000fsxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	52668	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2302a2aa-d01e-0017-0cd5-33b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060319Z-174f7845968c2t8dhC1EWR8s20000000049g000000004v7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	52669	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 9a2be61a-a01e-0053-3cd5-338603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060319Z-174f7845968pf68xhC1EWRr4h800000004v00000000032zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	52671	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 87508d14-a01e-0098-0ad5-338556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060319Z-174f7845968qj8jrhC1EWRh41s00000004c000000000dvex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	52670	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 87508d13-a01e-0098-09d5-338556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060319Z-174f7845968ljs8phC1EWRe6en00000004b0000000008ge4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	52672	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:19 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 7cd11897-e01e-0052-7bd5-33d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060319Z-174f7845968qj8jrhC1EWRh41s00000004b000000000hf2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	52673	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c056ec92-701e-001e-03d5-33f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968frfdmhC1EWRxxbw00000004m0000000006t3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	52674	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: b85e0199-b01e-0098-60d5-33cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968ljs8phC1EWRe6en00000004e0000000002ru2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	52676	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 63eb2b55-501e-00a3-51d5-33c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968j6t2phC1EWRcfe800000004tg0000000005p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	52677	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 27f4d8c4-701e-0032-2dd5-33a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968glpgnhC1EWR7uec00000004s0000000002g2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	52675	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 78b03aef-101e-000b-52d5-335e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968v79b7hC1EWRu01s000000047g0000000023wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	52679	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 7f4584eb-c01e-008e-75d5-337381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968vwdr7hC1EWRsh3w00000004eg000000008946 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	52678	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1c99ed40-601e-0097-39d5-33f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968c2t8dhC1EWR8s2000000004a00000000046ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	52681	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c08ebcb6-401e-0064-7bd5-3354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968jrjrxhC1EWRmmrs00000004r0000000003x2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	52680	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 5f7107d8-901e-0048-05d5-33b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968nxc96hC1EWRspw800000004b0000000002q4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	52682	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:20 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:20 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:20 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 99a87d01-601e-005c-42d5-33f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060320Z-174f7845968l4kp6hC1EWRe88400000004w0000000000vkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:20 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	52684	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:21 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c08ebcd4-401e-0064-18d5-3354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060321Z-174f7845968xlwnmhC1EWR0sv800000004eg0000000019kk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:21 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	52683	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9a2be917-a01e-0053-13d5-338603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060321Z-174f784596886s2bhC1EWR743w00000004g000000000dke1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	52685	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 1815edcd-001e-0028-0ed5-33c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060321Z-174f7845968px8v7hC1EWR08ng00000004vg0000000026q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	52687	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 1c14dccd-c01e-0079-70d5-33e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060321Z-174f7845968v79b7hC1EWRu01s0000000450000000006xtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	52686	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 1c14dce3-c01e-0079-04d5-33e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060321Z-174f7845968pf68xhC1EWRr4h800000004p000000000gnfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	52688	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:21 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 31c5e564-101e-008d-76d5-3392e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968glpgnhC1EWR7uec00000004qg000000005s61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	52689	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5ac3f5ac-801e-008f-14d5-332c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968glpgnhC1EWR7uec00000004n000000000c0u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	52690	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3ca8c4c6-201e-0096-0fd5-33ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f784596886s2bhC1EWR743w00000004e000000000k947 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	52691	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 55c09f61-d01e-0082-16d5-33e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968pf68xhC1EWRr4h800000004r000000000bx8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	52692	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 1c14ddc0-c01e-0079-51d5-33e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968swgbqhC1EWRmnb400000004r0000000004vd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	52693	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 904e9adf-b01e-003e-62d5-338e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968swgbqhC1EWRmnb400000004pg000000007uhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	52695	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: a04d8451-d01e-00ad-12d5-33e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968xlwnmhC1EWR0sv800000004a000000000bb7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	52696	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ca9795ec-a01e-006f-27d5-3313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968xlwnmhC1EWR0sv800000004e00000000025u5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	52694	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2f59fc8c-901e-002a-3cd5-337a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968l4kp6hC1EWRe88400000004qg00000000f009 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	52697	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:22 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ab1019be-501e-0035-43d5-33c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060322Z-174f7845968vwdr7hC1EWRsh3w00000004f00000000082kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	52698	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 41743bdd-f01e-003c-7cd5-338cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968nxc96hC1EWRspw80000000480000000008kvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	52701	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f458887-c01e-008e-47d5-337381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968jrjrxhC1EWRmmrs00000004k000000000f99q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	52699	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2302abc5-d01e-0017-53d5-33b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968v79b7hC1EWRu01s0000000460000000005fq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	52700	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: dc8e8528-f01e-0085-10d5-3388ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968nxc96hC1EWRspw800000004c0000000000sbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	52702	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: b29ecc16-801e-00a3-01d5-337cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968c2t8dhC1EWR8s20000000045g00000000eq6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	52703	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 65803071-501e-000a-4fd5-330180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968c2t8dhC1EWR8s20000000044g00000000h19s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	52705	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 1815f1f4-001e-0028-79d5-33c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968c2t8dhC1EWR8s2000000004ag000000002xvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	52706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 5ac3f861-801e-008f-21d5-332c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968nnm4mhC1EWR1rn400000004hg000000002sxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	52704	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 6de6115a-f01e-00aa-46d5-338521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968qj8jrhC1EWRh41s00000004kg0000000004x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	52707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:23 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b85e0691-b01e-0098-78d5-33cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060323Z-174f7845968psccphC1EWRuz9s00000004q000000000e0m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	52708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:24 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:24 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 2ce92287-101e-007a-6fd5-33047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060324Z-174f78459685726chC1EWRsnbg00000004ng000000002xck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:24 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	52709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:24 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:24 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 5fef6463-301e-0051-7dd5-3338bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060324Z-174f7845968cdxdrhC1EWRg0en00000004eg000000009vgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:24 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	52712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: e1eaf116-901e-005b-52d5-332005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060324Z-174f784596886s2bhC1EWR743w00000004hg00000000a0xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	52711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6565db8d-b01e-0084-61d5-33d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060324Z-174f78459685m244hC1EWRgp2c00000004ag00000000ar0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	52710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:24 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: d9046763-101e-00a2-1bd5-339f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060324Z-174f7845968qj8jrhC1EWRh41s00000004cg00000000cvyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	52713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 072c0cc7-901e-00ac-57d5-33b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968psccphC1EWRuz9s00000004sg000000007eqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	52714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 9a2bee4b-a01e-0053-62d5-338603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968j9dchhC1EWRfe7400000004dg000000003ggp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	52715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 54bb2358-d01e-0066-7cd5-33ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968xlwnmhC1EWR0sv8000000048000000000fxuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	52716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: bd8c52a0-d01e-0014-7ad5-33ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968vqt9xhC1EWRgten00000004fg00000000fuwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	52717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 7cd1200c-e01e-0052-1ad5-33d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968cpnpfhC1EWR3afc00000004700000000034x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	52718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 1958b31d-101e-0046-24d5-3391b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f784596886s2bhC1EWR743w00000004gg00000000bfyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	52719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c8cfe486-b01e-0053-1fd5-33cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f78459685726chC1EWRsnbg00000004p0000000002yvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	52721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8e1de54d-801e-007b-48d5-33e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968cpnpfhC1EWR3afc0000000480000000001azc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	52722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:25 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:25 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: aedf2b6e-c01e-0046-18d5-332db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060325Z-174f7845968j9dchhC1EWRfe74000000049000000000epyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:25 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	52723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 95c6c6ee-501e-0078-4dd5-3306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f78459685726chC1EWRsnbg00000004mg000000005wrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	52724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6193d0b2-701e-000d-6ed5-336de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f784596886s2bhC1EWR743w00000004mg000000004vf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	52725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 8e1de6bc-801e-007b-1bd5-33e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968frfdmhC1EWRxxbw00000004p00000000024ct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	52726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 22e16892-b01e-0070-78d5-331cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968frfdmhC1EWRxxbw00000004eg00000000hvr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	52727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 64875b8c-901e-0067-68d5-33b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968v79b7hC1EWRu01s000000044g000000007xz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	52728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: bdd760ac-701e-0053-09d5-333a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968frfdmhC1EWRxxbw00000004g000000000d8nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:26 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	52729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 63eb3078-501e-00a3-48d5-33c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968xlwnmhC1EWR0sv800000004bg000000007414 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	52730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:26 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:26 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5fef6650-301e-0051-3fd5-3338bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060326Z-174f7845968ljs8phC1EWRe6en00000004bg000000008m75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	52720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:27 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1973c9cd-501e-0047-1dd5-33ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060327Z-174f7845968n2hr8hC1EWR9cag000000041g00000000h748 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	52731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:27 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:27 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4e339af6-401e-0016-60d5-3353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060327Z-174f7845968v79b7hC1EWRu01s0000000450000000006xwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	52732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:27 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 30997c55-701e-006f-03d5-33afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060327Z-174f7845968n2hr8hC1EWR9cag00000004900000000004m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	52734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:27 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:27 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: f7a2637e-001e-0065-23d5-330b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060327Z-174f78459685m244hC1EWRgp2c00000004ag00000000ar2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	52733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:27 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 64875c1d-901e-0067-55d5-33b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060327Z-174f784596886s2bhC1EWR743w00000004pg000000000q1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-11 06:03:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	52735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-11 06:03:28 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-11 06:03:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 11 Nov 2024 06:03:28 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 8377f4f2-c01e-00a1-16d5-337e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241111T060328Z-174f7845968vqt9xhC1EWRgten00000004kg000000006q3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-11 06:03:28 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	01:02:13
Start date:	11/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Complete_with_DocuSign_49584.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	01:02:14
Start date:	11/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:02:15
Start date:	11/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1732,i,3706654091440507380,12489716021560546543,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	01:02:39
Start date:	11/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.druglibrary.net/external.html?link=https://igreen.green//wpk/opt/ztl/qwerty/venkatesh@gemseducation.com
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	01:02:40
Start date:	11/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2080,i,12731502939009632189,14396455718482454569,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Complete_with_DocuSign_49584.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8122d697-29f1-4b44-a9d6-5e15bb2b5b85.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241111060219Z-160.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

C:\Users\user\AppData\Local\Temp\MSI90a5d.LOG

Windows Analysis Report
Complete_with_DocuSign_49584.pdf